117.91.249.249

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
117.91.249.69	attackspambots	badbot	2019-11-22 14:47:03
117.91.249.101	attack	Forbidden directory scan :: 2019/10/21 22:41:49 [error] 57363#57363: *147140 access forbidden by rule, client: 117.91.249.101, server: [censored_1], request: "GET /.../exchange-2010-how-to-create-a-shared-mailbox HTTP/1.1", host: "www.[censored_1]"	2019-10-21 23:31:30
117.91.249.61	attack	Distributed brute force attack	2019-10-04 09:06:42

类型

评论内容

时间

117.91.249.69

attackspambots

badbot

2019-11-22 14:47:03

117.91.249.101

attack

Forbidden directory scan :: 2019/10/21 22:41:49 [error] 57363#57363: *147140 access forbidden by rule, client: 117.91.249.101, server: [censored_1], request: "GET /.../exchange-2010-how-to-create-a-shared-mailbox HTTP/1.1", host: "www.[censored_1]"

2019-10-21 23:31:30

117.91.249.61

attack

Distributed brute force attack

2019-10-04 09:06:42

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.91.249.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39080
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;117.91.249.249.			IN	A

;; AUTHORITY SECTION:
.			517	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 92 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 23:06:58 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

Host 249.249.91.117.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 249.249.91.117.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
194.180.224.130	attackbots	Multiple SSH authentication failures from 194.180.224.130	2020-07-01 21:30:04
132.232.120.145	attack	$f2bV_matches	2020-07-01 21:17:10
43.227.56.11	attackspam	Jun 30 20:34:21 ncomp sshd[24806]: Invalid user hadoop from 43.227.56.11 Jun 30 20:34:21 ncomp sshd[24806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.227.56.11 Jun 30 20:34:21 ncomp sshd[24806]: Invalid user hadoop from 43.227.56.11 Jun 30 20:34:23 ncomp sshd[24806]: Failed password for invalid user hadoop from 43.227.56.11 port 60032 ssh2	2020-07-01 21:40:30
179.188.7.7	attack	From bounce-35cd4d53be0cb40ec1d4b79cbb1257a1@smtplw-13.com Tue Jun 30 11:19:09 2020 Received: from smtp59t7f7.saaspmta0001.correio.biz ([179.188.7.7]:41758)	2020-07-01 21:39:37
74.82.47.45	attackspambots	Jun 30 18:01:59 debian-2gb-nbg1-2 kernel: \[15791556.801837\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=74.82.47.45 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=38674 DPT=631 WINDOW=65535 RES=0x00 SYN URGP=0	2020-07-01 21:14:23
27.71.204.187	attackspambots	[portscan] Port scan	2020-07-01 21:25:25
116.241.94.65	attackbotsspam	TCP (SYN) 116.241.94.65:51699 -> port 23, len 44	2020-07-01 21:49:11
59.80.34.110	attackbots	Jun 30 18:18:38 ajax sshd[5086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.80.34.110 Jun 30 18:18:40 ajax sshd[5086]: Failed password for invalid user test1 from 59.80.34.110 port 59158 ssh2	2020-07-01 21:24:26
192.210.192.165	attack	prod6 ...	2020-07-01 21:47:18
119.45.137.210	attackbotsspam	Invalid user ftpuser from 119.45.137.210 port 47702	2020-07-01 21:26:31
167.99.155.36	attackbotsspam	TCP (SYN) 167.99.155.36:47690 -> port 28560, len 44	2020-07-01 21:23:06
162.243.232.174	attack	Jun 30 20:23:09 zulu412 sshd\[1864\]: Invalid user timemachine from 162.243.232.174 port 40149 Jun 30 20:23:09 zulu412 sshd\[1864\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.232.174 Jun 30 20:23:11 zulu412 sshd\[1864\]: Failed password for invalid user timemachine from 162.243.232.174 port 40149 ssh2 ...	2020-07-01 21:17:36
198.71.235.73	attack	Automatic report - XMLRPC Attack	2020-07-01 21:05:23
51.91.212.79	attack	scans 3 times in preceeding hours on the ports (in chronological order) 6006 8140 3128 resulting in total of 3 scans from 51.91.212.0/24 block.	2020-07-01 21:52:20
92.63.196.26	attackbotsspam	06/30/2020-12:59:57.770598 92.63.196.26 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-07-01 21:08:34

最近上报的IP列表

117.91.249.24	117.91.249.230	117.91.249.254	117.91.249.241
117.91.249.3	117.91.249.29	117.91.249.253	117.91.249.34
114.234.106.166	117.91.249.37	117.91.249.27	117.91.249.4
117.91.249.65	117.91.249.44	117.91.249.80	117.91.249.38
117.91.249.70	117.91.249.66	117.91.249.59	114.234.106.17