131.49.52.239 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.49.52.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21210
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;131.49.52.239.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021401 1800 900 604800 86400

;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 11:25:21 CST 2025
;; MSG SIZE  rcvd: 106

HOST信息:

b'Host 239.52.49.131.in-addr.arpa not found: 2(SERVFAIL)
'

NSLOOKUP信息:

server can't find 131.49.52.239.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
46.61.130.238	attack	46.61.130.238 (RU/Russia/Krasnodarskiy/Estosadok (Slantsevyy Rudnik)/-), 3 distributed imapd attacks on account [robert@webpods.com] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Apr 17 15:17:45 server dovecot: imap-login: Disconnected (auth failed, 1 attempts in 33 secs): user=, method=PLAIN, rip=171.103.160.214, lip=69.195.129.243, TLS, session= Apr 17 15:23:59 server dovecot: imap-login: Disconnected (auth failed, 1 attempts in 24 secs): user=, method=PLAIN, rip=46.61.130.238, lip=69.195.129.243, TLS: Disconnected, session= Apr 17 15:18:17 server dovecot: imap-login: Disconnected (auth failed, 1 attempts in 15 secs): user=, method=PLAIN, rip=183.89.212.77, lip=69.195.129.243, TLS: Disconnected, session=<7Vd3aIGjh+23WdRN> IP Addresses Blocked: 171.103.160.214 (TH/Thailand/Bangkok/Bangkok (Khwaeng Din Daeng)/171-103-160-214.static.asianet.co.th)	2020-04-18 03:34:39
211.103.222.147	attackbotsspam	Apr 17 21:16:08 vserver sshd\[18366\]: Invalid user admin from 211.103.222.147Apr 17 21:16:10 vserver sshd\[18366\]: Failed password for invalid user admin from 211.103.222.147 port 36602 ssh2Apr 17 21:17:42 vserver sshd\[18386\]: Failed password for root from 211.103.222.147 port 35867 ssh2Apr 17 21:24:06 vserver sshd\[18465\]: Failed password for root from 211.103.222.147 port 54387 ssh2 ...	2020-04-18 03:33:20
134.122.14.163	attack	Port scan: Attack repeated for 24 hours	2020-04-18 03:13:04
89.46.65.62	attackbots	Port Scan: Events[1] countPorts[1]: 22 ..	2020-04-18 03:13:38
123.157.115.253	attackspambots	DATE:2020-04-17 14:00:06, IP:123.157.115.253, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2020-04-18 03:15:37
35.199.73.100	attack	Bruteforce detected by fail2ban	2020-04-18 03:31:10
71.6.220.101	attackspambots	$f2bV_matches	2020-04-18 03:40:57
77.232.100.146	attackbots	Apr 17 12:17:19 new sshd[25770]: Failed password for invalid user mh from 77.232.100.146 port 58720 ssh2 Apr 17 12:17:19 new sshd[25770]: Received disconnect from 77.232.100.146: 11: Bye Bye [preauth] Apr 17 12:29:14 new sshd[29145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.100.146 user=r.r Apr 17 12:29:15 new sshd[29145]: Failed password for r.r from 77.232.100.146 port 47014 ssh2 Apr 17 12:29:15 new sshd[29145]: Received disconnect from 77.232.100.146: 11: Bye Bye [preauth] Apr 17 12:33:21 new sshd[30427]: Failed password for invalid user ftpuser from 77.232.100.146 port 58492 ssh2 Apr 17 12:33:21 new sshd[30427]: Received disconnect from 77.232.100.146: 11: Bye Bye [preauth] Apr 17 12:37:16 new sshd[31691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.100.146 user=r.r Apr 17 12:37:18 new sshd[31691]: Failed password for r.r from 77.232.100.146 port 41726 ssh2 Apr........ -------------------------------	2020-04-18 03:40:36
190.89.188.128	attackbots	Apr 17 16:08:20 ns382633 sshd\[30868\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.89.188.128 user=root Apr 17 16:08:22 ns382633 sshd\[30868\]: Failed password for root from 190.89.188.128 port 36775 ssh2 Apr 17 16:44:26 ns382633 sshd\[6526\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.89.188.128 user=root Apr 17 16:44:29 ns382633 sshd\[6526\]: Failed password for root from 190.89.188.128 port 51658 ssh2 Apr 17 16:50:59 ns382633 sshd\[8297\]: Invalid user test from 190.89.188.128 port 51596 Apr 17 16:50:59 ns382633 sshd\[8297\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.89.188.128	2020-04-18 03:10:02
89.120.0.60	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-04-18 03:10:43
154.204.27.162	attack	Apr 17 21:24:09 vmd17057 sshd[6339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.204.27.162 Apr 17 21:24:11 vmd17057 sshd[6339]: Failed password for invalid user mf from 154.204.27.162 port 43242 ssh2 ...	2020-04-18 03:29:49
222.186.173.238	attackspam	Apr 17 21:38:01 MainVPS sshd[9003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238 user=root Apr 17 21:38:03 MainVPS sshd[9003]: Failed password for root from 222.186.173.238 port 3386 ssh2 Apr 17 21:38:15 MainVPS sshd[9003]: error: maximum authentication attempts exceeded for root from 222.186.173.238 port 3386 ssh2 [preauth] Apr 17 21:38:01 MainVPS sshd[9003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238 user=root Apr 17 21:38:03 MainVPS sshd[9003]: Failed password for root from 222.186.173.238 port 3386 ssh2 Apr 17 21:38:15 MainVPS sshd[9003]: error: maximum authentication attempts exceeded for root from 222.186.173.238 port 3386 ssh2 [preauth] Apr 17 21:38:19 MainVPS sshd[9267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238 user=root Apr 17 21:38:20 MainVPS sshd[9267]: Failed password for root from 222.186.173.238 port 15378 ssh2 .	2020-04-18 03:43:42
222.186.175.182	attackbotsspam	prod3 ...	2020-04-18 03:11:12
110.35.79.23	attack	$f2bV_matches	2020-04-18 03:38:09
103.101.52.43	attackbots	Wordpress Admin Login attack	2020-04-18 03:39:55

最近上报的IP列表

154.233.53.232	19.1.53.240	50.59.190.118	25.10.250.108
217.116.230.185	50.171.79.88	225.102.233.1	133.63.178.49
31.186.176.100	69.151.25.182	205.76.80.4	188.8.146.68
95.33.178.58	235.212.41.6	165.57.162.163	157.188.155.43
235.97.119.103	165.107.159.61	148.243.240.179	139.33.59.210