149.0.199.246 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Turkey

运营商(isp): Vodafone Telekomunikasyon A.S.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Mobile ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Jan 11 05:46:53 grey postfix/smtpd\[9288\]: NOQUEUE: reject: RCPT from unknown\[149.0.199.246\]: 554 5.7.1 Service unavailable\; Client host \[149.0.199.246\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[149.0.199.246\]\; from=\ to=\ proto=ESMTP helo=\<\[149.0.199.246\]\> ...	2020-01-11 20:44:33

类型

评论内容

时间

attackbotsspam

Jan 11 05:46:53 grey postfix/smtpd\[9288\]: NOQUEUE: reject: RCPT from unknown\[149.0.199.246\]: 554 5.7.1 Service unavailable\; Client host \[149.0.199.246\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[149.0.199.246\]\; from=\ to=\ proto=ESMTP helo=\<\[149.0.199.246\]\>
...

2020-01-11 20:44:33

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.0.199.246
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31233
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;149.0.199.246.			IN	A

;; AUTHORITY SECTION:
.			571	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011002 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 11 20:44:30 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 246.199.0.149.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 246.199.0.149.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
185.254.122.35	attackspam	Jul 26 05:58:33 h2177944 kernel: \[2437551.655315\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x20 TTL=245 ID=3596 PROTO=TCP SPT=51581 DPT=6368 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 26 06:01:20 h2177944 kernel: \[2437718.526580\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x20 TTL=245 ID=47488 PROTO=TCP SPT=51581 DPT=5002 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 26 06:05:28 h2177944 kernel: \[2437966.552959\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x20 TTL=245 ID=38794 PROTO=TCP SPT=51581 DPT=3509 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 26 06:07:38 h2177944 kernel: \[2438096.954542\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=61200 PROTO=TCP SPT=51581 DPT=4247 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 26 06:08:34 h2177944 kernel: \[2438152.744460\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.1	2019-07-26 13:39:05
218.164.71.24	attackbotsspam	Jul 24 03:08:26 localhost kernel: [15196299.558674] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=218.164.71.24 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=60117 PROTO=TCP SPT=58531 DPT=37215 WINDOW=33999 RES=0x00 SYN URGP=0 Jul 24 03:08:26 localhost kernel: [15196299.558704] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=218.164.71.24 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=60117 PROTO=TCP SPT=58531 DPT=37215 SEQ=758669438 ACK=0 WINDOW=33999 RES=0x00 SYN URGP=0 Jul 25 19:01:31 localhost kernel: [15339885.058713] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=218.164.71.24 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=21607 PROTO=TCP SPT=26941 DPT=37215 WINDOW=28966 RES=0x00 SYN URGP=0 Jul 25 19:01:31 localhost kernel: [15339885.058741] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=218.164.71.24 DST=[mungedIP2] LEN=40 TOS=0x0	2019-07-26 14:12:46
187.75.233.59	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-25 22:35:00,334 INFO [amun_request_handler] PortScan Detected on Port: 445 (187.75.233.59)	2019-07-26 13:52:24
94.195.157.209	attack	port scan and connect, tcp 23 (telnet)	2019-07-26 13:53:40
92.53.65.184	attackspambots	firewall-block, port(s): 4122/tcp	2019-07-26 13:27:13
198.108.67.82	attack	2211/tcp 3412/tcp 121/tcp... [2019-05-24/07-25]130pkt,117pt.(tcp)	2019-07-26 13:41:29
116.228.12.50	attackspam	Jul 26 01:15:41 aat-srv002 sshd[3036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.228.12.50 Jul 26 01:15:44 aat-srv002 sshd[3036]: Failed password for invalid user program from 116.228.12.50 port 39255 ssh2 Jul 26 01:18:27 aat-srv002 sshd[3113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.228.12.50 Jul 26 01:18:29 aat-srv002 sshd[3113]: Failed password for invalid user admin123 from 116.228.12.50 port 54160 ssh2 ...	2019-07-26 14:23:08
198.108.67.54	attackbots	Port scan: Attack repeated for 24 hours	2019-07-26 13:44:05
81.22.45.134	attack	Unauthorised access (Jul 26) SRC=81.22.45.134 LEN=40 TTL=248 ID=33231 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Jul 25) SRC=81.22.45.134 LEN=40 TTL=248 ID=58213 TCP DPT=3389 WINDOW=1024 SYN	2019-07-26 14:04:18
213.190.31.135	attackbots	Jul 26 08:07:31 s64-1 sshd[18742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.190.31.135 Jul 26 08:07:33 s64-1 sshd[18742]: Failed password for invalid user surya from 213.190.31.135 port 58288 ssh2 Jul 26 08:11:54 s64-1 sshd[18833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.190.31.135 ...	2019-07-26 14:17:50
14.98.22.30	attackspambots	Jul 26 07:55:50 meumeu sshd[29976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.98.22.30 Jul 26 07:55:52 meumeu sshd[29976]: Failed password for invalid user andrea from 14.98.22.30 port 43979 ssh2 Jul 26 08:01:06 meumeu sshd[30887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.98.22.30 ...	2019-07-26 14:12:27
46.44.171.67	attackbots	Jul 26 07:46:15 rpi sshd[638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.44.171.67 Jul 26 07:46:18 rpi sshd[638]: Failed password for invalid user xyz from 46.44.171.67 port 36226 ssh2	2019-07-26 13:56:35
60.191.239.235	attackspam	SSH Brute-Force on port 22	2019-07-26 13:45:09
198.108.67.81	attackspam	9102/tcp 9899/tcp 3407/tcp... [2019-05-24/07-25]125pkt,120pt.(tcp)	2019-07-26 13:47:09
121.190.197.205	attackbots	Invalid user postgres from 121.190.197.205 port 51415	2019-07-26 14:25:57

最近上报的IP列表

129.52.68.240	140.99.42.183	241.143.222.169	188.61.238.215
249.97.170.13	160.153.154.30	129.159.225.232	153.121.58.149
117.222.42.160	103.107.204.10	2.192.129.188	125.166.162.183
14.134.108.192	197.220.162.4	203.217.189.74	59.126.169.97
95.163.114.57	189.76.201.82	175.158.55.83	113.186.117.19