167.249.20.1 - IPInfo

基本信息:

城市(city): San Miguel

省份(region): San Miguel

国家(country): El Salvador

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
167.249.206.35	attack	Jan 11 05:49:22 grey postfix/smtpd\[9288\]: NOQUEUE: reject: RCPT from ip167-249-206-35.mentrix.com.br\[167.249.206.35\]: 554 5.7.1 Service unavailable\; Client host \[167.249.206.35\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[167.249.206.35\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-11 18:48:12
167.249.206.13	attack	Port Scan	2019-10-23 20:57:17

类型

评论内容

时间

167.249.206.35

attack

Jan 11 05:49:22 grey postfix/smtpd\[9288\]: NOQUEUE: reject: RCPT from ip167-249-206-35.mentrix.com.br\[167.249.206.35\]: 554 5.7.1 Service unavailable\; Client host \[167.249.206.35\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[167.249.206.35\]\; from=\ to=\ proto=ESMTP helo=\
...

2020-01-11 18:48:12

167.249.206.13

attack

Port Scan

2019-10-23 20:57:17

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 167.249.20.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31309
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;167.249.20.1.			IN	A

;; AUTHORITY SECTION:
.			226	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023080900 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 10 01:59:07 CST 2023
;; MSG SIZE  rcvd: 105

HOST信息:

Host 1.20.249.167.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 1.20.249.167.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
106.13.65.18	attackspam	Nov 21 15:46:44 localhost sshd\[13258\]: Invalid user gupta from 106.13.65.18 port 35696 Nov 21 15:46:44 localhost sshd\[13258\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.65.18 Nov 21 15:46:47 localhost sshd\[13258\]: Failed password for invalid user gupta from 106.13.65.18 port 35696 ssh2	2019-11-22 06:36:11
150.223.30.130	attackspam	Invalid user sibiga from 150.223.30.130 port 39746	2019-11-22 06:07:36
64.190.91.203	attackbotsspam	Nov 21 19:16:34 XXXXXX sshd[14849]: Invalid user fransen from 64.190.91.203 port 42754	2019-11-22 06:35:10
63.88.23.151	attack	63.88.23.151 was recorded 14 times by 8 hosts attempting to connect to the following ports: 80. Incident counter (4h, 24h, all-time): 14, 88, 521	2019-11-22 06:11:21
118.24.119.134	attackspambots	Nov 21 19:06:15 hosting sshd[15215]: Invalid user peicheng from 118.24.119.134 port 46670 ...	2019-11-22 06:31:42
185.68.145.2	attackbots	Unauthorized connection attempt from IP address 185.68.145.2 on Port 445(SMB)	2019-11-22 06:22:23
129.208.209.47	attackspam	Unauthorized connection attempt from IP address 129.208.209.47 on Port 445(SMB)	2019-11-22 06:20:16
138.94.160.57	attack	Invalid user wwwrun from 138.94.160.57 port 54046 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.94.160.57 Failed password for invalid user wwwrun from 138.94.160.57 port 54046 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.94.160.57 user=news Failed password for news from 138.94.160.57 port 33694 ssh2	2019-11-22 06:04:01
187.188.251.219	attack	Nov 21 15:47:02 herz-der-gamer sshd[23756]: Invalid user bakka from 187.188.251.219 port 32880 Nov 21 15:47:02 herz-der-gamer sshd[23756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.188.251.219 Nov 21 15:47:02 herz-der-gamer sshd[23756]: Invalid user bakka from 187.188.251.219 port 32880 Nov 21 15:47:05 herz-der-gamer sshd[23756]: Failed password for invalid user bakka from 187.188.251.219 port 32880 ssh2 ...	2019-11-22 06:19:24
106.201.92.91	attack	Nov 21 18:18:05 taivassalofi sshd[94420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.201.92.91 Nov 21 18:18:07 taivassalofi sshd[94420]: Failed password for invalid user bhalla from 106.201.92.91 port 45182 ssh2 ...	2019-11-22 06:07:01
188.190.221.155	attack	Unauthorized connection attempt from IP address 188.190.221.155 on Port 445(SMB)	2019-11-22 06:37:29
200.20.182.2	attackbotsspam	Unauthorized connection attempt from IP address 200.20.182.2 on Port 445(SMB)	2019-11-22 06:17:12
218.92.0.191	attack	Nov 21 23:06:44 dcd-gentoo sshd[14642]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Nov 21 23:06:47 dcd-gentoo sshd[14642]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Nov 21 23:06:44 dcd-gentoo sshd[14642]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Nov 21 23:06:47 dcd-gentoo sshd[14642]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Nov 21 23:06:44 dcd-gentoo sshd[14642]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Nov 21 23:06:47 dcd-gentoo sshd[14642]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Nov 21 23:06:47 dcd-gentoo sshd[14642]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 55838 ssh2 ...	2019-11-22 06:14:08
50.127.71.5	attackbots	SSH Brute Force, server-1 sshd[12921]: Failed password for invalid user rootadministrator from 50.127.71.5 port 39220 ssh2	2019-11-22 06:36:40
177.106.49.213	attackbotsspam	Unauthorized connection attempt from IP address 177.106.49.213 on Port 445(SMB)	2019-11-22 06:42:49

最近上报的IP列表

167.249.20.13	113.190.54.236	132.147.202.74	242.129.246.114
155.111.148.119	217.91.231.254	71.140.13.210	174.85.233.112
213.233.110.203	222.10.96.11	36.82.98.152	63.95.240.158
77.220.32.242	183.253.225.247	95.111.194.65	57.199.245.218
39.108.187.166	181.46.164.19	181.143.201.80	186.143.201.80