199.195.250.29

基本信息:

城市(city): Buffalo

省份(region): New York

国家(country): United States

运营商(isp): Frantech Solutions

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Tor exit node	2020-05-28 06:41:38

相同子网IP讨论:

IP	类型	评论内容	时间
199.195.250.247	attack	2020-10-09T01:32:15.183966amanda2.illicoweb.com sshd\[37542\]: Invalid user admin from 199.195.250.247 port 49378 2020-10-09T01:32:15.186692amanda2.illicoweb.com sshd\[37542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.195.250.247 2020-10-09T01:32:16.938873amanda2.illicoweb.com sshd\[37542\]: Failed password for invalid user admin from 199.195.250.247 port 49378 ssh2 2020-10-09T01:32:17.618414amanda2.illicoweb.com sshd\[37546\]: Invalid user admin from 199.195.250.247 port 53982 2020-10-09T01:32:17.621415amanda2.illicoweb.com sshd\[37546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.195.250.247 ...	2020-10-09 07:38:31
199.195.250.247	attackbotsspam	sshguard	2020-10-09 00:10:30
199.195.250.247	attack	2020-10-07T22:44:18.386896amanda2.illicoweb.com sshd\[20618\]: Invalid user admin from 199.195.250.247 port 43180 2020-10-07T22:44:18.390397amanda2.illicoweb.com sshd\[20618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.195.250.247 2020-10-07T22:44:20.199359amanda2.illicoweb.com sshd\[20618\]: Failed password for invalid user admin from 199.195.250.247 port 43180 ssh2 2020-10-07T22:44:20.875065amanda2.illicoweb.com sshd\[20620\]: Invalid user admin from 199.195.250.247 port 47224 2020-10-07T22:44:20.877580amanda2.illicoweb.com sshd\[20620\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.195.250.247 ...	2020-10-08 04:57:04
199.195.250.247	attackbots	2020-10-07T15:18:45+0200 Failed SSH Authentication/Brute Force Attack.(Server 2)	2020-10-07 21:19:41
199.195.250.247	attack	TCP (SYN) 199.195.250.247:36633 -> port 22, len 48	2020-10-07 13:06:49
199.195.250.77	attackbots	suspicious action Sat, 22 Feb 2020 10:12:20 -0300	2020-02-22 22:38:29
199.195.250.77	attack	02/18/2020-14:21:53.601094 199.195.250.77 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 45	2020-02-19 02:50:41
199.195.250.111	attack	CloudCIX Reconnaissance Scan Detected, PTR: .	2019-11-21 08:12:21
199.195.250.77	attackspam	xmlrpc attack	2019-10-22 23:53:20
199.195.250.77	attack	Automatic report - Web App Attack	2019-06-22 12:21:24

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 199.195.250.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35553
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;199.195.250.29.			IN	A

;; AUTHORITY SECTION:
.			523	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052702 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 28 06:41:29 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 29.250.195.199.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 29.250.195.199.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
113.220.216.205	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 541451888aabeb8d \| WAF_Rule_ID: 1aff1cdfeb5c4074965d7cd85bfc1d4e \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:41:54
221.13.12.76	attack	The IP has triggered Cloudflare WAF. CF-Ray: 540f93225ff46d34 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:20:21
106.59.245.89	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5412d20c7e14e516 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/4.066686748 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:06:27
182.138.163.252	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 54138c9a4ad0e80d \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.081397758 Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:10:48
119.178.186.39	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5415b2251d8fe7ad \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; Sicent; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:26:17
115.192.210.246	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 5416c80a8887e4fa \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:14:47
104.248.117.234	attackspambots	Dec 7 22:01:09 web8 sshd\[24206\]: Invalid user test from 104.248.117.234 Dec 7 22:01:09 web8 sshd\[24206\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.117.234 Dec 7 22:01:11 web8 sshd\[24206\]: Failed password for invalid user test from 104.248.117.234 port 49072 ssh2 Dec 7 22:06:27 web8 sshd\[26671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.117.234 user=root Dec 7 22:06:29 web8 sshd\[26671\]: Failed password for root from 104.248.117.234 port 59210 ssh2	2019-12-08 06:16:23
123.157.193.90	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5414fd088d57939a \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: theme-suka.skk.moe \| User-Agent: Mozilla/4.066686748 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:12:36
49.88.112.76	attack	2019-12-07T22:30:40.377747abusebot-3.cloudsearch.cf sshd\[14694\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.76 user=root	2019-12-08 06:33:30
150.255.2.207	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5416d7c0ccfbd342 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/5.0101097241 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:24:54
106.11.155.72	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5415a3d57e8b76fe \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: theme-suka.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:07:32
124.234.199.26	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 54103e889c1ce79c \| WAF_Rule_ID: a75424b44a1e4f27881d03344a122815 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: api.skk.moe \| User-Agent: QQ%E6%B5%8F%E8%A7%88%E5%99%A8/9.9.0.4282 CFNetwork/1120 Darwin/19.0.0 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:12:02
49.7.3.101	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 540f761cdafceb3d \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 7.0; zh-CN; KNT-AL10 Build/HUAWEIKNT-AL10) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.5.5.1035 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:33:51
123.145.12.212	attack	The IP has triggered Cloudflare WAF. CF-Ray: 541104d0ae0c5120 \| WAF_Rule_ID: 1025440 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: theme-suka.skk.moe \| User-Agent: Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:40:31
112.193.168.191	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 5413f626be816c68 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/4.047745454 Mozilla/4.0 (compatible; MSIE 5.00; Windows 98) \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:15:31

最近上报的IP列表

217.175.241.118	102.139.89.111	80.109.165.16	191.98.223.15
63.111.107.30	204.60.75.232	90.161.104.61	62.42.56.62
140.105.105.106	173.178.241.74	62.72.213.116	76.190.83.91
110.61.144.251	220.173.89.59	49.111.99.96	75.176.55.63
116.231.50.160	66.199.167.35	108.37.90.140	45.188.1.134