212.138.97.254

基本信息:

城市(city): Ta’if

省份(region): Makkah

国家(country): Saudi Arabia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.138.97.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53439
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;212.138.97.254.			IN	A

;; AUTHORITY SECTION:
.			418	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023050500 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 05 16:45:02 CST 2023
;; MSG SIZE  rcvd: 107

HOST信息:

254.97.138.212.in-addr.arpa domain name pointer mx1.tu.edu.sa.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
254.97.138.212.in-addr.arpa	name = mx1.tu.edu.sa.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
118.166.113.117	attackbots	port scan and connect, tcp 23 (telnet)	2020-02-23 03:19:40
54.36.106.204	attack	[2020-02-22 14:13:37] NOTICE[1148] chan_sip.c: Registration from '' failed for '54.36.106.204:55443' - Wrong password [2020-02-22 14:13:37] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-22T14:13:37.874-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="12345678",SessionID="0x7fd82cc0d5f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/54.36.106.204/55443",Challenge="0db483f4",ReceivedChallenge="0db483f4",ReceivedHash="6691c79fe87d5a57cf391d5d96f1ab7c" [2020-02-22 14:14:59] NOTICE[1148] chan_sip.c: Registration from '' failed for '54.36.106.204:65204' - Wrong password [2020-02-22 14:14:59] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-22T14:14:59.286-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="123456789",SessionID="0x7fd82c80d368",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4 ...	2020-02-23 03:20:12
31.145.101.250	attackbotsspam	20/2/22@11:47:50: FAIL: Alarm-Network address from=31.145.101.250 ...	2020-02-23 03:34:42
171.244.51.119	attackspam	$f2bV_matches	2020-02-23 03:06:26
58.216.137.170	attackspambots	DATE:2020-02-22 17:47:34, IP:58.216.137.170, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc)	2020-02-23 03:46:17
107.170.87.82	attack	Feb 22 17:46:00 ns382633 sshd\[32491\]: Invalid user gpadmin from 107.170.87.82 port 39993 Feb 22 17:46:00 ns382633 sshd\[32491\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.87.82 Feb 22 17:46:02 ns382633 sshd\[32491\]: Failed password for invalid user gpadmin from 107.170.87.82 port 39993 ssh2 Feb 22 17:55:15 ns382633 sshd\[1324\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.87.82 user=root Feb 22 17:55:17 ns382633 sshd\[1324\]: Failed password for root from 107.170.87.82 port 33743 ssh2	2020-02-23 03:42:41
122.116.63.93	attackspam	2020-02-22T17:22:01.239790host3.slimhost.com.ua sshd[2105171]: Invalid user azureuser from 122.116.63.93 port 37110 2020-02-22T17:22:01.246646host3.slimhost.com.ua sshd[2105171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122-116-63-93.hinet-ip.hinet.net 2020-02-22T17:22:01.239790host3.slimhost.com.ua sshd[2105171]: Invalid user azureuser from 122.116.63.93 port 37110 2020-02-22T17:22:03.469107host3.slimhost.com.ua sshd[2105171]: Failed password for invalid user azureuser from 122.116.63.93 port 37110 ssh2 2020-02-22T17:48:22.170121host3.slimhost.com.ua sshd[2122570]: Invalid user pop from 122.116.63.93 port 37276 ...	2020-02-23 03:18:42
129.204.205.125	attack	Feb 22 19:59:51 sd-53420 sshd\[12289\]: Invalid user nagios from 129.204.205.125 Feb 22 19:59:51 sd-53420 sshd\[12289\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.205.125 Feb 22 19:59:53 sd-53420 sshd\[12289\]: Failed password for invalid user nagios from 129.204.205.125 port 49014 ssh2 Feb 22 20:01:44 sd-53420 sshd\[13712\]: User root from 129.204.205.125 not allowed because none of user's groups are listed in AllowGroups Feb 22 20:01:44 sd-53420 sshd\[13712\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.205.125 user=root ...	2020-02-23 03:14:59
45.143.220.184	attack	firewall-block, port(s): 21/tcp	2020-02-23 03:25:10
198.71.230.47	attackbots	Automatic report - XMLRPC Attack	2020-02-23 03:23:28
67.166.254.205	attack	Feb 22 20:00:14 vps691689 sshd[20114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.166.254.205 Feb 22 20:00:16 vps691689 sshd[20114]: Failed password for invalid user ro0t from 67.166.254.205 port 46272 ssh2 ...	2020-02-23 03:14:08
203.177.1.108	attackspam	Feb 21 23:53:38 server sshd\[7936\]: Invalid user liwei from 203.177.1.108 Feb 21 23:53:38 server sshd\[7936\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.177.1.108 Feb 21 23:53:41 server sshd\[7936\]: Failed password for invalid user liwei from 203.177.1.108 port 47162 ssh2 Feb 22 19:47:37 server sshd\[1688\]: Invalid user krishna from 203.177.1.108 Feb 22 19:47:37 server sshd\[1688\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.177.1.108 ...	2020-02-23 03:41:26
185.166.119.140	attack	1582391229 - 02/22/2020 18:07:09 Host: 185.166.119.140/185.166.119.140 Port: 23 TCP Blocked	2020-02-23 03:44:30
37.255.187.200	attack	Fail2Ban Ban Triggered	2020-02-23 03:33:46
182.50.132.106	attackspambots	Automatic report - XMLRPC Attack	2020-02-23 03:21:51

最近上报的IP列表

103.30.86.227	131.112.125.200	10.7.207.24	140.116.40.230
223.202.213.47	140.116.213.209	202.67.40.15	69.45.30.176
140.116.162.7	115.178.221.23	140.116.82.118	140.116.77.107
130.159.236.1	140.116.101.1	114.142.173.38	130.91.45.250
120.114.100.20	128.163.209.180	140.116.178.57	140.138.181.237