249.197.158.139

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): IANA Special-Purpose Address

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 249.197.158.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29960
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;249.197.158.139.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020301 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 03:23:33 CST 2025
;; MSG SIZE  rcvd: 108

HOST信息:

Host 139.158.197.249.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.158.197.249.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
191.189.30.241	attack	Sep 23 09:17:22 game-panel sshd[11956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.189.30.241 Sep 23 09:17:23 game-panel sshd[11956]: Failed password for invalid user operator from 191.189.30.241 port 59026 ssh2 Sep 23 09:23:40 game-panel sshd[12172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.189.30.241	2019-09-23 17:29:11
192.186.16.125	attackbots	SMB Server BruteForce Attack	2019-09-23 17:33:15
190.191.194.9	attackbotsspam	Sep 23 09:11:14 ip-172-31-62-245 sshd\[23334\]: Invalid user andy from 190.191.194.9\ Sep 23 09:11:15 ip-172-31-62-245 sshd\[23334\]: Failed password for invalid user andy from 190.191.194.9 port 56756 ssh2\ Sep 23 09:15:33 ip-172-31-62-245 sshd\[23372\]: Invalid user beheerder from 190.191.194.9\ Sep 23 09:15:35 ip-172-31-62-245 sshd\[23372\]: Failed password for invalid user beheerder from 190.191.194.9 port 40881 ssh2\ Sep 23 09:19:53 ip-172-31-62-245 sshd\[23399\]: Invalid user dncin from 190.191.194.9\	2019-09-23 17:42:50
77.247.110.222	attackbots	scan z	2019-09-23 17:35:50
195.154.48.30	attack	\[2019-09-23 04:55:39\] NOTICE\[2270\] chan_sip.c: Registration from '\' failed for '195.154.48.30:54775' - Wrong password \[2019-09-23 04:55:39\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-23T04:55:39.813-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="50000",SessionID="0x7fcd8c57a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.48.30/54775",Challenge="4a461f08",ReceivedChallenge="4a461f08",ReceivedHash="2b84409cf2da0d52868d710be43b5f93" \[2019-09-23 04:59:22\] NOTICE\[2270\] chan_sip.c: Registration from '\' failed for '195.154.48.30:53657' - Wrong password \[2019-09-23 04:59:22\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-23T04:59:22.136-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="542",SessionID="0x7fcd8c57a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.4	2019-09-23 17:11:23
157.245.107.180	attack	Sep 23 05:51:45 herz-der-gamer sshd[11665]: Invalid user rrobinson from 157.245.107.180 port 60536 ...	2019-09-23 17:18:27
51.158.167.187	attackspambots	WordPress login Brute force / Web App Attack on client site.	2019-09-23 17:23:24
118.24.8.84	attack	Sep 23 12:07:51 saschabauer sshd[1215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.8.84 Sep 23 12:07:53 saschabauer sshd[1215]: Failed password for invalid user test from 118.24.8.84 port 34634 ssh2	2019-09-23 18:11:13
180.168.16.6	attackspambots	Sep 23 05:24:20 XXX sshd[32228]: Invalid user snatch from 180.168.16.6 port 14466	2019-09-23 17:11:08
79.137.35.70	attackbots	Sep 23 05:51:15 ns41 sshd[24692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.35.70 Sep 23 05:51:15 ns41 sshd[24692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.35.70	2019-09-23 17:39:53
106.12.56.88	attack	Sep 23 10:42:58 saschabauer sshd[23130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.56.88 Sep 23 10:43:00 saschabauer sshd[23130]: Failed password for invalid user open from 106.12.56.88 port 53706 ssh2	2019-09-23 17:17:00
49.88.112.110	attack	Sep 23 05:47:41 *** sshd[21135]: User root from 49.88.112.110 not allowed because not listed in AllowUsers	2019-09-23 17:15:57
42.115.125.232	attackspam	CMS brute force ...	2019-09-23 17:28:25
159.203.197.170	attack	" "	2019-09-23 17:28:07
84.24.140.167	attack	[MonSep2305:51:08.0210872019][:error][pid25717:tid46955294148352][client84.24.140.167:48237][client84.24.140.167]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles$disablethisruleifyourequireaccesstofilesthatendwith.sql$"][severity"CRITICAL"][hostname"tokiopiano.ch"][uri"/1/dump.sql"][unique_id"XYhBLADgIX5DjwvIF8RW-wAAAJM"][MonSep2305:51:14.0899382019][:error][pid25718:tid46955294148352][client84.24.140.167:48535][client84.24.140.167]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles$disablethisruleifyourequireaccesstofilesthatendwith.sql$"][se	2019-09-23 17:40:23

最近上报的IP列表

155.135.187.161	23.13.131.120	30.93.165.80	33.156.253.135
60.131.197.173	30.187.2.22	13.137.22.139	34.67.194.217
91.200.39.145	30.100.14.147	33.197.132.109	155.133.129.20
31.197.103.20	199.10.33.195	14.180.180.135	24.3.6.250
59.155.136.28	37.203.141.50	12.161.23.192	67.14.67.134