254.111.130.77

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 254.111.130.77
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58514
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;254.111.130.77.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 08:45:00 CST 2025
;; MSG SIZE  rcvd: 107

HOST信息:

Host 77.130.111.254.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 77.130.111.254.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
54.39.151.22	attackbotsspam	Nov 10 10:39:54 legacy sshd[19215]: Failed password for root from 54.39.151.22 port 39638 ssh2 Nov 10 10:43:33 legacy sshd[19358]: Failed password for root from 54.39.151.22 port 48852 ssh2 Nov 10 10:47:02 legacy sshd[19438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.151.22 ...	2019-11-10 17:55:35
139.99.5.223	attackspam	2019-11-10T10:29:34.413912mail01 postfix/smtpd[28849]: warning: ip223.ip-139-99-5.net[139.99.5.223]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-10T10:29:41.418003mail01 postfix/smtpd[17098]: warning: ip223.ip-139-99-5.net[139.99.5.223]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-10T10:39:12.041723mail01 postfix/smtpd[31681]: warning: ip223.ip-139-99-5.net[139.99.5.223]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-11-10 18:24:42
117.197.126.130	attackbotsspam	2019-11-10 00:28:05 H=(luduslitterarius.it) [117.197.126.130]:35813 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.10, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/117.197.126.130) 2019-11-10 00:28:06 H=(luduslitterarius.it) [117.197.126.130]:35813 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3, 127.0.0.10) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-11-10 00:28:08 H=(luduslitterarius.it) [117.197.126.130]:35813 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.10, 127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/117.197.126.130) ...	2019-11-10 18:01:40
192.228.100.118	attackbots	Nov 10 01:19:02 xzibhostname postfix/smtpd[25326]: connect from unknown[192.228.100.118] Nov 10 01:19:02 xzibhostname postfix/smtpd[25326]: warning: unknown[192.228.100.118]: SASL LOGIN authentication failed: authentication failure Nov 10 01:19:02 xzibhostname postfix/smtpd[25326]: lost connection after AUTH from unknown[192.228.100.118] Nov 10 01:19:02 xzibhostname postfix/smtpd[25326]: disconnect from unknown[192.228.100.118] Nov 10 01:23:00 xzibhostname postfix/smtpd[25326]: connect from unknown[192.228.100.118] Nov 10 01:23:00 xzibhostname postfix/smtpd[25326]: warning: unknown[192.228.100.118]: SASL LOGIN authentication failed: authentication failure Nov 10 01:23:01 xzibhostname postfix/smtpd[23033]: connect from unknown[192.228.100.118] Nov 10 01:23:01 xzibhostname postfix/smtpd[25326]: lost connection after AUTH from unknown[192.228.100.118] Nov 10 01:23:01 xzibhostname postfix/smtpd[25326]: disconnect from unknown[192.228.100.118] Nov 10 01:23:01 xzibhostname po........ -------------------------------	2019-11-10 17:54:40
106.75.178.195	attackbots	SSH Bruteforce	2019-11-10 18:24:11
89.248.162.139	attackbots	Port Scan: TCP/8089	2019-11-10 18:26:40
185.176.27.54	attack	11/10/2019-04:57:59.768630 185.176.27.54 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-11-10 18:03:57
134.175.152.157	attackspambots	Nov 10 10:48:39 MK-Soft-VM6 sshd[5683]: Failed password for root from 134.175.152.157 port 54498 ssh2 ...	2019-11-10 18:25:02
5.2.158.227	attackbotsspam	Nov 10 09:50:56 web8 sshd\[26110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.2.158.227 user=root Nov 10 09:50:59 web8 sshd\[26110\]: Failed password for root from 5.2.158.227 port 43555 ssh2 Nov 10 09:55:57 web8 sshd\[28645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.2.158.227 user=root Nov 10 09:55:59 web8 sshd\[28645\]: Failed password for root from 5.2.158.227 port 19554 ssh2 Nov 10 10:00:50 web8 sshd\[30873\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.2.158.227 user=root	2019-11-10 18:07:23
154.221.24.135	attackspambots	Nov 9 06:36:00 penfold sshd[30727]: Invalid user guest from 154.221.24.135 port 55618 Nov 9 06:36:00 penfold sshd[30727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.24.135 Nov 9 06:36:01 penfold sshd[30727]: Failed password for invalid user guest from 154.221.24.135 port 55618 ssh2 Nov 9 06:36:01 penfold sshd[30727]: Received disconnect from 154.221.24.135 port 55618:11: Bye Bye [preauth] Nov 9 06:36:01 penfold sshd[30727]: Disconnected from 154.221.24.135 port 55618 [preauth] Nov 9 06:52:01 penfold sshd[18737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.24.135 user=r.r Nov 9 06:52:02 penfold sshd[18737]: Failed password for r.r from 154.221.24.135 port 40546 ssh2 Nov 9 06:52:02 penfold sshd[18737]: Received disconnect from 154.221.24.135 port 40546:11: Bye Bye [preauth] Nov 9 06:52:02 penfold sshd[18737]: Disconnected from 154.221.24.135 port 40546 [prea........ -------------------------------	2019-11-10 18:17:20
81.22.45.190	attack	Nov 10 11:07:23 h2177944 kernel: \[6256016.474063\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=49443 PROTO=TCP SPT=50026 DPT=55791 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 10 11:09:55 h2177944 kernel: \[6256168.753548\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=60587 PROTO=TCP SPT=50026 DPT=55894 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 10 11:11:47 h2177944 kernel: \[6256280.715671\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=25602 PROTO=TCP SPT=50026 DPT=56067 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 10 11:15:09 h2177944 kernel: \[6256481.988702\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=9621 PROTO=TCP SPT=50026 DPT=55898 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 10 11:15:38 h2177944 kernel: \[6256511.380625\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 L	2019-11-10 18:22:31
185.53.88.33	attackbots	\[2019-11-10 04:21:04\] NOTICE\[2601\] chan_sip.c: Registration from '"1000" \' failed for '185.53.88.33:5347' - Wrong password \[2019-11-10 04:21:04\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-10T04:21:04.141-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000",SessionID="0x7fdf2c73c4b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.33/5347",Challenge="11e139a4",ReceivedChallenge="11e139a4",ReceivedHash="dbd22d76f5f6f69cc02420f5c0e5ec3d" \[2019-11-10 04:21:04\] NOTICE\[2601\] chan_sip.c: Registration from '"1000" \' failed for '185.53.88.33:5347' - Wrong password \[2019-11-10 04:21:04\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-10T04:21:04.247-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000",SessionID="0x7fdf2ca50d88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/1	2019-11-10 18:02:32
222.186.180.41	attackbots	Nov 10 11:29:21 tux-35-217 sshd\[28010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41 user=root Nov 10 11:29:22 tux-35-217 sshd\[28010\]: Failed password for root from 222.186.180.41 port 35960 ssh2 Nov 10 11:29:26 tux-35-217 sshd\[28010\]: Failed password for root from 222.186.180.41 port 35960 ssh2 Nov 10 11:29:28 tux-35-217 sshd\[28010\]: Failed password for root from 222.186.180.41 port 35960 ssh2 ...	2019-11-10 18:32:27
166.62.45.39	attackbotsspam	fail2ban honeypot	2019-11-10 18:30:06
94.191.47.240	attackspam	SSH bruteforce (Triggered fail2ban)	2019-11-10 18:33:24

最近上报的IP列表

151.139.17.7	252.48.210.155	24.120.101.34	230.54.214.210
235.209.196.120	150.120.62.35	172.68.43.203	121.182.82.50
193.246.183.79	213.57.243.58	149.223.13.118	166.251.64.203
252.211.34.221	40.155.115.62	218.194.249.242	43.206.7.132
63.109.172.100	156.211.108.88	2.125.127.37	157.199.155.91