49.7.6.149 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Telecom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5432126d29039941 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; BKL-AL20 Build/HUAWEIBKL-AL20) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.7.6.1056 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 06:53:26

类型

评论内容

时间

attackspam

The IP has triggered Cloudflare WAF. CF-Ray: 5432126d29039941 | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: jschallenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; BKL-AL20 Build/HUAWEIBKL-AL20) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.7.6.1056 Mobile Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 06:53:26

相同子网IP讨论:

IP	类型	评论内容	时间
49.7.65.4	attackspam	Jun 10 05:52:30 piServer sshd[21803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.7.65.4 Jun 10 05:52:32 piServer sshd[21803]: Failed password for invalid user findirektor from 49.7.65.4 port 53536 ssh2 Jun 10 05:55:35 piServer sshd[22148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.7.65.4 ...	2020-06-10 12:16:18
49.7.6.237	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 540f72317ec6e798 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; MI 6 Build/PKQ1.190118.001) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.7.6.1056 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:06:02
49.7.6.161	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 540f724b994deb59 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; MI 6 Build/PKQ1.190118.001) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.7.6.1056 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 00:26:36
49.7.61.82	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-10-25 07:36:04

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.7.6.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51275
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.7.6.149.			IN	A

;; AUTHORITY SECTION:
.			515	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121101 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 12 06:53:21 CST 2019
;; MSG SIZE  rcvd: 114

HOST信息:

Host 149.6.7.49.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 100.100.2.136, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 149.6.7.49.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
211.195.117.212	attackspam	Aug 15 16:41:25 icinga sshd[7148]: Failed password for sync from 211.195.117.212 port 47258 ssh2 ...	2019-08-16 01:08:57
212.83.184.217	attackbots	\[2019-08-15 13:03:00\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '212.83.184.217:2747' - Wrong password \[2019-08-15 13:03:00\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-15T13:03:00.153-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="94585",SessionID="0x7ff4d0155c88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.184.217/50658",Challenge="7ce77d6d",ReceivedChallenge="7ce77d6d",ReceivedHash="7c57bc3e2a2dacfba3e9174de606eaef" \[2019-08-15 13:03:48\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '212.83.184.217:2699' - Wrong password \[2019-08-15 13:03:48\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-15T13:03:48.632-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="98176",SessionID="0x7ff4d07952f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.	2019-08-16 01:24:40
178.46.136.122	attackbots	IMAP brute force ...	2019-08-16 00:30:14
35.245.145.147	attackspambots	Automatic report - Banned IP Access	2019-08-16 01:06:35
191.184.100.33	attack	Aug 15 16:21:37 herz-der-gamer sshd[13847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.184.100.33 user=root Aug 15 16:21:38 herz-der-gamer sshd[13847]: Failed password for root from 191.184.100.33 port 37571 ssh2 ...	2019-08-16 01:21:53
129.211.117.47	attack	Aug 15 17:59:07 eventyay sshd[30242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.117.47 Aug 15 17:59:10 eventyay sshd[30242]: Failed password for invalid user toni from 129.211.117.47 port 44324 ssh2 Aug 15 18:05:17 eventyay sshd[31799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.117.47 ...	2019-08-16 00:21:19
85.12.254.245	attackspambots	proto=tcp . spt=39792 . dpt=25 . (listed on Github Combined on 3 lists ) (390)	2019-08-16 01:27:34
221.223.39.95	attack	SSH/22 MH Probe, BF, Hack -	2019-08-16 00:59:30
58.213.128.106	attackbots	Automatic report - Banned IP Access	2019-08-16 01:23:29
167.71.162.252	attack	15.08.2019 11:23:22 - RDP Login Fail Detected by https://www.elinox.de/RDP-Wächter	2019-08-16 00:12:19
218.92.0.191	attack	2019-08-15T15:08:49.388794abusebot-8.cloudsearch.cf sshd\[15857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.191 user=root	2019-08-16 00:28:55
90.188.40.74	attack	proto=tcp . spt=36863 . dpt=25 . (listed on Github Combined on 4 lists ) (399)	2019-08-16 00:45:53
94.128.82.14	attackbotsspam	Brute force attempt	2019-08-16 00:29:46
104.131.29.92	attackbotsspam	Aug 15 16:43:21 marvibiene sshd[4016]: Invalid user user from 104.131.29.92 port 50343 Aug 15 16:43:21 marvibiene sshd[4016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.29.92 Aug 15 16:43:21 marvibiene sshd[4016]: Invalid user user from 104.131.29.92 port 50343 Aug 15 16:43:23 marvibiene sshd[4016]: Failed password for invalid user user from 104.131.29.92 port 50343 ssh2 ...	2019-08-16 00:56:13
27.166.201.128	attack	Splunk® : port scan detected: Aug 15 05:22:21 testbed kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=27.166.201.128 DST=104.248.11.191 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=12191 DF PROTO=TCP SPT=38348 DPT=5555 WINDOW=14600 RES=0x00 SYN URGP=0	2019-08-16 01:03:31

最近上报的IP列表

221.0.23.24	220.181.108.80	220.181.51.124	220.181.51.70
218.62.245.127	211.97.22.58	182.138.163.234	171.34.177.14
205.62.117.210	158.69.160.191	29.63.110.192	75.179.171.150
14.179.221.186	208.53.188.247	150.255.10.169	53.125.157.25
67.221.43.199	39.88.28.81	2.189.16.69	150.255.0.11