49.85.140.196 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.85.140.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38562
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.85.140.196.			IN	A

;; AUTHORITY SECTION:
.			533	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061102 1800 900 604800 86400

;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 12 12:18:45 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 196.140.85.49.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 196.140.85.49.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
192.161.161.170	attack	Mar 7 22:49:59 hermescis postfix/smtpd[16317]: NOQUEUE: reject: RCPT from unknown[192.161.161.170]: 550 5.1.1 : Recipient address rejected:* from=<425@l.phiscamsk.casa> to= proto=ESMTP helo=	2020-03-08 07:38:11
121.11.111.243	attack	Mar 7 23:05:31 v22018076622670303 sshd\[26172\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.11.111.243 user=root Mar 7 23:05:34 v22018076622670303 sshd\[26172\]: Failed password for root from 121.11.111.243 port 50768 ssh2 Mar 7 23:09:10 v22018076622670303 sshd\[26265\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.11.111.243 user=root ...	2020-03-08 07:12:31
222.186.173.215	attackbotsspam	Mar 7 20:03:30 firewall sshd[11136]: Failed password for root from 222.186.173.215 port 31284 ssh2 Mar 7 20:03:30 firewall sshd[11136]: error: maximum authentication attempts exceeded for root from 222.186.173.215 port 31284 ssh2 [preauth] Mar 7 20:03:30 firewall sshd[11136]: Disconnecting: Too many authentication failures [preauth] ...	2020-03-08 07:12:06
5.189.151.188	attackspambots	...	2020-03-08 07:21:07
222.186.180.147	attackbots	Mar 7 13:25:39 php1 sshd\[28232\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.147 user=root Mar 7 13:25:41 php1 sshd\[28232\]: Failed password for root from 222.186.180.147 port 6330 ssh2 Mar 7 13:25:57 php1 sshd\[28271\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.147 user=root Mar 7 13:25:59 php1 sshd\[28271\]: Failed password for root from 222.186.180.147 port 27288 ssh2 Mar 7 13:26:19 php1 sshd\[28305\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.147 user=root	2020-03-08 07:31:51
91.183.149.230	attack	(imapd) Failed IMAP login from 91.183.149.230 (BE/Belgium/230.149-183-91.adsl-static.isp.belgacom.be): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Mar 8 01:39:31 ir1 dovecot[4133960]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=91.183.149.230, lip=5.63.12.44, TLS, session=	2020-03-08 07:02:34
45.143.220.164	attack	[2020-03-07 17:56:26] NOTICE[1148] chan_sip.c: Registration from '"1601" ' failed for '45.143.220.164:5126' - Wrong password [2020-03-07 17:56:26] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-07T17:56:26.267-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1601",SessionID="0x7fd82c40d3d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.164/5126",Challenge="10db4086",ReceivedChallenge="10db4086",ReceivedHash="5b7c70e7f26436e200aca76caf55c1db" [2020-03-07 17:56:26] NOTICE[1148] chan_sip.c: Registration from '"1601" ' failed for '45.143.220.164:5126' - Wrong password [2020-03-07 17:56:26] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-07T17:56:26.418-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1601",SessionID="0x7fd82ca9d388",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-03-08 07:20:39
121.178.212.67	attackbots	Mar 7 23:52:47 * sshd[31794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.178.212.67 Mar 7 23:52:48 * sshd[31794]: Failed password for invalid user zhongyan from 121.178.212.67 port 52882 ssh2	2020-03-08 07:09:40
5.53.124.181	attackbotsspam	SMTP Brute-Force	2020-03-08 07:18:07
93.7.142.11	attackbotsspam	Multiport scan 2 ports : 80(x2) 8080	2020-03-08 07:44:55
213.32.90.232	attack	Mar 7 23:59:50 ift sshd\[46557\]: Invalid user storm from 213.32.90.232Mar 7 23:59:52 ift sshd\[46557\]: Failed password for invalid user storm from 213.32.90.232 port 55918 ssh2Mar 8 00:04:33 ift sshd\[47271\]: Invalid user d from 213.32.90.232Mar 8 00:04:34 ift sshd\[47271\]: Failed password for invalid user d from 213.32.90.232 port 53552 ssh2Mar 8 00:09:13 ift sshd\[47884\]: Invalid user lingqi from 213.32.90.232 ...	2020-03-08 07:10:50
95.130.181.11	attackbotsspam	$f2bV_matches	2020-03-08 07:36:33
45.66.62.7	attack	Mar 7 23:11:32 sshd[29151]: Failed password for invalid user ts3bot from 45.66.62.7 port 46624 ssh2	2020-03-08 07:39:32
80.244.179.6	attackbots	web-1 [ssh] SSH Attack	2020-03-08 07:40:22
187.162.121.93	attackspambots	Automatic report - Port Scan Attack	2020-03-08 07:26:40

最近上报的IP列表

137.226.18.70	137.226.16.91	80.88.88.149	49.204.221.1
138.68.103.136	137.226.18.25	159.89.4.23	137.226.18.20
137.226.18.48	137.226.18.46	137.226.16.231	52.156.2.107
137.226.17.206	137.226.17.205	44.234.42.55	137.226.17.8
137.226.17.222	137.226.18.44	137.226.17.233	46.144.38.49