81.92.249.138 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Slovakia

运营商(isp): RadioLAN spol. s r.o.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.	2020-03-19 13:29:35

相同子网IP讨论:

IP	类型	评论内容	时间
81.92.249.137	attack	email spam	2020-04-11 20:16:09
81.92.249.132	attackspam	spam	2020-01-22 17:06:39
81.92.249.131	attackbots	email spam	2019-11-05 22:04:59
81.92.249.136	attackspambots	Sep 10 03:19:18 smtp postfix/smtpd[83512]: NOQUEUE: reject: RCPT from rev-81-92-249-136.radiolan.sk[81.92.249.136]: 554 5.7.1 Service unavailable; Client host [81.92.249.136] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/81.92.249.136 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= Sep 10 03:19:19 smtp postfix/smtpd[83512]: NOQUEUE: reject: RCPT from rev-81-92-249-136.radiolan.sk[81.92.249.136]: 554 5.7.1 Service unavailable; Client host [81.92.249.136] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/81.92.249.136 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= ...	2019-09-10 13:50:22
81.92.249.130	attack	Jun 21 14:18:15 our-server-hostname postfix/smtpd[22412]: connect from unknown[81.92.249.130] Jun x@x Jun x@x Jun x@x Jun x@x Jun 21 14:18:18 our-server-hostname postfix/smtpd[22412]: lost connection after RCPT from unknown[81.92.249.130] Jun 21 14:18:18 our-server-hostname postfix/smtpd[22412]: disconnect from unknown[81.92.249.130] Jun 21 14:18:47 our-server-hostname postfix/smtpd[26476]: connect from unknown[81.92.249.130] Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun 21 14:18:58 our-server-hostname postfix/smtpd[26476]: too many errors after RCPT from unknown[81.92.249.130] Jun 21 14:18:58 our-server-hostname postfix/smtpd[26476]: disconnect from unknown[81.92.249.130] Jun 21 17:00:08 our-server-hostname postfix/smtpd[17769]: connect from unknown[81.92.249.130] Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Ju........ -------------------------------	2019-06-23 07:53:20

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.92.249.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32713
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.92.249.138.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031900 1800 900 604800 86400

;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 19 13:29:26 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

138.249.92.81.in-addr.arpa domain name pointer rev-81-92-249-138.radiolan.sk.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
138.249.92.81.in-addr.arpa	name = rev-81-92-249-138.radiolan.sk.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
201.63.60.170	attackspam	Unauthorised access (Oct 15) SRC=201.63.60.170 LEN=52 TOS=0x10 PREC=0x40 TTL=115 ID=32718 DF TCP DPT=445 WINDOW=8192 SYN	2019-10-16 05:59:30
77.35.67.162	attack	445/tcp [2019-10-15]1pkt	2019-10-16 06:01:52
185.254.121.237	attack	ED meds spam	2019-10-16 05:55:56
124.156.50.96	attackspam	" "	2019-10-16 06:24:32
92.114.119.231	attackbotsspam	Automatic report - Port Scan Attack	2019-10-16 06:09:29
122.115.230.183	attackbotsspam	2019-10-15T21:34:26.693073abusebot-3.cloudsearch.cf sshd\[27074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.115.230.183 user=root	2019-10-16 05:59:53
51.75.255.166	attackspambots	Oct 15 23:22:27 vps01 sshd[18606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.255.166 Oct 15 23:22:29 vps01 sshd[18606]: Failed password for invalid user gadfly from 51.75.255.166 port 36782 ssh2	2019-10-16 06:00:13
60.21.174.224	attackbotsspam	34567/tcp [2019-10-15]1pkt	2019-10-16 06:00:29
185.86.13.213	attackbots	Attempted WordPress login: "GET /wp-login.php"	2019-10-16 06:01:12
186.226.216.6	attack	8080/tcp [2019-10-15]1pkt	2019-10-16 06:23:42
62.210.245.70	attackbotsspam	Probing for vulnerable PHP code /s9omr916.php	2019-10-16 05:55:06
122.121.104.34	attackspam	23/tcp [2019-10-15]1pkt	2019-10-16 06:25:19
80.211.179.154	attackbotsspam	Oct 15 17:42:04 ny01 sshd[2396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.179.154 Oct 15 17:42:06 ny01 sshd[2396]: Failed password for invalid user test from 80.211.179.154 port 33350 ssh2 Oct 15 17:49:10 ny01 sshd[3080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.179.154	2019-10-16 05:50:49
45.83.66.67	attackbotsspam	port scan and connect, tcp 23 (telnet)	2019-10-16 06:14:33
119.30.125.235	attackspam	Automatic report - Port Scan Attack	2019-10-16 05:53:34

最近上报的IP列表

41.234.59.248	185.220.101.143	156.203.66.92	104.167.4.250
83.23.200.66	121.201.18.103	2.87.138.48	180.76.177.237
34.214.180.30	104.248.160.58	191.35.22.107	156.223.44.99
173.52.47.254	63.40.16.47	159.65.13.233	211.218.245.66
156.199.124.104	135.10.234.42	191.33.218.70	34.77.65.175