91.149.23.112 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Norway

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
91.149.235.200	attack	Jun 1 21:41:28 our-server-hostname postfix/smtpd[15982]: connect from unknown[91.149.235.200] Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun 1 21:41:33 our-server-hostname postfix/smtpd[15982]: too many errors after DATA from unknown[91.149.235.200] Jun 1 21:41:33 our-server-hostname postfix/smtpd[15982]: disconnect from unknown[91.149.235.200] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=91.149.235.200	2020-06-02 02:49:42
91.149.235.45	attack	May 5 19:12:32 our-server-hostname postfix/smtpd[7469]: connect from unknown[91.149.235.45] May x@x May 5 19:12:33 our-server-hostname postfix/smtpd[7469]: disconnect from unknown[91.149.235.45] May 5 19:14:16 our-server-hostname postfix/smtpd[7469]: connect from unknown[91.149.235.45] May x@x May x@x May x@x May x@x May x@x May x@x May x@x May x@x May 5 19:14:20 our-server-hostname postfix/smtpd[7469]: disconnect from unknown[91.149.235.45] May 5 19:14:32 our-server-hostname postfix/smtpd[7469]: connect from unknown[91.149.235.45] May x@x May x@x May x@x May x@x May x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=91.149.235.45	2020-05-05 17:35:33

类型

评论内容

时间

91.149.235.200

attack

Jun  1 21:41:28 our-server-hostname postfix/smtpd[15982]: connect from unknown[91.149.235.200]
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun  1 21:41:33 our-server-hostname postfix/smtpd[15982]: too many errors after DATA from unknown[91.149.235.200]
Jun  1 21:41:33 our-server-hostname postfix/smtpd[15982]: disconnect from unknown[91.149.235.200]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=91.149.235.200

2020-06-02 02:49:42

91.149.235.45

attack

May  5 19:12:32 our-server-hostname postfix/smtpd[7469]: connect from unknown[91.149.235.45]
May x@x
May  5 19:12:33 our-server-hostname postfix/smtpd[7469]: disconnect from unknown[91.149.235.45]
May  5 19:14:16 our-server-hostname postfix/smtpd[7469]: connect from unknown[91.149.235.45]
May x@x
May x@x
May x@x
May x@x
May x@x
May x@x
May x@x
May x@x
May  5 19:14:20 our-server-hostname postfix/smtpd[7469]: disconnect from unknown[91.149.235.45]
May  5 19:14:32 our-server-hostname postfix/smtpd[7469]: connect from unknown[91.149.235.45]
May x@x
May x@x
May x@x
May x@x
May x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=91.149.235.45

2020-05-05 17:35:33

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 91.149.23.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38978
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;91.149.23.112.			IN	A

;; AUTHORITY SECTION:
.			145	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020601 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 12:34:20 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 112.23.149.91.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

server can't find 91.149.23.112.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
121.122.103.35	attackbotsspam	Jun 25 11:41:24 mail sshd[13998]: Invalid user mazzoni from 121.122.103.35 Jun 25 11:41:24 mail sshd[13998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.103.35 Jun 25 11:41:24 mail sshd[13998]: Invalid user mazzoni from 121.122.103.35 Jun 25 11:41:26 mail sshd[13998]: Failed password for invalid user mazzoni from 121.122.103.35 port 30797 ssh2 Jun 25 11:45:05 mail sshd[19577]: Invalid user redmine from 121.122.103.35 ...	2019-06-26 00:34:13
59.92.170.28	attackspambots	Unauthorized connection attempt from IP address 59.92.170.28 on Port 445(SMB)	2019-06-26 01:17:28
142.44.164.251	attackbots	jannisjulius.de 142.44.164.251 \[25/Jun/2019:16:45:26 +0200\] "POST /wp-login.php HTTP/1.1" 200 6117 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" jannisjulius.de 142.44.164.251 \[25/Jun/2019:16:45:26 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4090 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-06-26 01:02:39
103.80.27.186	attackbots	SSH Brute Force, server-1 sshd[2720]: Failed password for invalid user wangzc from 103.80.27.186 port 44573 ssh2	2019-06-26 00:49:19
123.57.254.142	attackbotsspam	xmlrpc attack	2019-06-26 01:15:30
95.85.12.206	attackspam	Jun 25 08:47:52 mail sshd[8273]: Invalid user hh from 95.85.12.206 ...	2019-06-26 00:31:58
107.77.206.225	attackspambots	NAME : ATT-MOBILITY-LLC CIDR : 107.64.0.0/10 \| STATUS : 200 ROBOT {Looking for resource vulnerabilities} DDoS Attack USA - Washington - block certain countries :) IP: 107.77.206.225 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl	2019-06-26 01:23:14
122.4.43.149	attack	25.06.2019 08:46:54 - Login Fail on hMailserver Detected by ELinOX-hMail-A2F	2019-06-26 01:13:02
107.173.40.217	attackspam	$f2bV_matches	2019-06-26 00:57:13
124.104.145.179	attackspam	Unauthorized connection attempt from IP address 124.104.145.179 on Port 445(SMB)	2019-06-26 01:15:07
179.108.240.66	attack	SMTP-sasl brute force ...	2019-06-26 01:13:33
103.247.13.34	attackbotsspam	Threaten to reveal porn site viewing to friends/family on Twitter and Facebook. Received: from [103.247.13.34] (port=36087 helo=[ip-129-13-247.terabit.net.id]) by ns3055511.ip-193-70-8.eu with esmtpsa (TLSv1:ECDHE-RSA-AES256-SHA:256) (Exim 4.91) (envelope-from ) id 1helDl-00044V-SZ	2019-06-26 01:24:45
192.69.133.50	attackbots	$f2bV_matches	2019-06-26 00:35:53
93.46.63.100	attackspambots	DATE:2019-06-25 08:47:02, IP:93.46.63.100, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)	2019-06-26 01:06:35
92.100.39.94	attackspam	25.06.2019 06:48:40 Connection to port 8080 blocked by firewall	2019-06-26 00:40:28

最近上报的IP列表

121.40.192.14	170.106.203.202	43.128.202.244	54.36.88.227
162.62.224.179	159.223.40.234	187.87.13.149	201.16.243.140
167.71.67.59	87.103.245.145	189.207.21.164	183.167.88.70
1.116.69.188	107.172.0.117	47.98.184.38	49.235.232.69
45.153.160.137	89.44.128.185	91.221.219.13	90.187.0.185