116.49.240.5 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Hong Kong Telecommunications (HKT) Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	port scan and connect, tcp 23 (telnet)	2019-08-29 04:42:40

相同子网IP讨论:

IP	类型	评论内容	时间
116.49.240.123	attack	Unauthorized connection attempt detected from IP address 116.49.240.123 to port 5555 [J]	2020-01-27 01:33:45

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.49.240.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11751
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.49.240.5.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082802 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 29 04:42:35 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

5.240.49.116.in-addr.arpa domain name pointer n11649240005.netvigator.com.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
5.240.49.116.in-addr.arpa	name = n11649240005.netvigator.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
5.196.72.11	attackspambots	$f2bV_matches	2020-10-01 22:52:12
66.41.236.80	attackbotsspam	[f2b] sshd bruteforce, retries: 1	2020-10-01 22:59:17
187.149.137.250	attackspam	Invalid user admin from 187.149.137.250 port 54959	2020-10-01 23:24:55
82.65.19.181	attackspam	2020-10-01T11:49:58.843516abusebot-8.cloudsearch.cf sshd[7083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-65-19-181.subs.proxad.net user=root 2020-10-01T11:50:00.417111abusebot-8.cloudsearch.cf sshd[7083]: Failed password for root from 82.65.19.181 port 50400 ssh2 2020-10-01T11:55:01.779623abusebot-8.cloudsearch.cf sshd[7085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-65-19-181.subs.proxad.net user=root 2020-10-01T11:55:03.950697abusebot-8.cloudsearch.cf sshd[7085]: Failed password for root from 82.65.19.181 port 43094 ssh2 2020-10-01T11:58:37.700148abusebot-8.cloudsearch.cf sshd[7092]: Invalid user victoria from 82.65.19.181 port 51606 2020-10-01T11:58:37.709830abusebot-8.cloudsearch.cf sshd[7092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-65-19-181.subs.proxad.net 2020-10-01T11:58:37.700148abusebot-8.cloudsearch.cf sshd[7092]: Invalid us ...	2020-10-01 23:11:04
95.181.172.138	attackbots	TCP (SYN) 95.181.172.138:45941 -> port 22, len 44	2020-10-01 22:57:40
216.245.209.230	attack	TCP (SYN) 216.245.209.230:52202 -> port 23, len 40	2020-10-01 23:26:20
185.58.195.232	attack	2020-10-01T14:38:11.772679vps1033 sshd[15509]: Failed password for root from 185.58.195.232 port 9461 ssh2 2020-10-01T14:40:26.150202vps1033 sshd[20464]: Invalid user user6 from 185.58.195.232 port 48593 2020-10-01T14:40:26.158832vps1033 sshd[20464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.58.195.232 2020-10-01T14:40:26.150202vps1033 sshd[20464]: Invalid user user6 from 185.58.195.232 port 48593 2020-10-01T14:40:28.190380vps1033 sshd[20464]: Failed password for invalid user user6 from 185.58.195.232 port 48593 ssh2 ...	2020-10-01 22:43:26
119.28.93.152	attackbots	$f2bV_matches	2020-10-01 23:15:17
139.199.123.152	attack	Oct 1 16:17:36 minden010 sshd[16176]: Failed password for root from 139.199.123.152 port 58348 ssh2 Oct 1 16:23:18 minden010 sshd[17971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.123.152 Oct 1 16:23:19 minden010 sshd[17971]: Failed password for invalid user lsfadmin from 139.199.123.152 port 33668 ssh2 ...	2020-10-01 23:19:18
110.49.70.248	attackspam	Oct 1 16:07:16 sshgateway sshd\[15133\]: Invalid user testing1 from 110.49.70.248 Oct 1 16:07:16 sshgateway sshd\[15133\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.70.248 Oct 1 16:07:18 sshgateway sshd\[15133\]: Failed password for invalid user testing1 from 110.49.70.248 port 34828 ssh2	2020-10-01 22:50:30
193.33.240.91	attackbots	Invalid user indra from 193.33.240.91 port 58664	2020-10-01 23:11:36
192.35.169.59	attackspambots	trying to access non-authorized port	2020-10-01 23:24:11
173.242.115.171	attackspam	Oct 1 13:22:42 rancher-0 sshd[401279]: Invalid user test1 from 173.242.115.171 port 42662 ...	2020-10-01 22:54:40
106.37.223.54	attackspambots	Oct 1 13:27:54 xeon sshd[45484]: Failed password for invalid user musicbot from 106.37.223.54 port 44199 ssh2	2020-10-01 23:05:32
103.99.189.17	attack	Oct 1 13:12:43 mail.srvfarm.net postfix/smtps/smtpd[3882226]: warning: unknown[103.99.189.17]: SASL PLAIN authentication failed: Oct 1 13:12:44 mail.srvfarm.net postfix/smtps/smtpd[3882226]: lost connection after AUTH from unknown[103.99.189.17] Oct 1 13:18:19 mail.srvfarm.net postfix/smtps/smtpd[3882224]: warning: unknown[103.99.189.17]: SASL PLAIN authentication failed: Oct 1 13:18:19 mail.srvfarm.net postfix/smtps/smtpd[3882224]: lost connection after AUTH from unknown[103.99.189.17] Oct 1 13:21:41 mail.srvfarm.net postfix/smtps/smtpd[3882225]: warning: unknown[103.99.189.17]: SASL PLAIN authentication failed:	2020-10-01 23:16:17

最近上报的IP列表

143.140.48.0	217.141.180.78	122.195.253.157	180.126.227.161
1.18.73.84	138.121.128.19	2607:f298:5:111b::be0:a660	113.111.82.231
101.164.65.216	145.131.21.23	209.97.174.81	123.235.242.117
134.209.107.206	62.75.208.167	114.237.229.103	37.230.116.97
124.160.33.62	2.222.184.134	54.36.149.88	170.202.155.238