121.200.48.204

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): India

运营商(isp): Wireless Solution India Pvt Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-05-02 04:19:43

相同子网IP讨论:

IP	类型	评论内容	时间
121.200.48.58	attackbots	Dovecot Invalid User Login Attempt.	2020-08-28 02:49:09
121.200.48.58	attack	Dovecot Invalid User Login Attempt.	2020-07-27 07:21:27
121.200.48.58	attackbotsspam	Apr 29 14:01:43 web01.agentur-b-2.de postfix/smtpd[1077562]: NOQUEUE: reject: RCPT from unknown[121.200.48.58]: 554 5.7.1 Service unavailable; Client host [121.200.48.58] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/121.200.48.58 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= Apr 29 14:02:05 web01.agentur-b-2.de postfix/smtpd[1077562]: NOQUEUE: reject: RCPT from unknown[121.200.48.58]: 554 5.7.1 Service unavailable; Client host [121.200.48.58] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/121.200.48.58 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= Apr 29 14:02:07 web01.agentur-b-2.de postfix/smtpd[1077562]: NOQUEUE: reject: RCPT from unknown[121.200.48.58]: 554 5.7.1 Service unavailable; Client host [121.200.48.58] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip	2020-04-29 20:14:04
121.200.48.58	attack	IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.	2020-04-03 00:46:45
121.200.48.162	attackbotsspam	Feb 13 05:51:57 [munged] sshd[29479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.200.48.162	2020-02-13 15:54:54
121.200.48.50	attack	Dec 23 15:18:42 carla sshd[6480]: Invalid user guest from 121.200.48.50 Dec 23 15:18:42 carla sshd[6480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.200.48.50 Dec 23 15:18:44 carla sshd[6480]: Failed password for invalid user guest from 121.200.48.50 port 55596 ssh2 Dec 23 15:18:44 carla sshd[6481]: Received disconnect from 121.200.48.50: 11: Bye Bye Dec 23 15:38:52 carla sshd[6590]: Invalid user cisco from 121.200.48.50 Dec 23 15:38:52 carla sshd[6590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.200.48.50 Dec 23 15:38:54 carla sshd[6590]: Failed password for invalid user cisco from 121.200.48.50 port 46172 ssh2 Dec 23 15:38:54 carla sshd[6591]: Received disconnect from 121.200.48.50: 11: Bye Bye Dec 23 15:45:23 carla sshd[6607]: Invalid user oracle from 121.200.48.50 Dec 23 15:45:23 carla sshd[6607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=........ -------------------------------	2019-12-24 00:32:01
121.200.48.50	attackspambots	Nov 25 17:55:29 microserver sshd[50755]: Invalid user dana from 121.200.48.50 port 57364 Nov 25 17:55:29 microserver sshd[50755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.200.48.50 Nov 25 17:55:31 microserver sshd[50755]: Failed password for invalid user dana from 121.200.48.50 port 57364 ssh2 Nov 25 17:59:41 microserver sshd[50979]: Invalid user thelen from 121.200.48.50 port 37806 Nov 25 17:59:41 microserver sshd[50979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.200.48.50 Nov 25 18:35:19 microserver sshd[56265]: Invalid user samba from 121.200.48.50 port 44382 Nov 25 18:35:19 microserver sshd[56265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.200.48.50 Nov 25 18:35:21 microserver sshd[56265]: Failed password for invalid user samba from 121.200.48.50 port 44382 ssh2 Nov 25 18:39:39 microserver sshd[56491]: pam_unix(sshd:auth): authentication failure; logname= u	2019-11-26 00:17:31
121.200.48.162	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2019-07-10 21:20:45
121.200.48.58	attack	proto=tcp . spt=35704 . dpt=25 . (listed on Blocklist de Jun 20) (339)	2019-06-21 18:04:46

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.200.48.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40245
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.200.48.204.			IN	A

;; AUTHORITY SECTION:
.			316	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050102 1800 900 604800 86400

;; Query time: 176 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 02 04:19:40 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 204.48.200.121.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 204.48.200.121.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
223.207.247.101	attackspambots	Sun, 21 Jul 2019 07:35:18 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 01:22:03
36.82.177.87	attack	Sun, 21 Jul 2019 07:35:13 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 01:36:37
122.160.115.193	attack	Unauthorized connection attempt from IP address 122.160.115.193 on Port 445(SMB)	2019-07-22 00:59:55
173.23.225.40	attackbots	Jul 21 17:58:16 srv-4 sshd\[29473\]: Invalid user zimbra from 173.23.225.40 Jul 21 17:58:16 srv-4 sshd\[29473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.23.225.40 Jul 21 17:58:18 srv-4 sshd\[29473\]: Failed password for invalid user zimbra from 173.23.225.40 port 46688 ssh2 ...	2019-07-22 01:27:33
201.6.100.209	attackbots	Sun, 21 Jul 2019 07:35:29 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 00:54:28
36.78.203.171	attackbotsspam	Sun, 21 Jul 2019 07:35:16 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 01:30:25
217.66.157.7	attackbots	Sun, 21 Jul 2019 07:35:07 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 01:52:34
122.167.13.165	attackbots	Sun, 21 Jul 2019 07:35:06 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 01:56:21
45.13.39.126	attack	Jul 21 19:40:51 mail postfix/smtpd\[29872\]: warning: unknown\[45.13.39.126\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 21 19:41:51 mail postfix/smtpd\[29874\]: warning: unknown\[45.13.39.126\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 21 19:42:53 mail postfix/smtpd\[29874\]: warning: unknown\[45.13.39.126\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-07-22 01:51:30
180.244.143.195	attackspam	Sun, 21 Jul 2019 07:35:07 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 01:53:00
58.11.29.170	attackbots	Sun, 21 Jul 2019 07:35:06 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 01:56:51
79.12.66.168	attackspambots	Automatic report - Port Scan Attack	2019-07-22 01:33:56
193.70.109.193	attackbotsspam	Jul 21 14:05:33 MK-Soft-VM5 sshd\[25358\]: Invalid user alisa from 193.70.109.193 port 34008 Jul 21 14:05:33 MK-Soft-VM5 sshd\[25358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.109.193 Jul 21 14:05:35 MK-Soft-VM5 sshd\[25358\]: Failed password for invalid user alisa from 193.70.109.193 port 34008 ssh2 ...	2019-07-22 01:43:30
176.252.237.140	attackbotsspam	Jul 21 03:19:33 Aberdeen-m4-Access auth.info sshd[3610]: Invalid user juniper from 176.252.237.140 port 1915 Jul 21 03:19:33 Aberdeen-m4-Access auth.info sshd[3610]: Failed password for invalid user juniper from 176.252.237.140 port 1915 ssh2 Jul 21 03:19:34 Aberdeen-m4-Access auth.info sshd[3610]: Received disconnect from 176.252.237.140 port 1915:11: Bye Bye [preauth] Jul 21 03:19:34 Aberdeen-m4-Access auth.info sshd[3610]: Disconnected from 176.252.237.140 port 1915 [preauth] Jul 21 03:19:34 Aberdeen-m4-Access auth.notice sshguard[31692]: Attack from "176.252.237.140" on service 100 whostnameh danger 10. Jul 21 03:19:34 Aberdeen-m4-Access auth.notice sshguard[31692]: Attack from "176.252.237.140" on service 100 whostnameh danger 10. Jul 21 03:19:34 Aberdeen-m4-Access auth.notice sshguard[31692]: Attack from "176.252.237.140" on service 100 whostnameh danger 10. Jul 21 03:19:34 Aberdeen-m4-Access auth.warn sshguard[31692]: Blocking "176.252.237.140/32" for 240 secs (3 ........ ------------------------------	2019-07-22 01:16:44
91.105.176.45	attackbots	Sun, 21 Jul 2019 07:35:18 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 01:23:45

最近上报的IP列表

20.1.4.253	40.210.6.45	183.88.244.148	96.183.240.131
44.3.61.122	5.234.170.55	127.213.19.24	232.86.163.190
164.47.142.63	2.65.82.115	213.176.241.78	182.133.175.3
144.139.130.6	94.125.39.2	175.140.45.72	112.117.129.6
212.82.132.111	41.139.192.47	32.199.245.157	126.251.202.208