121.230.89.49 - IPInfo

基本信息:

城市(city): Nanjing

省份(region): Jiangsu

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '121.224.0.0 - 121.239.255.255'

% Abuse contact for '121.224.0.0 - 121.239.255.255' is 'anti-spam@chinatelecom.cn'

inetnum:        121.224.0.0 - 121.239.255.255
netname:        CHINANET-JS
descr:          CHINANET jiangsu province network
descr:          China Telecom
descr:          A12,Xin-Jie-Kou-Wai Street
descr:          Beijing 100088
country:        CN
admin-c:        CH93-AP
tech-c:         CJ186-AP
abuse-c:        AC1573-AP
status:         ALLOCATED PORTABLE
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CHINANET-JS
mnt-routes:     MAINT-CHINANET-JS
mnt-irt:        IRT-CHINANET-CN
last-modified:  2021-06-15T08:05:09Z
source:         APNIC

irt:            IRT-CHINANET-CN
address:        No.31 ,jingrong street,beijing
address:        100032
e-mail:         anti-spam@chinatelecom.cn
abuse-mailbox:  anti-spam@chinatelecom.cn
admin-c:        CH93-AP
tech-c:         CH93-AP
auth:           # Filtered
remarks:        anti-spam@chinatelecom.cn was validated on 2025-11-13
mnt-by:         MAINT-CHINANET
last-modified:  2026-03-13T07:12:20Z
source:         APNIC

role:           ABUSE CHINANETCN
country:        ZZ
address:        No.31 ,jingrong street,beijing
address:        100032
phone:          +000000000
e-mail:         anti-spam@chinatelecom.cn
admin-c:        CH93-AP
tech-c:         CH93-AP
nic-hdl:        AC1573-AP
remarks:        Generated from irt object IRT-CHINANET-CN
remarks:        anti-spam@chinatelecom.cn was validated on 2025-11-13
abuse-mailbox:  anti-spam@chinatelecom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2025-11-13T14:15:15Z
source:         APNIC

role:           CHINANET JIANGSU
address:        260 Zhongyang Road,Nanjing 210037
country:        CN
phone:          +86-25-87799222
e-mail:         jsipmanager@163.com
remarks:        send anti-spam reports tojsipmanager@163.com
remarks:        send abuse reports tojsipmanager@163.com
remarks:        times in GMT+8
remarks:        www.jsinfo.net
admin-c:        CH360-AP
tech-c:         CS306-AP
tech-c:         CN142-AP
nic-hdl:        CJ186-AP
notify:         jsipmanager@163.com
mnt-by:         MAINT-CHINANET-JS
last-modified:  2022-08-05T15:34:47Z
source:         APNIC

person:         Chinanet Hostmaster
nic-hdl:        CH93-AP
e-mail:         anti-spam@chinatelecom.cn
address:        No.31 ,jingrong street,beijing
address:        100032
phone:          +86-10-58501724
fax-no:         +86-10-58501724
country:        CN
mnt-by:         MAINT-CHINANET
last-modified:  2022-02-28T06:53:44Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.47 (WHOIS-AU4)

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.230.89.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6508
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;121.230.89.49.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026040302 1800 900 604800 86400

;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 04 05:05:57 CST 2026
;; MSG SIZE  rcvd: 106

HOST信息:

Host 49.89.230.121.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 49.89.230.121.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
103.91.54.100	attack	Dec 20 11:55:50 localhost sshd\[3221\]: Invalid user acct from 103.91.54.100 port 41858 Dec 20 11:55:50 localhost sshd\[3221\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.91.54.100 Dec 20 11:55:52 localhost sshd\[3221\]: Failed password for invalid user acct from 103.91.54.100 port 41858 ssh2	2019-12-20 19:14:20
185.147.212.8	attackbotsspam	\[2019-12-20 05:54:40\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '185.147.212.8:50669' - Wrong password \[2019-12-20 05:54:40\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-20T05:54:40.154-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="79599",SessionID="0x7f0fb4a5a908",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.212.8/50669",Challenge="5d157e98",ReceivedChallenge="5d157e98",ReceivedHash="04f8ddc042d25ef3550bfd7e2bbd7793" \[2019-12-20 05:55:15\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '185.147.212.8:55559' - Wrong password \[2019-12-20 05:55:15\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-20T05:55:15.759-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="96422",SessionID="0x7f0fb4a5a908",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.1	2019-12-20 19:02:52
31.186.251.128	attackbotsspam	Dec 20 09:49:24 mail kernel: [1851507.872495] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=31.186.251.128 DST=91.205.173.180 LEN=44 TOS=0x00 PREC=0x00 TTL=55 ID=49262 DF PROTO=UDP SPT=8300 DPT=47517 LEN=24 Dec 20 09:49:24 mail kernel: [1851507.872588] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=31.186.251.128 DST=91.205.173.180 LEN=1392 TOS=0x00 PREC=0x00 TTL=55 ID=49263 DF PROTO=UDP SPT=8300 DPT=47517 LEN=1372 Dec 20 09:49:24 mail kernel: [1851507.872606] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=31.186.251.128 DST=91.205.173.180 LEN=1392 TOS=0x00 PREC=0x00 TTL=55 ID=49264 DF PROTO=UDP SPT=8300 DPT=47517 LEN=1372 Dec 20 09:49:24 mail kernel: [1851507.872623] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=31.186.251.128 DST=91.205.173.180 LEN=960 TOS=0x00 PREC=0x00 TTL=55 ID=49265 DF PROTO=UDP SPT=8300 DPT=47517 LEN=940	2019-12-20 19:04:33
115.79.41.130	attack	1576823163 - 12/20/2019 07:26:03 Host: 115.79.41.130/115.79.41.130 Port: 445 TCP Blocked	2019-12-20 19:23:18
24.185.97.170	attackspambots	Dec 20 05:09:51 TORMINT sshd\[12034\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.185.97.170 user=root Dec 20 05:09:53 TORMINT sshd\[12034\]: Failed password for root from 24.185.97.170 port 36986 ssh2 Dec 20 05:15:18 TORMINT sshd\[12505\]: Invalid user test from 24.185.97.170 Dec 20 05:15:18 TORMINT sshd\[12505\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.185.97.170 ...	2019-12-20 18:50:07
35.238.162.217	attack	Dec 20 09:30:16 hell sshd[16701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.238.162.217 Dec 20 09:30:18 hell sshd[16701]: Failed password for invalid user test6 from 35.238.162.217 port 35468 ssh2 ...	2019-12-20 19:15:17
162.144.79.223	attack	WordPress login Brute force / Web App Attack on client site.	2019-12-20 19:13:01
159.192.139.70	attack	Host Scan	2019-12-20 18:46:58
51.38.57.78	attackbotsspam	Dec 20 01:11:48 hpm sshd\[21826\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3118043.ip-51-38-57.eu user=root Dec 20 01:11:50 hpm sshd\[21826\]: Failed password for root from 51.38.57.78 port 33782 ssh2 Dec 20 01:17:10 hpm sshd\[22358\]: Invalid user nestaas from 51.38.57.78 Dec 20 01:17:10 hpm sshd\[22358\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3118043.ip-51-38-57.eu Dec 20 01:17:12 hpm sshd\[22358\]: Failed password for invalid user nestaas from 51.38.57.78 port 57508 ssh2	2019-12-20 19:18:19
94.23.27.21	attack	serveres are UTC -0500 Lines containing failures of 94.23.27.21 Dec 17 19:34:31 tux2 sshd[21031]: Invalid user test from 94.23.27.21 port 38754 Dec 17 19:34:31 tux2 sshd[21031]: Failed password for invalid user test from 94.23.27.21 port 38754 ssh2 Dec 17 19:34:32 tux2 sshd[21031]: Received disconnect from 94.23.27.21 port 38754:11: Bye Bye [preauth] Dec 17 19:34:32 tux2 sshd[21031]: Disconnected from invalid user test 94.23.27.21 port 38754 [preauth] Dec 17 19:40:13 tux2 sshd[21328]: Failed password for r.r from 94.23.27.21 port 60440 ssh2 Dec 17 19:40:13 tux2 sshd[21328]: Received disconnect from 94.23.27.21 port 60440:11: Bye Bye [preauth] Dec 17 19:40:13 tux2 sshd[21328]: Disconnected from authenticating user r.r 94.23.27.21 port 60440 [preauth] Dec 17 19:45:00 tux2 sshd[21591]: Invalid user nfs from 94.23.27.21 port 43378 Dec 17 19:45:00 tux2 sshd[21591]: Failed password for invalid user nfs from 94.23.27.21 port 43378 ssh2 Dec 17 19:45:00 tux2 sshd[21591]: Received........ ------------------------------	2019-12-20 18:59:31
207.236.200.70	attack	$f2bV_matches	2019-12-20 19:01:03
118.24.208.67	attackbotsspam	Dec 20 08:49:46 ncomp sshd[21206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.208.67 user=root Dec 20 08:49:47 ncomp sshd[21206]: Failed password for root from 118.24.208.67 port 54772 ssh2 Dec 20 09:14:17 ncomp sshd[21644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.208.67 user=root Dec 20 09:14:20 ncomp sshd[21644]: Failed password for root from 118.24.208.67 port 39540 ssh2	2019-12-20 19:05:54
14.177.182.2	attackbots	Host Scan	2019-12-20 19:00:16
1.53.78.217	attackspam	Automatic report - Port Scan Attack	2019-12-20 18:58:19
114.70.93.64	attackspam	Dec 19 23:57:50 php1 sshd\[29055\]: Invalid user maldera from 114.70.93.64 Dec 19 23:57:50 php1 sshd\[29055\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.70.93.64 Dec 19 23:57:51 php1 sshd\[29055\]: Failed password for invalid user maldera from 114.70.93.64 port 38874 ssh2 Dec 20 00:04:01 php1 sshd\[30448\]: Invalid user rudra from 114.70.93.64 Dec 20 00:04:01 php1 sshd\[30448\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.70.93.64	2019-12-20 18:54:48

最近上报的IP列表

2.57.122.105	185.19.32.35	3.83.33.30	34.207.209.130
2606:4700:10::ac43:2746	2606:4700:10::6816:1241	2606:4700:10::6816:4455	2606:4700:10::ac43:1680
2606:4700:10::6816:4617	2606:4700:10::6814:8067	106.75.36.195	98.88.17.26
2606:4700:10::6814:5941	2606:4700:10::6814:6532	2606:4700:10::6814:8761	2606:4700:10::ac43:2232
2606:4700:10::6814:7412	2606:4700:10::6814:9364	2606:4700:10::6814:5380	2606:4700:10::6814:7865