49.112.111.64 - IPInfo

基本信息:

城市(city): unknown

省份(region): Xinjiang

国家(country): China

运营商(isp): ChinaNet Xinjiang Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Unauthorized connection attempt detected from IP address 49.112.111.64 to port 23 [T]	2020-01-07 04:42:24

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.112.111.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59271
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.112.111.64.			IN	A

;; AUTHORITY SECTION:
.			597	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010601 1800 900 604800 86400

;; Query time: 189 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 07 04:42:21 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 64.111.112.49.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 64.111.112.49.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
27.124.43.196	attackspambots	PHP DIESCAN Information Disclosure Vulnerability	2019-10-14 02:53:35
189.208.208.136	attackbotsspam	Exploid host for vulnerabilities on 13-10-2019 12:45:26.	2019-10-14 03:04:31
187.170.37.94	attackbots	Exploid host for vulnerabilities on 13-10-2019 12:45:25.	2019-10-14 03:05:43
101.89.139.49	attackbots	Oct 10 22:10:34 * sshd[27179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.89.139.49 user=r.r Oct 10 22:10:36 * sshd[27179]: Failed password for r.r from 101.89.139.49 port 27473 ssh2 Oct 10 22:10:36 * sshd[27179]: Received disconnect from 101.89.139.49: 11: Bye Bye [preauth] Oct 10 22:19:29 * sshd[27801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.89.139.49 user=r.r Oct 10 22:19:31 * sshd[27801]: Failed password for r.r from 101.89.139.49 port 56212 ssh2 Oct 10 22:19:31 * sshd[27801]: Received disconnect from 101.89.139.49: 11: Bye Bye [preauth] Oct 10 22:24:08 * sshd[28168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.89.139.49 user=r.r Oct 10 22:24:09 * sshd[28168]: Failed password for r.r from 101.89.139.49 port 29415 ssh2 Oct 10 22:24:10 *** sshd[28168]: Received disconnect from 101.89.139.49: 11: Bye By........ -------------------------------	2019-10-14 02:45:15
186.0.88.181	attack	Exploid host for vulnerabilities on 13-10-2019 12:45:24.	2019-10-14 03:06:58
106.53.88.247	attackbots	Oct 13 18:11:44 localhost sshd\[34505\]: Invalid user 123 from 106.53.88.247 port 43948 Oct 13 18:11:44 localhost sshd\[34505\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.88.247 Oct 13 18:11:46 localhost sshd\[34505\]: Failed password for invalid user 123 from 106.53.88.247 port 43948 ssh2 Oct 13 18:17:18 localhost sshd\[34736\]: Invalid user contrasena-123 from 106.53.88.247 port 54854 Oct 13 18:17:18 localhost sshd\[34736\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.88.247 ...	2019-10-14 02:38:25
168.187.106.130	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 13-10-2019 12:45:20.	2019-10-14 03:13:47
79.106.48.105	attack	Oct 13 20:15:08 imap-login: Info: Disconnected $auth failed, 1 attempts in 5 secs$: user=\, method=PLAIN, rip=79.106.48.105, lip=192.168.100.101, session=\\ Oct 13 20:15:15 imap-login: Info: Disconnected $auth failed, 1 attempts in 8 secs$: user=\, method=PLAIN, rip=79.106.48.105, lip=192.168.100.101, session=\\ Oct 13 20:15:15 imap-login: Info: Disconnected $auth failed, 1 attempts in 8 secs$: user=\, method=PLAIN, rip=79.106.48.105, lip=192.168.100.101, session=\<9AAou86UiQBPajBp\>\ Oct 13 20:15:17 imap-login: Info: Disconnected $auth failed, 1 attempts in 8 secs$: user=\, method=PLAIN, rip=79.106.48.105, lip=192.168.100.101, session=\\ Oct 13 20:15:37 imap-login: Info: Disconnected $no auth attempts in 0 secs$: user=\<\>, rip=79.106.48.105, lip=192.168.100.101, session=\\ Oct 13 20:15:40 imap-login: Info: Disconnected \(auth failed	2019-10-14 02:55:37
54.38.82.14	attackbotsspam	$f2bV_matches	2019-10-14 02:37:30
168.195.81.100	attack	Exploid host for vulnerabilities on 13-10-2019 12:45:20.	2019-10-14 03:12:30
118.89.23.252	attack	xmlrpc attack	2019-10-14 02:44:17
125.124.152.59	attackspambots	Oct 13 20:17:11 markkoudstaal sshd[31399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.152.59 Oct 13 20:17:13 markkoudstaal sshd[31399]: Failed password for invalid user 321 from 125.124.152.59 port 44272 ssh2 Oct 13 20:22:02 markkoudstaal sshd[31904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.152.59	2019-10-14 02:33:21
218.208.174.5	attackbotsspam	Exploid host for vulnerabilities on 13-10-2019 12:45:28.	2019-10-14 03:00:31
106.52.121.64	attackspam	Oct 10 20:15:53 server sshd[1776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.121.64 user=r.r Oct 10 20:15:55 server sshd[1776]: Failed password for r.r from 106.52.121.64 port 43412 ssh2 Oct 10 20:15:55 server sshd[1776]: Received disconnect from 106.52.121.64: 11: Bye Bye [preauth] Oct 10 20:25:55 server sshd[1900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.121.64 user=r.r Oct 10 20:25:56 server sshd[1900]: Failed password for r.r from 106.52.121.64 port 48808 ssh2 Oct 10 20:25:57 server sshd[1900]: Received disconnect from 106.52.121.64: 11: Bye Bye [preauth] Oct 10 20:31:20 server sshd[1998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.121.64 user=r.r Oct 10 20:31:21 server sshd[1998]: Failed password for r.r from 106.52.121.64 port 56230 ssh2 Oct 10 20:31:22 server sshd[1998]: Received disconnect from 106.52......... -------------------------------	2019-10-14 02:43:12
178.62.234.122	attackbotsspam	Oct 13 16:58:18 * sshd[29531]: Failed password for root from 178.62.234.122 port 32790 ssh2	2019-10-14 02:38:51

最近上报的IP列表

42.118.105.238	146.65.43.111	34.237.77.132	42.118.71.41
189.195.164.2	42.117.181.134	42.113.229.166	27.210.228.168
178.193.39.167	27.205.127.45	82.113.202.247	175.154.196.28
189.186.179.253	176.32.82.23	165.95.104.51	222.209.234.35
49.250.89.88	95.148.171.159	145.51.225.153	54.217.221.101