49.118.93.7 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Xinjiang Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Automatic report - Port Scan Attack	2020-05-25 02:00:44

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.118.93.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13983
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.118.93.7.			IN	A

;; AUTHORITY SECTION:
.			442	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052401 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 25 02:00:39 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

Host 7.93.118.49.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 7.93.118.49.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
218.92.0.184	attackbotsspam	Aug 20 02:44:30 vpn01 sshd[13098]: Failed password for root from 218.92.0.184 port 61200 ssh2 Aug 20 02:44:44 vpn01 sshd[13098]: Failed password for root from 218.92.0.184 port 61200 ssh2 ...	2020-08-20 08:56:20
213.59.135.87	attackbotsspam	Aug 20 00:40:56 PorscheCustomer sshd[20657]: Failed password for root from 213.59.135.87 port 60563 ssh2 Aug 20 00:45:17 PorscheCustomer sshd[20848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.59.135.87 Aug 20 00:45:19 PorscheCustomer sshd[20848]: Failed password for invalid user hk from 213.59.135.87 port 36838 ssh2 ...	2020-08-20 08:23:53
103.145.12.177	attackbotsspam	[2020-08-19 20:26:08] NOTICE[1185] chan_sip.c: Registration from '"2002" ' failed for '103.145.12.177:5527' - Wrong password [2020-08-19 20:26:08] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-19T20:26:08.299-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2002",SessionID="0x7f10c4245bd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.177/5527",Challenge="52a4838b",ReceivedChallenge="52a4838b",ReceivedHash="85b224a6ab5fbf7af67d45053ef44a8b" [2020-08-19 20:26:08] NOTICE[1185] chan_sip.c: Registration from '"2002" ' failed for '103.145.12.177:5527' - Wrong password [2020-08-19 20:26:08] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-19T20:26:08.560-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2002",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-08-20 08:40:12
201.80.21.131	attackspambots	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-19T20:55:10Z and 2020-08-19T21:10:26Z	2020-08-20 08:35:17
202.137.155.142	attackbotsspam	(imapd) Failed IMAP login from 202.137.155.142 (LA/Laos/-): 1 in the last 3600 secs	2020-08-20 08:53:54
106.51.98.159	attackbots	Aug 20 02:02:18 lukav-desktop sshd\[5924\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.98.159 user=root Aug 20 02:02:20 lukav-desktop sshd\[5924\]: Failed password for root from 106.51.98.159 port 53320 ssh2 Aug 20 02:05:51 lukav-desktop sshd\[8501\]: Invalid user reach from 106.51.98.159 Aug 20 02:05:51 lukav-desktop sshd\[8501\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.98.159 Aug 20 02:05:53 lukav-desktop sshd\[8501\]: Failed password for invalid user reach from 106.51.98.159 port 52170 ssh2	2020-08-20 08:23:37
221.185.239.127	attack	Automatic report - Port Scan Attack	2020-08-20 08:56:00
112.216.3.211	attackbots	Aug 20 01:44:20 vm0 sshd[11478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.3.211 Aug 20 01:44:22 vm0 sshd[11478]: Failed password for invalid user test from 112.216.3.211 port 9318 ssh2 ...	2020-08-20 08:44:14
182.23.67.49	attackbots	182.23.67.49 (ID/Indonesia/-), 12 distributed sshd attacks on account [root] in the last 3600 secs	2020-08-20 08:31:36
111.229.194.38	attack	$f2bV_matches	2020-08-20 08:27:25
75.159.195.252	attackbotsspam	SSH login attempts.	2020-08-20 08:59:21
217.182.67.242	attack	20 attempts against mh-ssh on echoip	2020-08-20 08:38:56
75.137.84.190	attackbots	SSH login attempts.	2020-08-20 08:22:50
68.236.122.177	attack	SSH Brute Force	2020-08-20 08:46:02
75.155.220.20	attackbotsspam	SSH login attempts.	2020-08-20 08:49:43

最近上报的IP列表

14.213.155.138	223.149.140.21	183.157.169.158	183.28.4.159
125.95.75.116	124.119.135.107	167.230.152.137	116.23.114.36
113.222.119.168	113.220.17.114	64.108.86.180	113.117.215.79
113.117.214.224	113.76.111.153	94.143.205.247	113.72.216.207
113.70.181.47	93.104.208.79	113.69.210.248	95.159.39.117