49.158.21.146 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Republic of China (ROC)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
49.158.21.81	attackbotsspam	Honeypot attack, port: 445, PTR: 49-158-21-81.dynamic.elinx.com.tw.	2020-03-03 17:36:37
49.158.213.184	attackbots	Unauthorized connection attempt detected from IP address 49.158.213.184 to port 4567 [J]	2020-01-17 06:44:11
49.158.213.184	attackbots	Unauthorized connection attempt detected from IP address 49.158.213.184 to port 4567 [J]	2020-01-16 09:17:57

类型

评论内容

时间

49.158.21.81

attackbotsspam

Honeypot attack, port: 445, PTR: 49-158-21-81.dynamic.elinx.com.tw.

2020-03-03 17:36:37

49.158.213.184

attackbots

Unauthorized connection attempt detected from IP address 49.158.213.184 to port 4567 [J]

2020-01-17 06:44:11

49.158.213.184

attackbots

Unauthorized connection attempt detected from IP address 49.158.213.184 to port 4567 [J]

2020-01-16 09:17:57

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.158.21.146
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63394
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.158.21.146.			IN	A

;; AUTHORITY SECTION:
.			388	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 10:35:32 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

146.21.158.49.in-addr.arpa domain name pointer 49-158-21-146.dynamic.elinx.com.tw.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
146.21.158.49.in-addr.arpa	name = 49-158-21-146.dynamic.elinx.com.tw.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
41.210.49.98	attack	(imapd) Failed IMAP login from 41.210.49.98 (GH/Ghana/41-210-49-98-adsl-static.4u.com.gh): 1 in the last 3600 secs	2019-07-15 16:19:11
221.127.86.78	attackspambots	Jul 15 08:27:49 h2177944 kernel: \[1496279.521000\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=221.127.86.78 DST=85.214.117.9 LEN=131 TOS=0x00 PREC=0x00 TTL=108 ID=15036 PROTO=UDP SPT=41396 DPT=23751 LEN=111 Jul 15 08:27:52 h2177944 kernel: \[1496282.050512\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=221.127.86.78 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=108 ID=17100 DF PROTO=TCP SPT=61388 DPT=23751 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 15 08:27:52 h2177944 kernel: \[1496282.068704\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=221.127.86.78 DST=85.214.117.9 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=17099 PROTO=UDP SPT=41396 DPT=23751 LEN=28 Jul 15 08:27:54 h2177944 kernel: \[1496284.353118\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=221.127.86.78 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=108 ID=19879 DF PROTO=TCP SPT=61388 DPT=23751 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 15 08:27:54 h2177944 kernel: \[1496284.585963\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=221.127.86.78 DST=85.214.117.9 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=	2019-07-15 16:10:42
54.36.130.88	attackbots	Jul 15 08:15:19 mail sshd\[8810\]: Invalid user shawn from 54.36.130.88 port 37246 Jul 15 08:15:19 mail sshd\[8810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.130.88 Jul 15 08:15:21 mail sshd\[8810\]: Failed password for invalid user shawn from 54.36.130.88 port 37246 ssh2 Jul 15 08:20:06 mail sshd\[8875\]: Invalid user venta from 54.36.130.88 port 37898 Jul 15 08:20:06 mail sshd\[8875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.130.88 ...	2019-07-15 16:46:16
178.32.97.170	attackbots	\[2019-07-15 10:23:55\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-15T10:23:55.550+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1092663168-468306910-624012248",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/178.32.97.170/64172",Challenge="1563179035/3990971c3582a93d0b8b865d6af6c5f4",Response="3bba28fc5094e3e634b12a8175979600",ExpectedResponse="" \[2019-07-15 10:23:55\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-15T10:23:55.613+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1092663168-468306910-624012248",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/178.32.97.170/64172",Challenge="1563179035/3990971c3582a93d0b8b865d6af6c5f4",Response="4514dfeb8cf4b2dcd5cfbdae227dfde4",ExpectedResponse="" \[2019-07-15 10:23:55\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeRespon	2019-07-15 16:38:53
175.136.241.161	attackbots	Jul 15 08:35:00 debian sshd\[21082\]: Invalid user raja from 175.136.241.161 port 35332 Jul 15 08:35:00 debian sshd\[21082\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.136.241.161 ...	2019-07-15 15:53:54
218.92.0.164	attack	Triggered by Fail2Ban at Vostok web server	2019-07-15 15:51:36
137.74.176.208	attack	Jul 15 10:20:10 giegler sshd[29423]: Invalid user job from 137.74.176.208 port 20281	2019-07-15 16:23:20
138.197.176.130	attack	Jul 15 09:54:59 dev sshd\[12410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.176.130 user=root Jul 15 09:55:01 dev sshd\[12410\]: Failed password for root from 138.197.176.130 port 57728 ssh2 ...	2019-07-15 15:55:36
67.205.184.235	attack	TCP Packet - Source:67.205.184.235,64275 Destination:,23 - [DOS]	2019-07-15 16:11:42
109.88.44.32	attackspam	Jul 15 08:26:59 ns341937 sshd[12419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.88.44.32 Jul 15 08:26:59 ns341937 sshd[12420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.88.44.32 Jul 15 08:27:02 ns341937 sshd[12419]: Failed password for invalid user pi from 109.88.44.32 port 44241 ssh2 Jul 15 08:27:02 ns341937 sshd[12420]: Failed password for invalid user pi from 109.88.44.32 port 44242 ssh2 ...	2019-07-15 16:41:25
85.93.133.178	attack	2019-07-15T08:18:14.617317abusebot-7.cloudsearch.cf sshd\[3633\]: Invalid user app from 85.93.133.178 port 23598	2019-07-15 16:23:01
198.228.145.150	attackspambots	Jul 15 10:11:03 srv206 sshd[24382]: Invalid user nagios from 198.228.145.150 ...	2019-07-15 16:32:55
125.64.94.211	attack	15.07.2019 07:51:53 Connection to port 1911 blocked by firewall	2019-07-15 16:06:42
116.213.41.105	attackbots	Jul 15 11:10:50 yabzik sshd[28047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.213.41.105 Jul 15 11:10:52 yabzik sshd[28047]: Failed password for invalid user anthony from 116.213.41.105 port 36690 ssh2 Jul 15 11:16:06 yabzik sshd[29677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.213.41.105	2019-07-15 16:45:15
153.36.236.234	attack	Jul 15 02:43:28 aat-srv002 sshd[4516]: Failed password for root from 153.36.236.234 port 64256 ssh2 Jul 15 02:43:44 aat-srv002 sshd[4527]: Failed password for root from 153.36.236.234 port 60570 ssh2 Jul 15 02:43:55 aat-srv002 sshd[4529]: Failed password for root from 153.36.236.234 port 40279 ssh2 ...	2019-07-15 16:05:49

最近上报的IP列表

134.236.93.8	196.11.178.136	103.98.78.101	151.106.1.55
212.115.42.248	150.129.5.220	188.76.186.59	168.181.120.12
43.229.227.163	115.78.226.46	112.242.117.192	151.235.23.136
223.149.2.161	47.119.122.19	188.166.87.67	125.105.110.206
223.226.129.31	148.205.149.119	81.33.20.149	46.249.123.132