49.49.44.21 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): Triple T Internet PCL

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	port scan and connect, tcp 23 (telnet)	2019-12-03 18:02:57

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.49.44.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28299
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.49.44.21.			IN	A

;; AUTHORITY SECTION:
.			364	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120300 1800 900 604800 86400

;; Query time: 50 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 03 18:02:54 CST 2019
;; MSG SIZE  rcvd: 115

HOST信息:

21.44.49.49.in-addr.arpa domain name pointer mx-ll-49.49.44-21.dynamic.3bb.co.th.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.44.49.49.in-addr.arpa	name = mx-ll-49.49.44-21.dynamic.3bb.in.th.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
192.241.183.220	attack	2019-10-06T11:41:24.870971shield sshd\[4921\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=admin.crf.org user=root 2019-10-06T11:41:26.197444shield sshd\[4921\]: Failed password for root from 192.241.183.220 port 56780 ssh2 2019-10-06T11:45:14.675029shield sshd\[5336\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=admin.crf.org user=root 2019-10-06T11:45:16.909577shield sshd\[5336\]: Failed password for root from 192.241.183.220 port 48415 ssh2 2019-10-06T11:48:57.578188shield sshd\[5723\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=admin.crf.org user=root	2019-10-06 20:30:48
220.76.107.50	attackbotsspam	Oct 6 01:50:50 tdfoods sshd\[11255\]: Invalid user 123 from 220.76.107.50 Oct 6 01:50:50 tdfoods sshd\[11255\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.76.107.50 Oct 6 01:50:52 tdfoods sshd\[11255\]: Failed password for invalid user 123 from 220.76.107.50 port 53646 ssh2 Oct 6 01:56:59 tdfoods sshd\[11735\]: Invalid user Testing@2020 from 220.76.107.50 Oct 6 01:56:59 tdfoods sshd\[11735\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.76.107.50	2019-10-06 20:35:28
80.88.90.86	attack	Oct 6 15:30:36 www2 sshd\[28328\]: Failed password for root from 80.88.90.86 port 53212 ssh2Oct 6 15:34:50 www2 sshd\[28591\]: Failed password for root from 80.88.90.86 port 37652 ssh2Oct 6 15:39:03 www2 sshd\[29081\]: Failed password for root from 80.88.90.86 port 50328 ssh2 ...	2019-10-06 20:43:37
45.82.153.131	attackbots	$f2bV_matches	2019-10-06 20:39:16
185.117.118.187	attackbotsspam	\[2019-10-06 13:44:47\] NOTICE\[28964\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '185.117.118.187:57690' $callid: 1482589021-1688183888-640310229$ - Failed to authenticate \[2019-10-06 13:44:47\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-10-06T13:44:47.024+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1482589021-1688183888-640310229",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/185.117.118.187/57690",Challenge="1570362286/f19a9dc5d89ddcc2f130e221072c9170",Response="20a637f9548cc49c2876de772f639b6c",ExpectedResponse="" \[2019-10-06 13:48:15\] NOTICE\[32542\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '185.117.118.187:54231' $callid: 883951133-1526915647-1418467370$ - Failed to authenticate \[2019-10-06 13:48:15\] SECURITY\[1715\] res_security_log.c: SecurityEvent="Challeng	2019-10-06 20:38:16
185.232.67.6	attack	Oct 6 14:04:11 dedicated sshd[2476]: Invalid user admin from 185.232.67.6 port 41391	2019-10-06 20:14:08
176.31.43.255	attackspambots	Oct 6 15:29:09 server sshd\[5837\]: User root from 176.31.43.255 not allowed because listed in DenyUsers Oct 6 15:29:09 server sshd\[5837\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.43.255 user=root Oct 6 15:29:11 server sshd\[5837\]: Failed password for invalid user root from 176.31.43.255 port 41762 ssh2 Oct 6 15:32:42 server sshd\[12405\]: User root from 176.31.43.255 not allowed because listed in DenyUsers Oct 6 15:32:42 server sshd\[12405\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.43.255 user=root	2019-10-06 20:41:26
109.251.62.46	attackspambots	WordPress wp-login brute force :: 109.251.62.46 0.124 BYPASS [06/Oct/2019:22:49:12 1100] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-10-06 20:23:34
182.121.223.232	attack	" "	2019-10-06 20:15:42
106.12.98.7	attack	Oct 6 14:00:59 vps01 sshd[25510]: Failed password for root from 106.12.98.7 port 52518 ssh2	2019-10-06 20:13:12
148.70.41.33	attackbots	2019-10-06T12:15:53.051225shield sshd\[7998\]: Invalid user @WSX\#EDC from 148.70.41.33 port 34690 2019-10-06T12:15:53.056683shield sshd\[7998\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.41.33 2019-10-06T12:15:55.413833shield sshd\[7998\]: Failed password for invalid user @WSX\#EDC from 148.70.41.33 port 34690 ssh2 2019-10-06T12:21:21.020955shield sshd\[9081\]: Invalid user @WSX\#EDC from 148.70.41.33 port 45404 2019-10-06T12:21:21.025153shield sshd\[9081\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.41.33	2019-10-06 20:32:15
58.229.208.187	attack	Oct 6 13:49:13 MK-Soft-VM7 sshd[24067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.229.208.187 Oct 6 13:49:15 MK-Soft-VM7 sshd[24067]: Failed password for invalid user Darkness@123 from 58.229.208.187 port 40392 ssh2 ...	2019-10-06 20:16:22
201.149.12.249	attack	Oct 6 07:49:41 localhost kernel: [4100400.740219] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=201.149.12.249 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=27914 PROTO=TCP SPT=46810 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 6 07:49:41 localhost kernel: [4100400.740254] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=201.149.12.249 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=27914 PROTO=TCP SPT=46810 DPT=445 SEQ=2518224073 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0	2019-10-06 20:06:51
182.61.111.254	attackbotsspam	Oct 6 02:01:26 web9 sshd\[24662\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.111.254 user=root Oct 6 02:01:28 web9 sshd\[24662\]: Failed password for root from 182.61.111.254 port 42694 ssh2 Oct 6 02:05:52 web9 sshd\[25296\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.111.254 user=root Oct 6 02:05:54 web9 sshd\[25296\]: Failed password for root from 182.61.111.254 port 54912 ssh2 Oct 6 02:10:24 web9 sshd\[26004\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.111.254 user=root	2019-10-06 20:18:37
203.195.178.83	attackspam	Oct 6 14:19:23 piServer sshd[21656]: Failed password for root from 203.195.178.83 port 36312 ssh2 Oct 6 14:22:41 piServer sshd[21966]: Failed password for root from 203.195.178.83 port 60816 ssh2 ...	2019-10-06 20:44:37

最近上报的IP列表

217.208.206.31	131.252.235.0	220.115.191.204	33.170.164.155
177.215.195.95	109.228.92.116	104.139.13.51	201.6.89.24
79.223.167.11	3.177.67.34	217.174.2.166	53.28.157.124
195.127.13.212	31.8.81.82	209.125.15.42	183.83.81.22
89.189.153.97	106.12.138.72	31.16.121.35	95.219.102.121