49.64.102.94 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
49.64.102.134	attackspambots	Lines containing failures of 49.64.102.134 Mar 23 16:33:11 nexus sshd[7462]: Invalid user student1 from 49.64.102.134 port 56976 Mar 23 16:33:11 nexus sshd[7462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.64.102.134 Mar 23 16:33:13 nexus sshd[7462]: Failed password for invalid user student1 from 49.64.102.134 port 56976 ssh2 Mar 23 16:33:14 nexus sshd[7462]: Received disconnect from 49.64.102.134 port 56976:11: Bye Bye [preauth] Mar 23 16:33:14 nexus sshd[7462]: Disconnected from 49.64.102.134 port 56976 [preauth] Mar 23 16:37:23 nexus sshd[8316]: Invalid user analytics from 49.64.102.134 port 12870 Mar 23 16:37:23 nexus sshd[8316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.64.102.134 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.64.102.134	2020-03-24 04:23:50
49.64.102.134	attackspambots	2020-03-20T09:53:40.153361-07:00 suse-nuc sshd[11696]: Invalid user tmpu from 49.64.102.134 port 24443 ...	2020-03-21 01:20:47

类型

评论内容

时间

49.64.102.134

attackspambots

Lines containing failures of 49.64.102.134
Mar 23 16:33:11 nexus sshd[7462]: Invalid user student1 from 49.64.102.134 port 56976
Mar 23 16:33:11 nexus sshd[7462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.64.102.134
Mar 23 16:33:13 nexus sshd[7462]: Failed password for invalid user student1 from 49.64.102.134 port 56976 ssh2
Mar 23 16:33:14 nexus sshd[7462]: Received disconnect from 49.64.102.134 port 56976:11: Bye Bye [preauth]
Mar 23 16:33:14 nexus sshd[7462]: Disconnected from 49.64.102.134 port 56976 [preauth]
Mar 23 16:37:23 nexus sshd[8316]: Invalid user analytics from 49.64.102.134 port 12870
Mar 23 16:37:23 nexus sshd[8316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.64.102.134


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.64.102.134

2020-03-24 04:23:50

49.64.102.134

attackspambots

2020-03-20T09:53:40.153361-07:00 suse-nuc sshd[11696]: Invalid user tmpu from 49.64.102.134 port 24443
...

2020-03-21 01:20:47

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.64.102.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53707
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.64.102.94.			IN	A

;; AUTHORITY SECTION:
.			133	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020601 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 12:43:26 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 94.102.64.49.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 94.102.64.49.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
49.234.94.189	attackspam	Mar 7 13:53:03 web1 sshd\[16615\]: Invalid user ftpuser from 49.234.94.189 Mar 7 13:53:03 web1 sshd\[16615\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.94.189 Mar 7 13:53:05 web1 sshd\[16615\]: Failed password for invalid user ftpuser from 49.234.94.189 port 50266 ssh2 Mar 7 13:58:38 web1 sshd\[17167\]: Invalid user radiomail from 49.234.94.189 Mar 7 13:58:38 web1 sshd\[17167\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.94.189	2020-03-08 10:00:16
45.63.74.243	attackspam	Mar 8 03:12:09 host sshd[60644]: Invalid user admin from 45.63.74.243 port 61550 ...	2020-03-08 10:13:06
180.127.111.202	attack	Mar 7 23:03:31 grey postfix/smtpd\[14681\]: NOQUEUE: reject: RCPT from unknown\[180.127.111.202\]: 554 5.7.1 Service unavailable\; Client host \[180.127.111.202\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[180.127.111.202\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-03-08 10:14:28
178.73.203.2	attackbotsspam		2020-03-08 09:40:10
204.152.210.204	attack	204.152.210.204 has been banned for [spam] ...	2020-03-08 10:00:50
113.210.20.236	attack	Mar 8 03:09:14 lnxded64 sshd[32694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.210.20.236 Mar 8 03:09:14 lnxded64 sshd[32694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.210.20.236	2020-03-08 10:17:51
171.103.43.150	attackbotsspam	Brute force attempt	2020-03-08 09:56:29
49.233.136.245	attack	Mar 7 23:34:12 ns381471 sshd[13911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.136.245 Mar 7 23:34:14 ns381471 sshd[13911]: Failed password for invalid user admin from 49.233.136.245 port 33372 ssh2	2020-03-08 10:01:35
61.153.54.38	attack	'IP reached maximum auth failures for a one day block'	2020-03-08 09:46:49
222.186.15.91	attackspam	Mar 8 02:38:12 MK-Soft-Root1 sshd[8606]: Failed password for root from 222.186.15.91 port 42457 ssh2 Mar 8 02:38:14 MK-Soft-Root1 sshd[8606]: Failed password for root from 222.186.15.91 port 42457 ssh2 ...	2020-03-08 09:48:51
45.224.105.143	attack	(imapd) Failed IMAP login from 45.224.105.143 (AR/Argentina/-): 1 in the last 3600 secs	2020-03-08 09:49:20
173.61.137.72	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-03-08 10:20:51
182.61.105.127	attack	Mar 7 15:46:02 eddieflores sshd\[18358\]: Invalid user rstudio from 182.61.105.127 Mar 7 15:46:02 eddieflores sshd\[18358\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.105.127 Mar 7 15:46:04 eddieflores sshd\[18358\]: Failed password for invalid user rstudio from 182.61.105.127 port 60478 ssh2 Mar 7 15:49:43 eddieflores sshd\[18646\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.105.127 user=root Mar 7 15:49:45 eddieflores sshd\[18646\]: Failed password for root from 182.61.105.127 port 59394 ssh2	2020-03-08 09:53:46
46.89.143.170	attack	$f2bV_matches	2020-03-08 10:07:51
83.69.111.115	attack	Automatic report - Port Scan Attack	2020-03-08 10:06:31

最近上报的IP列表

112.78.47.186	186.147.254.122	113.116.192.35	94.191.152.10
223.184.199.73	141.179.28.44	31.40.151.17	211.36.141.37
35.219.62.239	94.23.222.63	120.86.238.7	134.122.83.230
120.26.66.197	103.140.83.129	117.54.114.33	185.102.112.47
18.206.255.22	209.141.56.96	27.131.179.216	91.144.129.62