58.221.49.92 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Jiangsu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	(pop3d) Failed POP3 login from 58.221.49.92 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_POP3D	2020-08-17 13:46:49

相同子网IP讨论:

IP	类型	评论内容	时间
58.221.49.157	attack	10/20/2019-04:18:21.679070 58.221.49.157 Protocol: 6 ET SCAN Suspicious inbound to mySQL port 3306	2019-10-20 18:10:01
58.221.49.157	attackbots	10/19/2019-18:05:23.647432 58.221.49.157 Protocol: 6 ET SCAN Suspicious inbound to mySQL port 3306	2019-10-20 06:56:08
58.221.49.186	attack	Port Scan detected from 58.221.49.186 (CN/China/-). 4 hits in the last 30 seconds	2019-10-05 13:25:33

类型

评论内容

时间

58.221.49.157

attack

10/20/2019-04:18:21.679070 58.221.49.157 Protocol: 6 ET SCAN Suspicious inbound to mySQL port 3306

2019-10-20 18:10:01

58.221.49.157

attackbots

10/19/2019-18:05:23.647432 58.221.49.157 Protocol: 6 ET SCAN Suspicious inbound to mySQL port 3306

2019-10-20 06:56:08

58.221.49.186

attack

*Port Scan* detected from 58.221.49.186 (CN/China/-). 4 hits in the last 30 seconds

2019-10-05 13:25:33

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.221.49.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6004
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;58.221.49.92.			IN	A

;; AUTHORITY SECTION:
.			127	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081601 1800 900 604800 86400

;; Query time: 76 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 17 13:46:45 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 92.49.221.58.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 92.49.221.58.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
180.245.75.132	attackspambots	1581137366 - 02/08/2020 05:49:26 Host: 180.245.75.132/180.245.75.132 Port: 445 TCP Blocked	2020-02-08 20:45:34
187.170.229.208	attackspam	Automatic report - Port Scan Attack	2020-02-08 20:56:17
134.175.85.79	attack	Feb 8 13:39:01 sd-53420 sshd\[31176\]: Invalid user hxa from 134.175.85.79 Feb 8 13:39:01 sd-53420 sshd\[31176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.85.79 Feb 8 13:39:02 sd-53420 sshd\[31176\]: Failed password for invalid user hxa from 134.175.85.79 port 37934 ssh2 Feb 8 13:42:32 sd-53420 sshd\[31707\]: Invalid user kwy from 134.175.85.79 Feb 8 13:42:32 sd-53420 sshd\[31707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.85.79 ...	2020-02-08 20:52:42
106.12.154.17	attack	Feb 8 12:55:39 Ubuntu-1404-trusty-64-minimal sshd\[23573\]: Invalid user wjp from 106.12.154.17 Feb 8 12:55:39 Ubuntu-1404-trusty-64-minimal sshd\[23573\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.154.17 Feb 8 12:55:40 Ubuntu-1404-trusty-64-minimal sshd\[23573\]: Failed password for invalid user wjp from 106.12.154.17 port 33580 ssh2 Feb 8 13:00:02 Ubuntu-1404-trusty-64-minimal sshd\[25322\]: Invalid user cqg from 106.12.154.17 Feb 8 13:00:02 Ubuntu-1404-trusty-64-minimal sshd\[25322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.154.17	2020-02-08 21:04:58
87.99.127.251	attack	unauthorized connection attempt	2020-02-08 21:02:26
180.244.233.84	attack	1581137373 - 02/08/2020 05:49:33 Host: 180.244.233.84/180.244.233.84 Port: 445 TCP Blocked	2020-02-08 20:42:19
194.85.22.35	attack	1581137322 - 02/08/2020 05:48:42 Host: 194.85.22.35/194.85.22.35 Port: 445 TCP Blocked	2020-02-08 21:11:53
105.149.52.152	attackbots	Honeypot attack, port: 5555, PTR: PTR record not found	2020-02-08 21:09:21
49.234.195.9	attack	GET /TP/index.php HTTP/1.1 404 10073 Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)	2020-02-08 21:17:59
185.216.140.17	attackspam	Feb 8 13:05:36 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.216.140.17, lip=207.180.241.50, session= Feb 8 13:05:50 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=185.216.140.17, lip=207.180.241.50, session= Feb 8 13:06:34 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.216.140.17, lip=207.180.241.50, session= Feb 8 13:07:00 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.216.140.17, lip=207.180.241.50, session= Feb 8 13:07:15 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.216.140.17, lip=207.180.241.50, sessi ...	2020-02-08 21:15:16
89.210.84.51	attackbotsspam	Telnet/23 MH Probe, BF, Hack -	2020-02-08 21:01:28
46.162.105.246	attackspam	Honeypot attack, port: 5555, PTR: 46-162-105-246.cust.bredband2.com.	2020-02-08 20:38:21
91.226.51.202	attackbotsspam	Telnet/23 MH Probe, BF, Hack -	2020-02-08 20:59:52
138.197.162.28	attack	Fail2Ban - SSH Bruteforce Attempt	2020-02-08 21:03:05
119.29.2.157	attackbots	Feb 7 20:16:15 web9 sshd\[8719\]: Invalid user cqx from 119.29.2.157 Feb 7 20:16:15 web9 sshd\[8719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.2.157 Feb 7 20:16:17 web9 sshd\[8719\]: Failed password for invalid user cqx from 119.29.2.157 port 60404 ssh2 Feb 7 20:19:36 web9 sshd\[9266\]: Invalid user flz from 119.29.2.157 Feb 7 20:19:36 web9 sshd\[9266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.2.157	2020-02-08 20:50:23

最近上报的IP列表

58.182.68.5	45.224.208.9	201.219.216.132	64.222.143.70
41.214.185.190	181.166.6.76	93.181.110.200	195.140.202.142
117.93.118.65	91.232.96.6	182.69.247.134	36.239.234.4
181.23.64.91	157.55.196.184	157.179.122.0	16.236.15.27
71.246.211.18	47.74.11.33	83.91.201.121	196.15.130.222