58.246.5.122 - IPInfo

基本信息:

城市(city): Shanghai

省份(region): Shanghai

国家(country): China

运营商(isp): China Unicom Shanghai Network

主机名(hostname): unknown

机构(organization): China Unicom Shanghai network

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2019-09-13 16:29:56
attackbots	Brute force attempt	2019-06-29 06:29:12

相同子网IP讨论:

IP	类型	评论内容	时间
58.246.51.219	attack	Web Server Scan. RayID: 592bc0fc8e3fed7b, UA: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.3 (KHTML, like Gecko) Chrome/6.0.472.33 Safari/534.3 SE 2.X MetaSr 1.0, Country: CN	2020-05-21 04:24:51
58.246.51.190	attack	Unauthorized connection attempt detected from IP address 58.246.51.190 to port 22 [T]	2020-01-25 06:05:02
58.246.51.190	attack	Unauthorized connection attempt detected from IP address 58.246.51.190 to port 22 [T]	2020-01-21 23:52:25
58.246.51.190	attackbots	Unauthorized connection attempt detected from IP address 58.246.51.190 to port 22 [T]	2020-01-21 02:46:11
58.246.51.190	attack	Invalid user VMMAP from 58.246.51.190 port 54792	2020-01-17 07:37:09
58.246.51.190	attack	Jan 10 10:30:29 vps647732 sshd[18596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.51.190 Jan 10 10:30:31 vps647732 sshd[18596]: Failed password for invalid user admin from 58.246.51.190 port 14344 ssh2 ...	2020-01-10 17:43:33
58.246.51.190	attackspambots	Unauthorized connection attempt detected from IP address 58.246.51.190 to port 22 [T]	2020-01-09 03:33:09
58.246.51.190	attack	Unauthorized connection attempt detected from IP address 58.246.51.190 to port 22 [T]	2020-01-08 01:27:24

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.246.5.122
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23019
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;58.246.5.122.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042901 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 30 01:24:33 +08 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 122.5.246.58.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 122.5.246.58.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
222.186.30.57	attack	Feb 10 09:53:10 MK-Soft-Root1 sshd[27039]: Failed password for root from 222.186.30.57 port 55932 ssh2 Feb 10 09:53:16 MK-Soft-Root1 sshd[27039]: Failed password for root from 222.186.30.57 port 55932 ssh2 ...	2020-02-10 16:55:10
222.186.173.226	attack	Feb 10 09:29:25 localhost sshd\[5660\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226 user=root Feb 10 09:29:27 localhost sshd\[5660\]: Failed password for root from 222.186.173.226 port 19973 ssh2 Feb 10 09:29:31 localhost sshd\[5660\]: Failed password for root from 222.186.173.226 port 19973 ssh2	2020-02-10 16:30:58
149.202.34.92	attackbots	WordPress login Brute force / Web App Attack on client site.	2020-02-10 16:28:59
222.186.180.223	attack	pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root Failed password for root from 222.186.180.223 port 33598 ssh2 Failed password for root from 222.186.180.223 port 33598 ssh2 Failed password for root from 222.186.180.223 port 33598 ssh2 Failed password for root from 222.186.180.223 port 33598 ssh2	2020-02-10 16:36:55
14.29.164.137	attackspam	Feb 10 05:08:50 firewall sshd[32324]: Invalid user jrw from 14.29.164.137 Feb 10 05:08:52 firewall sshd[32324]: Failed password for invalid user jrw from 14.29.164.137 port 52450 ssh2 Feb 10 05:13:39 firewall sshd[32470]: Invalid user xnl from 14.29.164.137 ...	2020-02-10 16:23:24
76.186.81.229	attackbots	$f2bV_matches	2020-02-10 16:31:13
103.79.154.162	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-10 16:32:45
104.193.52.203	attackspambots	Feb 10 04:49:34 web8 sshd\[32032\]: Invalid user njx from 104.193.52.203 Feb 10 04:49:34 web8 sshd\[32032\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.193.52.203 Feb 10 04:49:36 web8 sshd\[32032\]: Failed password for invalid user njx from 104.193.52.203 port 36116 ssh2 Feb 10 04:53:56 web8 sshd\[1990\]: Invalid user ovt from 104.193.52.203 Feb 10 04:53:56 web8 sshd\[1990\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.193.52.203	2020-02-10 16:27:18
51.77.150.118	attack	unauthorized connection attempt	2020-02-10 16:27:37
176.113.115.251	attackspambots	Feb 10 09:18:12 [host] kernel: [4521722.435917] [U Feb 10 09:20:09 [host] kernel: [4521839.462227] [U Feb 10 09:22:04 [host] kernel: [4521954.616635] [U Feb 10 09:22:17 [host] kernel: [4521966.802881] [U Feb 10 09:24:55 [host] kernel: [4522125.536544] [U Feb 10 09:25:12 [host] kernel: [4522142.375581] [U	2020-02-10 16:31:41
217.91.51.74	attackbotsspam	1581310436 - 02/10/2020 05:53:56 Host: 217.91.51.74/217.91.51.74 Port: 445 TCP Blocked	2020-02-10 16:26:20
73.24.87.203	attackbots	Feb 10 07:44:42 host3 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=73.24.87.203, lip=207.180.241.50, TLS, session= Feb 10 07:44:49 host3 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=73.24.87.203, lip=207.180.241.50, TLS: SSL_read() syscall failed: Connection reset by peer, session= Feb 10 07:45:26 host3 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=73.24.87.203, lip=207.180.241.50, TLS, session= Feb 10 07:45:33 host3 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=73.24.87.203, lip=207.180.241.50, TLS, session=<86yiFTOe6c9JGFfL> Feb 10 07:45:33 host3 dovecot: imap-login: Aborted login (auth failed, 1 att ...	2020-02-10 16:42:35
195.154.87.159	attackbots	WordPress login Brute force / Web App Attack on client site.	2020-02-10 16:22:37
1.53.136.64	attack	Honeypot attack, port: 81, PTR: PTR record not found	2020-02-10 16:45:49
170.82.23.41	attackbots	Unauthorized connection attempt detected from IP address 170.82.23.41 to port 8080	2020-02-10 16:34:40

最近上报的IP列表

173.213.132.149	95.85.68.234	203.45.133.7	74.114.148.5
178.64.23.137	116.234.103.13	27.145.235.106	37.44.252.163
148.70.210.77	142.139.142.164	51.145.113.75	159.65.243.28
99.80.82.144	46.19.85.85	171.35.175.211	86.160.95.165
116.58.241.205	37.32.43.198	78.89.229.173	221.211.52.199