2.58.148.50 - IPInfo

Basic Info

City: Dulles Town Center

Region: Virginia

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
2.58.148.71	spamattack	PHISHING AND SPAM ATTACK GROUP USES LayerHost, IP SERVER LLC, Root Networks LLC, Serverion BV, XSServer GmbH, Xervers, Colocrossing 104.148.18.18 Bitcoin Select arianna.lavoi@boschbuy.club, Dividends Paid Every 60 Minutes - New underground DeFi crypto, 05 Jul 2021 2.58.148.71 Save on the Cost of Gas - Effuel@shofybox.us, This Simple Device Saves You 25% on Your Car's Fuel Consumption, Wed, 7 Jul inetnum: 2.58.148.0 - 2.58.149.255 org-name: Serverion BV inetnum: 5.252.192.0 - 5.252.195.255 org-name: IP SERVER LLC NetRange: 23.247.0.0 - 23.247.127.255 OrgName: LayerHost NetRange: 31.210.22.0 - 31.210.23.255 org-name: Serverion BV NetRange: 103.73.156.0 - 103.73.156.255 OrgName: LayerHost NetRange: 104.148.0.0 - 104.148.127.255 OrgName: LayerHost NetRange: 104.223.128.0 - 104.223.255.255 OrgName: LayerHost NetRange: 107.179.0.0 - 107.179.127.255 OrgName: LayerHost NetRange: 134.73.0.0 - 134.73.255.255 CustName: Root Networks LLC NetRange: 157.52.128.0 - 157.52.255.255 OrgName: LayerHost NetRange: 185.239.242.0 - 185.239.242.255 org-name: Serverion BV inetnum: 194.59.216.0 - 194.59.217.255 org-name: Serverion BV inetnum: 195.62.32.0 - 195.62.33.255 org-name: XSServer GmbH inetnum: 195.133.12.0 - 195.133.15.255 netname: Xervers inetnum: 195.133.39.0 - 195.133.39.255 org-name: Serverion BV NetRange: 198.12.64.0 - 198.12.127.255 OrgName: ColoCrossing Some similar emails from same group 5.252.194.15 Plansforsheds - EasyShedPlans@ultraboostz.co, Discover The Easiest Way To Build Beautiful Sheds..., 15 Jun 2021 31.210.22.9 Fat belly - info@bloodpressure.buzz, Japanese “Fix” for Belly Fat?, 17 Jun 2021 31.210.22.106 On Hold - OnHold@ecobuds.us, Your FREE Red Laser Targeting System, 21 Jun 2021	2021-07-08 06:00:22

Type

Details

Datetime

2.58.148.71

spamattack

PHISHING AND SPAM ATTACK
GROUP USES LayerHost, IP SERVER LLC, Root Networks LLC, Serverion BV, XSServer GmbH, Xervers, Colocrossing
104.148.18.18	Bitcoin Select arianna.lavoi@boschbuy.club, Dividends Paid Every 60 Minutes - New underground DeFi crypto, 05 Jul 2021
2.58.148.71	Save on the Cost of Gas - Effuel@shofybox.us, This Simple Device Saves You 25% on Your Car's Fuel Consumption, Wed, 7 Jul 
inetnum:        2.58.148.0 - 2.58.149.255	org-name:       Serverion BV
inetnum:        5.252.192.0 - 5.252.195.255	org-name:       IP SERVER LLC
NetRange:       23.247.0.0 - 23.247.127.255	OrgName:        LayerHost
NetRange:       31.210.22.0 - 31.210.23.255	org-name:       Serverion BV
NetRange:       103.73.156.0 - 103.73.156.255	OrgName:        LayerHost
NetRange:       104.148.0.0 - 104.148.127.255	OrgName:        LayerHost
NetRange:       104.223.128.0 - 104.223.255.255 OrgName:        LayerHost
NetRange:       107.179.0.0 - 107.179.127.255	OrgName:        LayerHost
NetRange:       134.73.0.0 - 134.73.255.255	CustName:       Root Networks LLC
NetRange:       157.52.128.0 - 157.52.255.255	OrgName:        LayerHost
NetRange:       185.239.242.0 - 185.239.242.255	org-name:       Serverion BV
inetnum:        194.59.216.0 - 194.59.217.255	org-name:       Serverion BV
inetnum:        195.62.32.0 - 195.62.33.255	org-name:       XSServer GmbH
inetnum:        195.133.12.0 - 195.133.15.255   netname:        Xervers
inetnum:        195.133.39.0 - 195.133.39.255	org-name:       Serverion BV
NetRange:       198.12.64.0 - 198.12.127.255	OrgName:        ColoCrossing
Some similar emails from same group
5.252.194.15  	Plansforsheds - EasyShedPlans@ultraboostz.co, Discover The Easiest Way To Build Beautiful Sheds..., 15 Jun 2021 
31.210.22.9    	Fat belly - info@bloodpressure.buzz,  Japanese “Fix” for Belly Fat?, 17 Jun 2021
31.210.22.106  	On Hold - OnHold@ecobuds.us, Your FREE Red Laser Targeting System, 21 Jun 2021

2021-07-08 06:00:22

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.58.148.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1798
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;2.58.148.50.			IN	A

;; AUTHORITY SECTION:
.			17	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023080701 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 08 03:37:16 CST 2023
;; MSG SIZE  rcvd: 104

Host info

50.148.58.2.in-addr.arpa domain name pointer ongkongpoly.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
50.148.58.2.in-addr.arpa	name = ongkongpoly.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
195.154.29.107	attackspam	fail2ban honeypot	2020-01-11 00:22:38
222.186.42.7	attackspam	Unauthorized connection attempt detected from IP address 222.186.42.7 to port 22 [T]	2020-01-11 00:52:18
70.190.21.240	attackbotsspam	01/10/2020-13:58:32.630493 70.190.21.240 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-01-11 00:10:56
178.89.80.61	attack	Jan 10 13:58:39 grey postfix/smtpd\[13997\]: NOQUEUE: reject: RCPT from unknown\[178.89.80.61\]: 554 5.7.1 Service unavailable\; Client host \[178.89.80.61\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?178.89.80.61\; from=\ to=\ proto=ESMTP helo=\<178.89.80.61.megaline.telecom.kz\> ...	2020-01-11 00:06:28
117.157.15.27	attackbots	Excessive Port-Scanning	2020-01-11 00:14:15
222.186.30.218	attackspambots	SSH authentication failure x 6 reported by Fail2Ban ...	2020-01-11 00:43:43
106.54.40.11	attackbots	Jan 10 12:58:42 firewall sshd[15024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.40.11 Jan 10 12:58:42 firewall sshd[15024]: Invalid user guido from 106.54.40.11 Jan 10 12:58:43 firewall sshd[15024]: Failed password for invalid user guido from 106.54.40.11 port 44358 ssh2 ...	2020-01-11 00:14:59
189.213.57.130	attack	Automatic report - Port Scan Attack	2020-01-11 00:16:53
222.186.30.114	attackspam	Jan 10 17:14:18 MK-Soft-VM7 sshd[23322]: Failed password for root from 222.186.30.114 port 15480 ssh2 Jan 10 17:14:21 MK-Soft-VM7 sshd[23322]: Failed password for root from 222.186.30.114 port 15480 ssh2 ...	2020-01-11 00:24:28
170.0.64.15	attackspam	Jan 10 13:58:22 grey postfix/smtpd\[26123\]: NOQUEUE: reject: RCPT from unknown\[170.0.64.15\]: 554 5.7.1 Service unavailable\; Client host \[170.0.64.15\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=170.0.64.15\; from=\ to=\ proto=ESMTP helo=\<\[170.0.64.15\]\> ...	2020-01-11 00:13:53
175.176.91.154	attackbotsspam	Jan 10 13:57:42 grey postfix/smtpd\[17244\]: NOQUEUE: reject: RCPT from unknown\[175.176.91.154\]: 554 5.7.1 Service unavailable\; Client host \[175.176.91.154\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[175.176.91.154\]\; from=\ to=\ proto=ESMTP helo=\<\[175.176.91.154\]\> ...	2020-01-11 00:43:24
80.82.64.146	attackbotsspam	Portscan or hack attempt detected by psad/fwsnort	2020-01-11 00:50:49
69.158.207.141	attack	Jan 10 14:21:03 email sshd\[334\]: Invalid user kafka from 69.158.207.141 Jan 10 14:21:03 email sshd\[334\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.158.207.141 Jan 10 14:21:05 email sshd\[334\]: Failed password for invalid user kafka from 69.158.207.141 port 56913 ssh2 Jan 10 14:21:25 email sshd\[389\]: Invalid user zookeeper from 69.158.207.141 Jan 10 14:21:25 email sshd\[389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.158.207.141 ...	2020-01-11 00:51:13
104.236.31.227	attack	Jan 10 15:31:54 plex sshd[15392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.31.227 user=root Jan 10 15:31:56 plex sshd[15392]: Failed password for root from 104.236.31.227 port 48845 ssh2	2020-01-11 00:26:42
14.52.57.58	attackbots	Jan 9 20:05:47 xxxxxxx7446550 sshd[11351]: Did not receive identification string from 14.52.57.58 Jan 9 20:05:49 xxxxxxx7446550 sshd[11363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.52.57.58 user=r.r Jan 9 20:05:51 xxxxxxx7446550 sshd[11363]: Failed password for r.r from 14.52.57.58 port 63407 ssh2 Jan 9 20:05:51 xxxxxxx7446550 sshd[11366]: Received disconnect from 14.52.57.58: 11: Bye Bye Jan 9 20:05:53 xxxxxxx7446550 sshd[11399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.52.57.58 user=r.r Jan 9 20:05:55 xxxxxxx7446550 sshd[11399]: Failed password for r.r from 14.52.57.58 port 63720 ssh2 Jan 9 20:05:55 xxxxxxx7446550 sshd[11404]: Received disconnect from 14.52.57.58: 11: Bye Bye Jan 9 20:05:57 xxxxxxx7446550 sshd[11417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.52.57.58 user=r.r Jan 9 20:05:59 xxxxxxx7446550 ss........ -------------------------------	2020-01-11 00:06:02

Recently Reported IPs

185.176.220.126	185.28.39.9	63.141.202.160	118.50.138.14
185.81.145.228	50.161.222.255	189.21.167.14	174.70.141.187
107.189.5.233	154.66.120.79	6.124.103.71	199.130.199.9
159.168.195.198	62.200.35.149	140.254.104.194	184.105.139.0
163.152.121.228	149.129.222.203	13.228.24.148	175.200.234.189