47.92.55.104 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Aliyun Computing Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	" "	2020-09-19 22:02:34
attack	" "	2020-09-19 13:55:01
attackspambots	" "	2020-09-19 05:34:02
attackbotsspam	Unauthorized connection attempt detected from IP address 47.92.55.104 to port 167 [T]	2020-01-07 00:19:03

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.92.55.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17354
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;47.92.55.104.			IN	A

;; AUTHORITY SECTION:
.			479	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010600 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 07 00:18:54 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 104.55.92.47.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.55.92.47.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
178.19.182.43	attack	TCP (SYN) 178.19.182.43:7676 -> port 7547, len 44	2020-09-03 19:44:44
46.48.142.45	attackspambots	TCP (SYN) 46.48.142.45:42198 -> port 2323, len 40	2020-09-03 20:08:37
91.200.113.219	attackspambots	TCP (SYN) 91.200.113.219:25464 -> port 7547, len 40	2020-09-03 20:06:48
162.142.125.33	attack	Unauthorized SSH login attempts	2020-09-03 20:22:47
184.105.247.199	attackbots	TCP (SYN) 184.105.247.199:60372 -> port 2323, len 40	2020-09-03 20:02:31
112.85.42.67	attack	2020-09-03T14:15[Censored Hostname] sshd[15783]: Failed password for root from 112.85.42.67 port 25696 ssh2 2020-09-03T14:15[Censored Hostname] sshd[15783]: Failed password for root from 112.85.42.67 port 25696 ssh2 2020-09-03T14:15[Censored Hostname] sshd[15783]: Failed password for root from 112.85.42.67 port 25696 ssh2[...]	2020-09-03 20:20:43
191.36.227.26	attackspambots	Honeypot attack, port: 445, PTR: 26.227.36.191.hiitech.com.br.	2020-09-03 20:11:32
92.222.90.130	attackbots	Invalid user linaro from 92.222.90.130 port 59844	2020-09-03 20:18:00
95.169.12.164	attack	Sep 3 14:17:08 pornomens sshd\[18356\]: Invalid user ftpuser from 95.169.12.164 port 32828 Sep 3 14:17:08 pornomens sshd\[18356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.169.12.164 Sep 3 14:17:10 pornomens sshd\[18356\]: Failed password for invalid user ftpuser from 95.169.12.164 port 32828 ssh2 ...	2020-09-03 20:24:31
185.189.211.234	attackbots	TCP (SYN) 185.189.211.234:55237 -> port 5900, len 52	2020-09-03 19:50:07
202.157.185.131	attackspambots	202.157.185.131 - - [03/Sep/2020:12:16:06 +0100] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 202.157.185.131 - - [03/Sep/2020:12:16:08 +0100] "POST /wp-login.php HTTP/1.1" 200 1685 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 202.157.185.131 - - [03/Sep/2020:12:16:10 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-03 20:26:44
222.186.180.147	attackspam	Failed password for root from 222.186.180.147 port 9598 ssh2 Failed password for root from 222.186.180.147 port 9598 ssh2 Failed password for root from 222.186.180.147 port 9598 ssh2 Failed password for root from 222.186.180.147 port 9598 ssh2	2020-09-03 20:24:48
91.200.115.75	attackspambots	TCP (SYN) 91.200.115.75:32217 -> port 7547, len 40	2020-09-03 20:06:07
155.4.61.15	attackbotsspam	TCP (SYN) 155.4.61.15:51120 -> port 23, len 40	2020-09-03 19:57:48
178.19.174.250	attack	TCP (SYN) 178.19.174.250:4526 -> port 23, len 44	2020-09-03 19:51:19

Recently Reported IPs

39.98.62.28	205.186.135.42	193.56.28.103	65.78.197.204
72.85.56.3	39.79.126.253	36.155.115.183	27.96.224.196
5.130.103.27	223.149.206.38	223.149.141.4	223.78.98.24
223.71.232.246	222.188.60.116	183.193.234.78	183.80.89.179
182.247.142.139	182.246.243.137	179.232.88.121	178.18.96.10