58.248.4.244 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Jinwanbang-Tech-Invest-Corp Guangzhou Guangdong Province

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	58.248.4.244 has been banned for [spam] ...	2020-07-24 12:25:30
attack	MagicSpam Rule: check_ip_reverse_dns; Spammer IP: 58.248.4.244	2019-08-06 17:38:52

Comments on same subnet:

IP	Type	Details	Datetime
58.248.4.158	attack	May 2 05:37:45 mail.srvfarm.net postfix/smtpd[1730758]: NOQUEUE: reject: RCPT from unknown[58.248.4.158]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo= May 2 05:39:26 mail.srvfarm.net postfix/smtpd[1730758]: NOQUEUE: reject: RCPT from unknown[58.248.4.158]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo= May 2 05:39:28 mail.srvfarm.net postfix/smtpd[1730731]: NOQUEUE: reject: RCPT from unknown[58.248.4.158]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo= May 2 05:39:30 mail.srvfarm.net postfix/smtpd[1730541]: NOQUEUE: reject: RCPT from unknown[58.248.4.158]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo= May 2 05:39:33 mail.srvfarm.net postfix/smtpd[1730732]: NOQU	2020-05-02 12:27:47
58.248.4.158	attackbotsspam	Absender hat Spam-Falle ausgel?st	2019-11-05 21:02:42

Type

Details

Datetime

58.248.4.158

attack

May  2 05:37:45 mail.srvfarm.net postfix/smtpd[1730758]: NOQUEUE: reject: RCPT from unknown[58.248.4.158]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=
May  2 05:39:26 mail.srvfarm.net postfix/smtpd[1730758]: NOQUEUE: reject: RCPT from unknown[58.248.4.158]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=
May  2 05:39:28 mail.srvfarm.net postfix/smtpd[1730731]: NOQUEUE: reject: RCPT from unknown[58.248.4.158]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=
May  2 05:39:30 mail.srvfarm.net postfix/smtpd[1730541]: NOQUEUE: reject: RCPT from unknown[58.248.4.158]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=
May  2 05:39:33 mail.srvfarm.net postfix/smtpd[1730732]: NOQU

2020-05-02 12:27:47

58.248.4.158

attackbotsspam

Absender hat Spam-Falle ausgel?st

2019-11-05 21:02:42

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.248.4.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9059
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;58.248.4.244.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080600 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Aug 06 17:38:45 CST 2019
;; MSG SIZE  rcvd: 116

Host info

Host 244.4.248.58.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 244.4.248.58.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
196.189.5.141	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-27 21:10:13
80.82.77.33	attack	01/27/2020-13:39:32.446201 80.82.77.33 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-01-27 21:01:19
112.85.42.172	attackbotsspam	Jan 27 13:35:59 dedicated sshd[27714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172 user=root Jan 27 13:36:00 dedicated sshd[27714]: Failed password for root from 112.85.42.172 port 48550 ssh2	2020-01-27 20:36:28
49.207.13.99	attack	Honeypot attack, port: 445, PTR: broadband.actcorp.in.	2020-01-27 20:55:50
221.0.49.116	attack	Honeypot attack, port: 5555, PTR: PTR record not found	2020-01-27 20:56:43
49.151.49.116	attack	Honeypot attack, port: 445, PTR: dsl.49.151.49.116.pldt.net.	2020-01-27 20:58:06
183.88.0.221	attackspambots	Honeypot attack, port: 445, PTR: mx-ll-183.88.0-221.dynamic.3bb.in.th.	2020-01-27 20:49:45
118.24.154.64	attackspam	Unauthorized connection attempt detected from IP address 118.24.154.64 to port 2220 [J]	2020-01-27 20:47:41
183.167.229.180	attackbotsspam	Jan 27 09:54:18 shared-1 sshd\[8925\]: Invalid user admin from 183.167.229.180Jan 27 09:54:22 shared-1 sshd\[8927\]: Invalid user admin from 183.167.229.180 ...	2020-01-27 21:12:47
178.216.231.238	attackspambots	Honeypot attack, port: 445, PTR: 238.231.216.178.mcom.dp.ua.	2020-01-27 21:09:00
183.89.59.92	attackbots	Honeypot attack, port: 445, PTR: mx-ll-183.89.59-92.dynamic.3bb.co.th.	2020-01-27 20:53:43
185.27.232.212	attackbotsspam	Unauthorized connection attempt detected from IP address 185.27.232.212 to port 5555 [J]	2020-01-27 20:58:30
118.97.98.204	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-27 20:57:33
222.233.113.134	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-27 21:04:02
119.6.107.149	attackspam	slow and persistent scanner	2020-01-27 20:37:24

Recently Reported IPs

177.189.193.155	185.70.40.103	91.243.90.44	201.15.170.226
235.90.77.9	125.142.63.88	201.62.75.176	189.22.130.54
244.84.240.215	114.231.140.61	183.113.65.159	66.249.64.170
212.110.252.45	145.15.151.145	1.81.233.151	12.224.77.108
93.201.91.224	212.145.164.120	7.173.75.170	231.213.171.252