58.254.1.3 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
58.254.132.49	attackspam	Feb 22 09:11:10 srv-ubuntu-dev3 sshd[46657]: Invalid user admin from 58.254.132.49 Feb 22 09:11:10 srv-ubuntu-dev3 sshd[46657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.49 Feb 22 09:11:10 srv-ubuntu-dev3 sshd[46657]: Invalid user admin from 58.254.132.49 Feb 22 09:11:12 srv-ubuntu-dev3 sshd[46657]: Failed password for invalid user admin from 58.254.132.49 port 31915 ssh2 Feb 22 09:14:49 srv-ubuntu-dev3 sshd[46903]: Invalid user hadoop from 58.254.132.49 Feb 22 09:14:49 srv-ubuntu-dev3 sshd[46903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.49 Feb 22 09:14:49 srv-ubuntu-dev3 sshd[46903]: Invalid user hadoop from 58.254.132.49 Feb 22 09:14:50 srv-ubuntu-dev3 sshd[46903]: Failed password for invalid user hadoop from 58.254.132.49 port 31918 ssh2 Feb 22 09:18:37 srv-ubuntu-dev3 sshd[47184]: Invalid user ll from 58.254.132.49 ...	2020-02-22 16:34:26
58.254.132.49	attack	Feb 12 03:17:18 sd-53420 sshd\[26574\]: Invalid user historis from 58.254.132.49 Feb 12 03:17:18 sd-53420 sshd\[26574\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.49 Feb 12 03:17:20 sd-53420 sshd\[26574\]: Failed password for invalid user historis from 58.254.132.49 port 27603 ssh2 Feb 12 03:20:20 sd-53420 sshd\[26872\]: Invalid user eoffice from 58.254.132.49 Feb 12 03:20:20 sd-53420 sshd\[26872\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.49 ...	2020-02-12 11:06:06
58.254.132.239	attack	Dec 25 07:26:21 zulu412 sshd\[792\]: Invalid user marlon from 58.254.132.239 port 22118 Dec 25 07:26:21 zulu412 sshd\[792\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.239 Dec 25 07:26:23 zulu412 sshd\[792\]: Failed password for invalid user marlon from 58.254.132.239 port 22118 ssh2 ...	2019-12-25 17:10:29
58.254.111.141	attack	Email spam message	2019-12-24 00:20:59
58.254.132.156	attackspambots	2019-12-22T22:33:25.718442Z f101cdbeadf2 New connection: 58.254.132.156:25772 (172.17.0.5:2222) [session: f101cdbeadf2] 2019-12-22T22:53:10.074190Z b12a0253e4d9 New connection: 58.254.132.156:25775 (172.17.0.5:2222) [session: b12a0253e4d9]	2019-12-23 06:56:04
58.254.132.239	attackbots	$f2bV_matches	2019-12-21 22:56:24
58.254.132.239	attackbots	Dec 20 09:18:36 php1 sshd\[14736\]: Invalid user iiiiiii from 58.254.132.239 Dec 20 09:18:36 php1 sshd\[14736\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.239 Dec 20 09:18:38 php1 sshd\[14736\]: Failed password for invalid user iiiiiii from 58.254.132.239 port 24575 ssh2 Dec 20 09:22:10 php1 sshd\[15103\]: Invalid user lovelace from 58.254.132.239 Dec 20 09:22:10 php1 sshd\[15103\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.239	2019-12-21 05:39:27
58.254.132.156	attackspam	Dec 19 01:56:13 TORMINT sshd\[4019\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.156 user=root Dec 19 01:56:15 TORMINT sshd\[4019\]: Failed password for root from 58.254.132.156 port 28376 ssh2 Dec 19 02:00:37 TORMINT sshd\[4213\]: Invalid user admin from 58.254.132.156 Dec 19 02:00:37 TORMINT sshd\[4213\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.156 ...	2019-12-19 15:03:01
58.254.132.239	attack	Dec 16 10:47:12 server sshd\[12615\]: Invalid user test from 58.254.132.239 Dec 16 10:47:12 server sshd\[12615\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.239 Dec 16 10:47:14 server sshd\[12615\]: Failed password for invalid user test from 58.254.132.239 port 13070 ssh2 Dec 16 10:53:28 server sshd\[14274\]: Invalid user tit0nich from 58.254.132.239 Dec 16 10:53:28 server sshd\[14274\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.239 ...	2019-12-16 17:07:14
58.254.132.239	attack	Dec 12 12:38:40 firewall sshd[8789]: Invalid user barisch from 58.254.132.239 Dec 12 12:38:42 firewall sshd[8789]: Failed password for invalid user barisch from 58.254.132.239 port 25597 ssh2 Dec 12 12:44:05 firewall sshd[8939]: Invalid user caspar from 58.254.132.239 ...	2019-12-13 04:45:59
58.254.132.239	attack	Dec 10 21:56:22 localhost sshd\[17711\]: Invalid user 1q2w3e4r5t6789 from 58.254.132.239 port 33248 Dec 10 21:56:22 localhost sshd\[17711\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.239 Dec 10 21:56:24 localhost sshd\[17711\]: Failed password for invalid user 1q2w3e4r5t6789 from 58.254.132.239 port 33248 ssh2	2019-12-11 05:07:20
58.254.132.156	attack	2019-12-05T06:30:38.557153abusebot-5.cloudsearch.cf sshd\[6486\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.156 user=root	2019-12-05 15:40:09
58.254.132.156	attackspam	fail2ban	2019-12-03 07:38:37
58.254.132.2	attack	SSH login attempts with user root.	2019-11-30 04:52:55
58.254.132.156	attack	Nov 28 12:36:59 TORMINT sshd\[24238\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.156 user=root Nov 28 12:37:01 TORMINT sshd\[24238\]: Failed password for root from 58.254.132.156 port 21769 ssh2 Nov 28 12:40:49 TORMINT sshd\[24410\]: Invalid user khatri from 58.254.132.156 Nov 28 12:40:49 TORMINT sshd\[24410\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.156 ...	2019-11-29 02:16:33

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.254.1.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40753
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;58.254.1.3.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400

;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 14:18:15 CST 2025
;; MSG SIZE  rcvd: 103

Host info

Host 3.1.254.58.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 3.1.254.58.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.95.168.120	attackbots	45.95.168.120 - - [27/Feb/2020:17:00:54 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2" ...	2020-02-27 21:08:32
92.117.138.21	attack	Feb 27 00:29:51 askasleikir sshd[199147]: Failed password for invalid user vps from 92.117.138.21 port 59800 ssh2	2020-02-27 21:26:41
139.162.102.46	attackbotsspam	TCP port 1723: Scan and connection	2020-02-27 21:11:52
137.74.209.90	attackbots	Feb 27 06:29:20 mxgate1 postfix/postscreen[6040]: CONNECT from [137.74.209.90]:57915 to [176.31.12.44]:25 Feb 27 06:29:20 mxgate1 postfix/dnsblog[6344]: addr 137.74.209.90 listed by domain zen.spamhaus.org as 127.0.0.3 Feb 27 06:29:20 mxgate1 postfix/dnsblog[6345]: addr 137.74.209.90 listed by domain b.barracudacentral.org as 127.0.0.2 Feb 27 06:29:26 mxgate1 postfix/postscreen[6040]: DNSBL rank 3 for [137.74.209.90]:57915 Feb 27 06:29:26 mxgate1 postfix/tlsproxy[6443]: CONNECT from [137.74.209.90]:57915 Feb x@x Feb 27 06:29:26 mxgate1 postfix/postscreen[6040]: DISCONNECT [137.74.209.90]:57915 Feb 27 06:29:26 mxgate1 postfix/tlsproxy[6443]: DISCONNECT [137.74.209.90]:57915 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=137.74.209.90	2020-02-27 21:24:38
154.16.202.232	attackspambots	Feb 27 06:53:34 sso sshd[9254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.16.202.232 Feb 27 06:53:36 sso sshd[9254]: Failed password for invalid user andrew from 154.16.202.232 port 32768 ssh2 ...	2020-02-27 21:44:13
123.207.122.51	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-27 21:39:25
137.74.209.113	attack	Feb 27 07:53:57 server postfix/smtpd[13117]: NOQUEUE: reject: RCPT from risk.yellowwayrelay.top[137.74.209.113]: 554 5.7.1 Service unavailable; Client host [137.74.209.113] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=	2020-02-27 21:45:32
182.69.172.189	attackspam	firewall-block, port(s): 23/tcp	2020-02-27 21:43:31
36.77.84.58	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-27 21:36:16
37.49.231.163	attackbots	Feb 27 13:40:46 debian-2gb-nbg1-2 kernel: \[5066440.406712\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=37.49.231.163 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=38998 PROTO=TCP SPT=44380 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-27 21:13:01
171.236.72.170	attackspam	Honeypot attack, port: 445, PTR: dynamic-ip-adsl.viettel.vn.	2020-02-27 21:31:06
49.232.34.247	attack	Feb 27 02:47:54 web1 sshd\[20281\]: Invalid user s from 49.232.34.247 Feb 27 02:47:54 web1 sshd\[20281\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.34.247 Feb 27 02:47:56 web1 sshd\[20281\]: Failed password for invalid user s from 49.232.34.247 port 53114 ssh2 Feb 27 02:57:19 web1 sshd\[21068\]: Invalid user postgres from 49.232.34.247 Feb 27 02:57:19 web1 sshd\[21068\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.34.247	2020-02-27 21:14:16
54.38.55.136	attackbotsspam	DATE:2020-02-27 12:52:31, IP:54.38.55.136, PORT:ssh SSH brute force auth (docker-dc)	2020-02-27 21:34:29
123.114.200.226	attackbotsspam	Feb 27 06:29:45 vps34202 sshd[2123]: User postfix from 123.114.200.226 not allowed because not listed in AllowUsers Feb 27 06:29:45 vps34202 sshd[2123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.114.200.226 user=postfix Feb 27 06:29:47 vps34202 sshd[2123]: Failed password for invalid user postfix from 123.114.200.226 port 5331 ssh2 Feb 27 06:29:48 vps34202 sshd[2123]: Received disconnect from 123.114.200.226: 11: Bye Bye [preauth] Feb 27 06:31:33 vps34202 sshd[2148]: Invalid user ghostname from 123.114.200.226 Feb 27 06:31:33 vps34202 sshd[2148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.114.200.226 Feb 27 06:31:35 vps34202 sshd[2148]: Failed password for invalid user ghostname from 123.114.200.226 port 8494 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=123.114.200.226	2020-02-27 21:30:40
138.117.193.147	attackspam	Port 1433 Scan	2020-02-27 21:28:08

Recently Reported IPs

205.24.198.29	121.95.134.184	85.87.40.165	91.146.173.118
49.205.251.171	215.93.29.14	123.214.180.151	199.33.87.230
178.168.85.186	4.54.80.167	41.97.157.83	247.142.134.34
93.25.56.168	238.48.72.50	43.10.250.110	2.41.40.68
99.31.177.245	217.56.84.117	239.199.221.106	41.153.59.22