59.57.248.34 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Fujian Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	CN_APNIC-HM_<177>1587873120 [1:2403386:56948] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 44 [Classification: Misc Attack] [Priority: 2]: {TCP} 59.57.248.34:56159	2020-04-26 15:47:30
attackbots	Unauthorized connection attempt detected from IP address 59.57.248.34 to port 1433 [J]	2020-02-01 17:29:26
attack	Unauthorized connection attempt detected from IP address 59.57.248.34 to port 1433 [J]	2020-01-30 19:10:53
attack	unauthorized connection attempt	2020-01-09 16:58:11
attackbots	Unauthorized connection attempt detected from IP address 59.57.248.34 to port 1433	2020-01-02 20:50:02

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.57.248.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25102
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;59.57.248.34.			IN	A

;; AUTHORITY SECTION:
.			559	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010200 1800 900 604800 86400

;; Query time: 776 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 02 20:49:54 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 34.248.57.59.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 34.248.57.59.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
36.46.142.80	attackbotsspam	Jul 9 05:55:42 sshgateway sshd\[13003\]: Invalid user yc from 36.46.142.80 Jul 9 05:55:42 sshgateway sshd\[13003\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.46.142.80 Jul 9 05:55:44 sshgateway sshd\[13003\]: Failed password for invalid user yc from 36.46.142.80 port 33375 ssh2	2020-07-09 14:42:13
205.215.16.229	attack	Honeypot attack, port: 5555, PTR: n205215z16l229.bb.ctmip.net.	2020-07-09 14:33:43
192.144.188.169	attack	SSH Brute-Force. Ports scanning.	2020-07-09 14:27:20
213.32.92.57	attack	Jul 8 19:24:28 hanapaa sshd\[22471\]: Invalid user greg from 213.32.92.57 Jul 8 19:24:28 hanapaa sshd\[22471\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.92.57 Jul 8 19:24:31 hanapaa sshd\[22471\]: Failed password for invalid user greg from 213.32.92.57 port 52896 ssh2 Jul 8 19:27:33 hanapaa sshd\[22669\]: Invalid user roel from 213.32.92.57 Jul 8 19:27:33 hanapaa sshd\[22669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.92.57	2020-07-09 14:07:59
96.48.158.15	attack	Honeypot attack, port: 445, PTR: S0106c05627353772.vs.shawcable.net.	2020-07-09 14:08:38
166.62.41.108	attackspam	Automatic report - Banned IP Access	2020-07-09 14:43:44
49.232.165.242	attackspambots	Jul 9 03:05:07 firewall sshd[26309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.165.242 Jul 9 03:05:07 firewall sshd[26309]: Invalid user fyokla from 49.232.165.242 Jul 9 03:05:09 firewall sshd[26309]: Failed password for invalid user fyokla from 49.232.165.242 port 59430 ssh2 ...	2020-07-09 14:06:08
181.48.155.149	attack	2020-07-09T02:16:06.9270941495-001 sshd[3032]: Invalid user jiachi from 181.48.155.149 port 39824 2020-07-09T02:16:09.7134791495-001 sshd[3032]: Failed password for invalid user jiachi from 181.48.155.149 port 39824 ssh2 2020-07-09T02:18:07.3950391495-001 sshd[3096]: Invalid user faithe from 181.48.155.149 port 38882 2020-07-09T02:18:07.3981471495-001 sshd[3096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.155.149 2020-07-09T02:18:07.3950391495-001 sshd[3096]: Invalid user faithe from 181.48.155.149 port 38882 2020-07-09T02:18:08.7917791495-001 sshd[3096]: Failed password for invalid user faithe from 181.48.155.149 port 38882 ssh2 ...	2020-07-09 14:40:07
192.241.216.87	attackspam	Automatic report - Banned IP Access	2020-07-09 14:06:24
162.243.131.250	attackspambots	Fail2Ban Ban Triggered	2020-07-09 14:41:31
59.89.59.226	attackspam	07/08/2020-23:55:47.554582 59.89.59.226 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-07-09 14:40:30
185.36.81.232	attack	\[Jul 9 16:03:50\] NOTICE\[31025\] chan_sip.c: Registration from '"850" \' failed for '185.36.81.232:58292' - Wrong password \[Jul 9 16:04:49\] NOTICE\[31025\] chan_sip.c: Registration from '"860" \' failed for '185.36.81.232:53215' - Wrong password \[Jul 9 16:05:48\] NOTICE\[31025\] chan_sip.c: Registration from '"870" \' failed for '185.36.81.232:64620' - Wrong password \[Jul 9 16:06:47\] NOTICE\[31025\] chan_sip.c: Registration from '"880" \' failed for '185.36.81.232:59530' - Wrong password \[Jul 9 16:07:45\] NOTICE\[31025\] chan_sip.c: Registration from '"888" \' failed for '185.36.81.232:61875' - Wrong password \[Jul 9 16:08:44\] NOTICE\[31025\] chan_sip.c: Registration from '"900" \' failed for '185.36.81.232:65466' - Wrong password \[Jul 9 16:09:41\] NOTICE\[31025\] chan_sip.c: Registration from '"9 ...	2020-07-09 14:15:05
182.232.217.202	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-07-09 14:39:03
122.116.157.160	attackbotsspam	Honeypot attack, port: 81, PTR: 122-116-157-160.HINET-IP.hinet.net.	2020-07-09 14:24:41
111.231.94.138	attackbotsspam	Jul 9 03:06:23 firewall sshd[26353]: Invalid user debian from 111.231.94.138 Jul 9 03:06:25 firewall sshd[26353]: Failed password for invalid user debian from 111.231.94.138 port 41486 ssh2 Jul 9 03:10:23 firewall sshd[26416]: Invalid user lizongyi from 111.231.94.138 ...	2020-07-09 14:35:31

Recently Reported IPs

58.71.211.108	90.164.121.161	134.60.184.11	203.213.163.50
152.238.87.248	49.49.245.71	47.92.72.19	14.182.162.217
42.113.229.149	223.152.200.122	183.17.228.10	139.5.253.33
125.161.68.137	119.123.223.131	119.123.220.231	119.120.76.171
163.57.151.123	111.35.175.221	88.204.204.162	116.110.135.64