65.49.20.112 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): The Shadow Server Foundation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Mar 28 04:46:56 debian-2gb-nbg1-2 kernel: \[7626284.461169\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=65.49.20.112 DST=195.201.40.59 LEN=1258 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=UDP SPT=57546 DPT=443 LEN=1238	2020-03-28 20:16:09

类型

评论内容

时间

attackspambots

Mar 28 04:46:56 debian-2gb-nbg1-2 kernel: \[7626284.461169\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=65.49.20.112 DST=195.201.40.59 LEN=1258 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=UDP SPT=57546 DPT=443 LEN=1238

2020-03-28 20:16:09

相同子网IP讨论:

IP	类型	评论内容	时间
65.49.20.78	botsattack	Compromised IP	2025-01-28 22:48:38
65.49.20.67	botsattackproxy	Redis bot	2024-04-23 21:05:33
65.49.20.118	attackproxy	VPN fraud	2023-06-12 13:45:52
65.49.20.110	proxy	VPN fraud	2023-06-06 12:43:08
65.49.20.101	proxy	VPN fraud	2023-06-01 16:00:58
65.49.20.107	proxy	VPN fraud	2023-05-29 12:59:34
65.49.20.100	proxy	VPN fraud	2023-05-22 12:53:45
65.49.20.114	proxy	VPN fraud	2023-04-07 13:32:29
65.49.20.124	proxy	VPN fraud	2023-04-03 13:08:01
65.49.20.105	proxy	VPN fraud	2023-03-16 13:52:13
65.49.20.123	proxy	VPN fraud	2023-03-09 14:09:02
65.49.20.90	proxy	VPN scan	2023-02-20 14:00:04
65.49.20.119	proxy	VPN fraud	2023-02-14 20:08:26
65.49.20.106	proxy	Brute force VPN	2023-02-08 14:01:13
65.49.20.77	proxy	VPN	2023-02-06 13:57:51

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 65.49.20.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39309
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;65.49.20.112.			IN	A

;; AUTHORITY SECTION:
.			159	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032801 1800 900 604800 86400

;; Query time: 84 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 28 20:16:02 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 112.20.49.65.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 112.20.49.65.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
5.251.4.164	attackbotsspam	Email rejected due to spam filtering	2020-03-03 07:30:12
132.251.2.71	attackbots	Email rejected due to spam filtering	2020-03-03 07:31:14
37.34.191.86	attack	Unauthorised access (Mar 3) SRC=37.34.191.86 LEN=52 TTL=117 ID=6266 DF TCP DPT=445 WINDOW=8192 SYN	2020-03-03 07:41:43
186.194.105.92	attackspambots	Unauthorized connection attempt from IP address 186.194.105.92 on Port 445(SMB)	2020-03-03 07:25:37
95.185.176.164	attackbotsspam	Unauthorized connection attempt from IP address 95.185.176.164 on Port 445(SMB)	2020-03-03 07:23:32
49.235.87.213	attackspam	Mar 3 00:17:21 server sshd[608012]: Failed password for invalid user wangtingzhang from 49.235.87.213 port 42986 ssh2 Mar 3 00:26:51 server sshd[611128]: Failed password for invalid user ams from 49.235.87.213 port 36050 ssh2 Mar 3 00:36:24 server sshd[614268]: Failed password for invalid user whmcs from 49.235.87.213 port 57346 ssh2	2020-03-03 07:57:08
49.88.112.113	attackspambots	Mar 2 18:23:49 plusreed sshd[28171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.113 user=root Mar 2 18:23:51 plusreed sshd[28171]: Failed password for root from 49.88.112.113 port 18637 ssh2 ...	2020-03-03 07:25:12
103.231.188.8	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-03 07:56:09
114.199.185.180	attackspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-03-03 07:24:24
24.73.161.2	attackbots	Unauthorized connection attempt detected from IP address 24.73.161.2 to port 23 [J]	2020-03-03 07:55:05
47.52.172.105	attackspam	Blocked by UFW	2020-03-03 07:36:49
139.59.211.245	attackspambots	Mar 3 04:36:49 gw1 sshd[9382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.211.245 Mar 3 04:36:50 gw1 sshd[9382]: Failed password for invalid user store from 139.59.211.245 port 41914 ssh2 ...	2020-03-03 07:49:45
37.79.0.75	attackspam	Mar 2 23:01:04 grey postfix/smtpd\[16522\]: NOQUEUE: reject: RCPT from unknown\[37.79.0.75\]: 554 5.7.1 Service unavailable\; Client host \[37.79.0.75\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[37.79.0.75\]\; from=\ to=\ proto=SMTP helo=\ ...	2020-03-03 07:44:24
118.172.232.165	attackspambots	Unauthorized connection attempt from IP address 118.172.232.165 on Port 445(SMB)	2020-03-03 08:01:21
152.136.101.83	attack	2020-03-02T23:40:10.279153shield sshd\[17268\]: Invalid user bananapi from 152.136.101.83 port 37796 2020-03-02T23:40:10.284513shield sshd\[17268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.101.83 2020-03-02T23:40:11.902426shield sshd\[17268\]: Failed password for invalid user bananapi from 152.136.101.83 port 37796 ssh2 2020-03-02T23:47:43.898254shield sshd\[18498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.101.83 user=root 2020-03-02T23:47:45.370810shield sshd\[18498\]: Failed password for root from 152.136.101.83 port 41196 ssh2	2020-03-03 07:48:36

最近上报的IP列表

91.218.65.190	190.138.11.111	244.135.8.124	91.90.149.82
46.248.39.46	46.180.69.175	34.223.212.166	202.70.72.45
123.24.111.5	27.115.58.138	27.111.82.247	197.28.65.109
95.250.216.26	111.20.101.3	179.90.191.20	42.117.195.247
62.242.161.16	166.166.98.154	232.24.236.185	183.206.236.216