65.49.20.123 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): The Shadow Server Foundation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
proxy	VPN fraud	2023-03-09 14:09:02
attack	443/udp 22/tcp... [2020-07-10/08-29]5pkt,1pt.(tcp),1pt.(udp)	2020-08-29 16:14:10
attackspam	SSH break in or HTTP scan ...	2020-07-14 16:33:06
attack	TCP (SYN) 65.49.20.123:42518 -> port 22, len 44	2020-06-02 19:50:52

相同子网IP讨论:

IP	类型	评论内容	时间
65.49.20.78	botsattack	Compromised IP	2025-01-28 22:48:38
65.49.20.67	botsattackproxy	Redis bot	2024-04-23 21:05:33
65.49.20.118	attackproxy	VPN fraud	2023-06-12 13:45:52
65.49.20.110	proxy	VPN fraud	2023-06-06 12:43:08
65.49.20.101	proxy	VPN fraud	2023-06-01 16:00:58
65.49.20.107	proxy	VPN fraud	2023-05-29 12:59:34
65.49.20.100	proxy	VPN fraud	2023-05-22 12:53:45
65.49.20.114	proxy	VPN fraud	2023-04-07 13:32:29
65.49.20.124	proxy	VPN fraud	2023-04-03 13:08:01
65.49.20.105	proxy	VPN fraud	2023-03-16 13:52:13
65.49.20.90	proxy	VPN scan	2023-02-20 14:00:04
65.49.20.119	proxy	VPN fraud	2023-02-14 20:08:26
65.49.20.106	proxy	Brute force VPN	2023-02-08 14:01:13
65.49.20.77	proxy	VPN	2023-02-06 13:57:51
65.49.20.81	proxy	VPN	2022-12-27 13:51:59

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 65.49.20.123
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57787
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;65.49.20.123.			IN	A

;; AUTHORITY SECTION:
.			567	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060200 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 02 19:50:44 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 123.20.49.65.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 123.20.49.65.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
117.58.241.164	attackbotsspam	2019-07-28 01:02:46 H=(host-244-243-58-117.alwayson.net.bd) [117.58.241.164]:42866 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address 2019-07-28 01:02:46 H=(host-244-243-58-117.alwayson.net.bd) [117.58.241.164]:42866 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed 2019-07-28 01:02:46 H=(host-244-243-58-117.alwayson.net.bd) [117.58.241.164]:42866 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed ...	2019-07-28 19:18:59
202.205.84.51	attackbotsspam	Unauthorized connection attempt from IP address 202.205.84.51 on Port 445(SMB)	2019-07-28 20:08:02
198.23.189.18	attack	Jul 28 07:27:01 plusreed sshd[24969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.23.189.18 user=root Jul 28 07:27:03 plusreed sshd[24969]: Failed password for root from 198.23.189.18 port 50431 ssh2 Jul 28 07:31:11 plusreed sshd[26925]: Invalid user from 198.23.189.18 ...	2019-07-28 19:46:10
80.13.21.150	attackspambots	Unauthorised access (Jul 28) SRC=80.13.21.150 LEN=44 TTL=244 ID=22091 TCP DPT=139 WINDOW=1024 SYN	2019-07-28 19:48:36
92.222.71.143	attack	92.222.71.143 - - \[28/Jul/2019:13:31:22 +0200\] "POST /wp-login.php HTTP/1.1" 200 2110 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 92.222.71.143 - - \[28/Jul/2019:13:31:22 +0200\] "POST /wp-login.php HTTP/1.1" 200 2091 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ...	2019-07-28 19:42:43
36.67.99.203	attack	Unauthorized connection attempt from IP address 36.67.99.203 on Port 445(SMB)	2019-07-28 20:10:55
219.80.62.195	attackspambots	Automatic report - Banned IP Access	2019-07-28 19:47:38
180.126.220.238	attackbots	20 attempts against mh-ssh on ice.magehost.pro	2019-07-28 20:01:16
206.189.145.152	attack	Invalid user zimbra from 206.189.145.152 port 41975	2019-07-28 20:03:02
185.65.180.250	attackspam	3389BruteforceFW23	2019-07-28 19:36:46
143.0.191.246	attackspam	Automatic report - Port Scan Attack	2019-07-28 19:24:57
90.154.109.54	attackbots	Unauthorized connection attempt from IP address 90.154.109.54 on Port 445(SMB)	2019-07-28 19:55:32
218.92.0.193	attack	SSH Brute-Force attacks	2019-07-28 19:39:32
218.87.254.235	attack	failed_logins	2019-07-28 19:45:24
174.138.56.93	attackbots	Triggered by Fail2Ban at Vostok web server	2019-07-28 20:09:51

最近上报的IP列表

181.54.217.56	121.94.217.86	90.227.85.203	149.253.197.116
134.217.103.46	97.72.172.92	187.239.65.223	150.79.215.239
91.137.17.241	45.166.170.102	93.107.151.108	175.215.30.254
178.102.19.17	102.90.53.154	112.246.107.14	47.93.114.57
55.16.72.58	52.45.142.254	95.238.251.249	89.155.135.48