65.49.20.6 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Brave Software

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	SSH login attempts with user root at 2020-02-05.	2020-02-06 14:38:39
attackspambots	SSH login attempts with user root at 2020-01-02.	2020-01-03 00:19:36

相同子网IP讨论:

IP	类型	评论内容	时间
65.49.20.78	botsattack	Compromised IP	2025-01-28 22:48:38
65.49.20.67	botsattackproxy	Redis bot	2024-04-23 21:05:33
65.49.20.118	attackproxy	VPN fraud	2023-06-12 13:45:52
65.49.20.110	proxy	VPN fraud	2023-06-06 12:43:08
65.49.20.101	proxy	VPN fraud	2023-06-01 16:00:58
65.49.20.107	proxy	VPN fraud	2023-05-29 12:59:34
65.49.20.100	proxy	VPN fraud	2023-05-22 12:53:45
65.49.20.114	proxy	VPN fraud	2023-04-07 13:32:29
65.49.20.124	proxy	VPN fraud	2023-04-03 13:08:01
65.49.20.105	proxy	VPN fraud	2023-03-16 13:52:13
65.49.20.123	proxy	VPN fraud	2023-03-09 14:09:02
65.49.20.90	proxy	VPN scan	2023-02-20 14:00:04
65.49.20.119	proxy	VPN fraud	2023-02-14 20:08:26
65.49.20.106	proxy	Brute force VPN	2023-02-08 14:01:13
65.49.20.77	proxy	VPN	2023-02-06 13:57:51

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 65.49.20.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29092
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;65.49.20.6.			IN	A

;; AUTHORITY SECTION:
.			594	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010200 1800 900 604800 86400

;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 03 00:19:33 CST 2020
;; MSG SIZE  rcvd: 114

HOST信息:

Host 6.20.49.65.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 6.20.49.65.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
45.129.33.5	attackspam	Persistent port scanning [49 denied]	2020-09-21 13:36:19
106.124.130.114	attack	SSH brute-force attempt	2020-09-21 13:16:29
212.70.149.4	attackbots	Sep 21 07:01:25 relay postfix/smtpd\[12323\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 07:04:32 relay postfix/smtpd\[22716\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 07:07:39 relay postfix/smtpd\[12323\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 07:10:42 relay postfix/smtpd\[22716\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 07:13:47 relay postfix/smtpd\[12323\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-21 13:22:47
152.136.229.129	attackbots	Sep 21 06:47:14 MainVPS sshd[6293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.229.129 user=root Sep 21 06:47:16 MainVPS sshd[6293]: Failed password for root from 152.136.229.129 port 46344 ssh2 Sep 21 06:51:06 MainVPS sshd[16202]: Invalid user gituser from 152.136.229.129 port 59534 Sep 21 06:51:06 MainVPS sshd[16202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.229.129 Sep 21 06:51:06 MainVPS sshd[16202]: Invalid user gituser from 152.136.229.129 port 59534 Sep 21 06:51:08 MainVPS sshd[16202]: Failed password for invalid user gituser from 152.136.229.129 port 59534 ssh2 ...	2020-09-21 13:20:36
223.19.119.152	attack	TCP (SYN) 223.19.119.152:31453 -> port 23, len 40	2020-09-21 13:19:49
61.177.172.168	attackbotsspam	Sep 21 07:04:44 s2 sshd[31045]: Failed password for root from 61.177.172.168 port 14335 ssh2 Sep 21 07:04:50 s2 sshd[31045]: Failed password for root from 61.177.172.168 port 14335 ssh2 Sep 21 07:04:54 s2 sshd[31045]: Failed password for root from 61.177.172.168 port 14335 ssh2 Sep 21 07:04:58 s2 sshd[31045]: Failed password for root from 61.177.172.168 port 14335 ssh2	2020-09-21 13:12:20
203.217.105.57	attackspambots	srv02 Scanning Webserver Target(80:http) Events(1) ..	2020-09-21 13:03:50
181.143.228.170	attack	SSHD brute force attack detected from [181.143.228.170]	2020-09-21 13:18:08
122.51.251.253	attack	SSH Brute-Force reported by Fail2Ban	2020-09-21 13:08:27
181.49.118.185	attack	Sep 21 02:08:35 ns382633 sshd\[14111\]: Invalid user user from 181.49.118.185 port 41142 Sep 21 02:08:35 ns382633 sshd\[14111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.118.185 Sep 21 02:08:36 ns382633 sshd\[14111\]: Failed password for invalid user user from 181.49.118.185 port 41142 ssh2 Sep 21 02:16:59 ns382633 sshd\[15810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.118.185 user=root Sep 21 02:17:00 ns382633 sshd\[15810\]: Failed password for root from 181.49.118.185 port 56040 ssh2	2020-09-21 13:13:24
192.35.168.73	attackbots	Found on CINS badguys / proto=6 . srcport=35910 . dstport=1433 . (2337)	2020-09-21 13:16:04
45.95.168.152	attack	Remote recon	2020-09-21 13:36:48
24.220.176.118	attackbots	SSH/22 MH Probe, BF, Hack -	2020-09-21 13:37:13
112.246.22.162	attack	DATE:2020-09-20 19:01:03, IP:112.246.22.162, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-09-21 13:14:00
178.32.50.239	attack	2020-09-20 11:52:40.611339-0500 localhost smtpd[52080]: NOQUEUE: reject: RCPT from unknown[178.32.50.239]: 450 4.7.25 Client host rejected: cannot find your hostname, [178.32.50.239]; from= to= proto=ESMTP helo=	2020-09-21 13:02:43

最近上报的IP列表

110.254.8.216	149.209.118.255	88.15.144.29	146.21.206.39
65.155.30.1	77.124.21.255	73.222.253.250	218.102.210.23
6.164.164.97	183.105.67.88	65.154.226.2	49.78.14.64
31.154.200.47	87.130.1.56	88.15.144.250	117.210.115.210
62.98.15.9	200.95.185.182	222.40.84.139	130.8.30.75