20.49.104.32 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.49.104.32
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40409
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;20.49.104.32.			IN	A

;; AUTHORITY SECTION:
.			142	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 23:21:46 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 32.104.49.20.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 32.104.49.20.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
171.5.30.73	attackbots	DATE:2019-07-01_08:10:09, IP:171.5.30.73, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2019-07-01 18:41:06
107.175.68.101	attack	Automatic report - Web App Attack	2019-07-01 17:50:54
219.77.119.124	attackspam	[ssh] SSH attack	2019-07-01 18:32:48
91.140.50.85	attackbots	" "	2019-07-01 18:30:30
132.232.18.128	attackspambots	2019-07-01T11:21:04.696707 sshd[18971]: Invalid user redmine from 132.232.18.128 port 55756 2019-07-01T11:21:04.712467 sshd[18971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.18.128 2019-07-01T11:21:04.696707 sshd[18971]: Invalid user redmine from 132.232.18.128 port 55756 2019-07-01T11:21:06.572722 sshd[18971]: Failed password for invalid user redmine from 132.232.18.128 port 55756 ssh2 2019-07-01T11:24:05.284326 sshd[18993]: Invalid user saugata from 132.232.18.128 port 50648 ...	2019-07-01 18:17:02
151.80.162.216	attack	Jul 1 12:11:50 mail postfix/smtpd\[10253\]: warning: unknown\[151.80.162.216\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 1 12:13:27 mail postfix/smtpd\[10248\]: warning: unknown\[151.80.162.216\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 1 12:15:24 mail postfix/smtpd\[10252\]: warning: unknown\[151.80.162.216\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-07-01 18:24:50
125.141.139.23	attackspambots	Jul 1 11:11:13 lnxmail61 sshd[5515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.139.23 Jul 1 11:11:13 lnxmail61 sshd[5515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.139.23	2019-07-01 18:03:58
94.53.131.70	attack	port scan and connect, tcp 23 (telnet)	2019-07-01 18:05:17
131.108.166.12	attackbots	Jul 1 07:14:50 our-server-hostname postfix/smtpd[2217]: connect from unknown[131.108.166.12] Jul x@x Jul 1 07:14:55 our-server-hostname postfix/smtpd[2217]: NOQUEUE: reject: RCPT from unknown[131.108.166.12]: 554 5.7.1 Service unavailable; Client host [131.108.166.12] blocked using zen.spamhaus.org; hxxps://www.spamhaus.org/query/ip/131.108.166.12 / hxxps://www.spamhaus.org/sbl/query/SBLCSS; from=x@x proto=ESM .... truncated .... Nelsonyzie@netwaytelecon.com.br> to= proto=ESMTP helo=<131-108-166-12.host.netwaytelecon.com.br> Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul 1 07:29:15 our-server-hostname postfix/smtpd[6932]: too many errors after RCPT from unknown[131.108.166.12] Jul 1 07:29:15 our-server-hostname postfix/smtpd[6932]: disconnect from unknown[131.108.166.12] Jul x........ -------------------------------	2019-07-01 18:35:47
194.110.192.184	attack	Reported by AbuseIPDB proxy server.	2019-07-01 17:51:47
89.238.167.57	attackspambots	10 attempts against mh-misc-ban on air.magehost.pro	2019-07-01 17:48:03
107.191.45.144	attackbotsspam	ssh failed login	2019-07-01 18:22:15
113.141.70.204	attack	\[2019-07-01 05:58:59\] NOTICE\[5148\] chan_sip.c: Registration from '"1332" \' failed for '113.141.70.204:5090' - Wrong password \[2019-07-01 05:58:59\] SECURITY\[5156\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-01T05:58:59.502-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1332",SessionID="0x7f13a94ee3d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/113.141.70.204/5090",Challenge="161accf5",ReceivedChallenge="161accf5",ReceivedHash="7195885ec057c5e5aef095562874d3cc" \[2019-07-01 05:58:59\] NOTICE\[5148\] chan_sip.c: Registration from '"1332" \' failed for '113.141.70.204:5090' - Wrong password \[2019-07-01 05:58:59\] SECURITY\[5156\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-01T05:58:59.766-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1332",SessionID="0x7f13a948b5e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4	2019-07-01 18:17:55
164.132.88.89	attack	[WP scan/spam/exploit] [multiweb: req 3 domains(hosts/ip)] [bad UserAgent] Blocklist.DE:"listed [bruteforcelogin]"	2019-07-01 18:16:13
216.213.24.169	attackspam	Automatic report - Web App Attack	2019-07-01 18:37:21

Recently Reported IPs

20.49.104.30	20.49.104.33	20.49.104.22	20.49.104.35
20.49.104.21	20.49.104.40	20.49.104.41	20.49.104.29
20.49.104.43	20.49.104.47	20.49.104.49	20.49.104.4
20.49.104.44	20.49.104.57	20.49.104.48	20.49.104.5
20.49.104.55	20.49.104.6	20.49.137.0	20.49.104.60