39.149.5.19 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
39.149.51.104	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5437c8af8dc3b1aa \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.96 Safari/537.36 MZBrowser/8.4.1 \| CF_DC: HKG. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 07:45:29

Type

Details

Datetime

39.149.51.104

attack

The IP has triggered Cloudflare WAF. CF-Ray: 5437c8af8dc3b1aa | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.96 Safari/537.36 MZBrowser/8.4.1 | CF_DC: HKG. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 07:45:29

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 39.149.5.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63248
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;39.149.5.19.			IN	A

;; AUTHORITY SECTION:
.			485	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400

;; Query time: 85 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 02:23:20 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 19.5.149.39.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 19.5.149.39.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
187.87.12.158	attackbotsspam	libpam_shield report: forced login attempt	2019-06-26 05:33:33
2.139.209.78	attack	SSH Brute Force	2019-06-26 04:50:36
203.110.213.96	attackbotsspam	2019-06-25T19:16:16.354636scmdmz1 sshd\[32415\]: Invalid user nexus from 203.110.213.96 port 56364 2019-06-25T19:16:16.357482scmdmz1 sshd\[32415\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.110.213.96 2019-06-25T19:16:18.794301scmdmz1 sshd\[32415\]: Failed password for invalid user nexus from 203.110.213.96 port 56364 ssh2 ...	2019-06-26 05:07:21
201.116.195.200	attack	445/tcp 445/tcp 445/tcp... [2019-05-14/06-25]10pkt,1pt.(tcp)	2019-06-26 05:25:06
175.198.214.201	attackbots	imap. Unknown user	2019-06-26 05:07:45
182.131.125.7	attack	imap. Unknown user	2019-06-26 05:10:54
178.32.114.11	attackspam	Imap	2019-06-26 05:31:15
60.191.20.210	attackspam	Imap	2019-06-26 05:05:21
218.92.0.195	attackspambots	2019-06-25T20:27:18.278029abusebot-3.cloudsearch.cf sshd\[28356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.195 user=root	2019-06-26 04:51:04
189.90.118.201	attackbotsspam	port scan and connect, tcp 23 (telnet)	2019-06-26 05:30:58
5.62.19.60	attackspambots	\[2019-06-25 16:41:25\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '5.62.19.60:2164' - Wrong password \[2019-06-25 16:41:25\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-25T16:41:25.611-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7469",SessionID="0x7fc4242a2868",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.19.60/56812",Challenge="18836b27",ReceivedChallenge="18836b27",ReceivedHash="a2f4e90c50798160b3913fec4ae3527a" \[2019-06-25 16:42:25\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '5.62.19.60:2005' - Wrong password \[2019-06-25 16:42:25\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-25T16:42:25.547-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7026",SessionID="0x7fc4242a2868",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.19.60/54688",Ch	2019-06-26 04:55:11
218.89.48.175	attackspambots	imap. Password mismatch	2019-06-26 05:19:32
218.22.98.178	attackspam	imap. Unknown user	2019-06-26 05:09:05
1.32.249.146	attack	445/tcp 445/tcp [2019-06-22/25]2pkt	2019-06-26 05:37:35
49.143.9.73	attackbots	Jun 25 12:16:37 thebighonker sshd[89671]: Failed unknown for invalid user support from 49.143.9.73 port 56044 ssh2 Jun 25 12:16:38 thebighonker sshd[89673]: Failed unknown for invalid user ubnt from 49.143.9.73 port 58362 ssh2 Jun 25 12:16:39 thebighonker sshd[89679]: Failed unknown for invalid user cisco from 49.143.9.73 port 60650 ssh2 ...	2019-06-26 04:57:31

Recently Reported IPs

64.227.161.30	165.22.91.88	171.95.98.135	83.239.88.62
67.21.180.96	96.72.38.9	36.6.14.117	99.253.116.31
175.11.209.113	179.191.98.234	89.24.23.49	85.185.138.246
197.45.60.34	165.232.183.110	107.172.196.105	46.246.86.4
170.254.73.167	39.99.167.251	41.36.27.52	183.45.153.195