49.213.20.213 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
49.213.204.51	attack	49.213.204.51 - - [12/Jul/2020:05:47:12 +0200] "GET / HTTP/1.1" 400 0 "-" "-" ...	2020-07-12 19:33:15
49.213.203.112	attackspam	Honeypot attack, port: 81, PTR: 112-203-213-49.tinp.net.tw.	2020-06-21 06:11:20
49.213.201.171	attackbotsspam	firewall-block, port(s): 8080/tcp	2020-06-21 03:01:43
49.213.203.112	attack	port scan and connect, tcp 80 (http)	2020-06-09 06:19:39
49.213.201.240	attackbotsspam	DATE:2020-02-25 17:29:15, IP:49.213.201.240, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-02-26 08:16:10
49.213.201.108	attack	Feb 24 05:57:02 debian-2gb-nbg1-2 kernel: \[4779424.025913\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=49.213.201.108 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=43 ID=36994 PROTO=TCP SPT=34623 DPT=23 WINDOW=18099 RES=0x00 SYN URGP=0	2020-02-24 14:17:18
49.213.202.167	attackbots	port scan and connect, tcp 23 (telnet)	2020-02-24 13:02:02
49.213.201.142	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-18 17:51:08
49.213.201.156	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-18 17:48:37
49.213.201.162	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-18 17:44:38
49.213.201.164	attackbotsspam	unauthorized connection attempt	2020-02-18 17:43:14
49.213.201.232	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-18 17:41:34
49.213.202.108	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-18 17:37:33
49.213.202.108	attack	Honeypot attack, port: 81, PTR: 108-202-213-49.tinp.net.tw.	2020-02-10 07:41:39
49.213.200.41	attack	Unauthorised access (Oct 19) SRC=49.213.200.41 LEN=40 TTL=47 ID=50890 TCP DPT=23 WINDOW=21399 SYN	2019-10-19 17:19:41

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.213.20.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43081
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.213.20.213.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021201 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 02:22:54 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 213.20.213.49.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 213.20.213.49.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
128.199.242.84	attackbots	Sep 14 03:56:18 plusreed sshd[19902]: Invalid user angelo from 128.199.242.84 ...	2019-09-14 16:26:32
183.89.9.42	attackspam	SMB Server BruteForce Attack	2019-09-14 16:06:34
104.40.3.249	attackbots	Sep 14 08:34:31 game-panel sshd[27154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.40.3.249 Sep 14 08:34:32 game-panel sshd[27154]: Failed password for invalid user cs-go from 104.40.3.249 port 23552 ssh2 Sep 14 08:39:41 game-panel sshd[27388]: Failed password for root from 104.40.3.249 port 23552 ssh2	2019-09-14 16:45:33
134.209.189.224	attack	Sep 14 10:13:21 SilenceServices sshd[22974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.189.224 Sep 14 10:13:22 SilenceServices sshd[22974]: Failed password for invalid user ij from 134.209.189.224 port 55986 ssh2 Sep 14 10:16:57 SilenceServices sshd[24359]: Failed password for root from 134.209.189.224 port 54252 ssh2	2019-09-14 16:24:46
51.255.192.217	attack	Sep 14 10:17:56 SilenceServices sshd[24738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.192.217 Sep 14 10:17:58 SilenceServices sshd[24738]: Failed password for invalid user ro from 51.255.192.217 port 40944 ssh2 Sep 14 10:21:46 SilenceServices sshd[26140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.192.217	2019-09-14 16:42:35
149.56.251.168	attackspambots	Sep 13 21:58:42 friendsofhawaii sshd\[9934\]: Invalid user default from 149.56.251.168 Sep 13 21:58:42 friendsofhawaii sshd\[9934\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip168.ip-149-56-251.net Sep 13 21:58:44 friendsofhawaii sshd\[9934\]: Failed password for invalid user default from 149.56.251.168 port 50314 ssh2 Sep 13 22:03:10 friendsofhawaii sshd\[10333\]: Invalid user test from 149.56.251.168 Sep 13 22:03:10 friendsofhawaii sshd\[10333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip168.ip-149-56-251.net	2019-09-14 16:16:01
178.62.237.38	attackspam	Sep 14 09:09:59 SilenceServices sshd[31400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.237.38 Sep 14 09:10:01 SilenceServices sshd[31400]: Failed password for invalid user jojo from 178.62.237.38 port 46867 ssh2 Sep 14 09:14:25 SilenceServices sshd[629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.237.38	2019-09-14 16:20:10
37.192.194.50	attackspambots	2019-09-14T08:51:55.283539MailD postfix/smtpd[15292]: NOQUEUE: reject: RCPT from l37-192-194-50.novotelecom.ru[37.192.194.50]: 554 5.7.1 Service unavailable; Client host [37.192.194.50] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?37.192.194.50; from= to= proto=ESMTP helo= 2019-09-14T08:51:58.326325MailD postfix/smtpd[15292]: NOQUEUE: reject: RCPT from l37-192-194-50.novotelecom.ru[37.192.194.50]: 554 5.7.1 Service unavailable; Client host [37.192.194.50] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?37.192.194.50; from= to= proto=ESMTP helo= 2019-09-14T08:52:01.201085MailD postfix/smtpd[15292]: NOQUEUE: reject: RCPT from l37-192-194-50.novotelecom.ru[37.192.194.50]: 554 5.7.1 Service unavailable; Client host [37.192.194.50] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/	2019-09-14 16:52:32
182.52.90.164	attackspambots	Sep 14 03:30:58 aat-srv002 sshd[5201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.52.90.164 Sep 14 03:30:59 aat-srv002 sshd[5201]: Failed password for invalid user operator from 182.52.90.164 port 59648 ssh2 Sep 14 03:36:16 aat-srv002 sshd[5378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.52.90.164 Sep 14 03:36:17 aat-srv002 sshd[5378]: Failed password for invalid user mobile from 182.52.90.164 port 44314 ssh2 ...	2019-09-14 16:41:42
188.19.116.220	attackspambots	Sep 13 21:50:54 hpm sshd\[28575\]: Invalid user creatza from 188.19.116.220 Sep 13 21:50:54 hpm sshd\[28575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.19.116.220 Sep 13 21:50:56 hpm sshd\[28575\]: Failed password for invalid user creatza from 188.19.116.220 port 49424 ssh2 Sep 13 21:54:48 hpm sshd\[28950\]: Invalid user mc from 188.19.116.220 Sep 13 21:54:48 hpm sshd\[28950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.19.116.220	2019-09-14 16:01:24
141.98.9.130	attackbotsspam	Sep 14 10:36:33 relay postfix/smtpd\[12013\]: warning: unknown\[141.98.9.130\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 14 10:36:51 relay postfix/smtpd\[24038\]: warning: unknown\[141.98.9.130\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 14 10:37:15 relay postfix/smtpd\[18390\]: warning: unknown\[141.98.9.130\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 14 10:37:32 relay postfix/smtpd\[14346\]: warning: unknown\[141.98.9.130\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 14 10:37:55 relay postfix/smtpd\[13649\]: warning: unknown\[141.98.9.130\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-09-14 16:38:10
159.203.168.128	attack	Wordpress Admin Login attack	2019-09-14 16:49:52
37.187.248.39	attackbots	Sep 14 10:26:03 meumeu sshd[22367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.248.39 Sep 14 10:26:05 meumeu sshd[22367]: Failed password for invalid user temp from 37.187.248.39 port 40324 ssh2 Sep 14 10:30:07 meumeu sshd[22831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.248.39 ...	2019-09-14 16:37:28
193.112.125.114	attackbots	Sep 14 08:38:31 hb sshd\[19545\]: Invalid user x-bot from 193.112.125.114 Sep 14 08:38:31 hb sshd\[19545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.125.114 Sep 14 08:38:33 hb sshd\[19545\]: Failed password for invalid user x-bot from 193.112.125.114 port 50386 ssh2 Sep 14 08:41:39 hb sshd\[19803\]: Invalid user david from 193.112.125.114 Sep 14 08:41:39 hb sshd\[19803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.125.114	2019-09-14 16:56:18
91.205.168.56	attackspambots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-14 05:32:46,578 INFO [amun_request_handler] PortScan Detected on Port: 445 (91.205.168.56)	2019-09-14 16:36:57

Recently Reported IPs

138.57.185.127	198.189.170.26	2.14.113.202	21.41.108.60
155.126.20.11	43.13.8.217	150.77.104.36	75.211.30.132
146.16.210.90	75.115.117.16	174.204.169.196	229.198.150.220
251.166.144.129	134.193.208.89	20.51.175.40	238.229.175.194
210.78.24.110	154.195.203.202	99.186.217.77	153.207.107.94