49.7.20.150 - IPInfo

Basic Info

City: Suzhou

Region: Jiangsu

Country: China

Internet Service Provider: China Telecom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
49.7.20.28	attack	Automatic report - Banned IP Access	2020-09-04 00:48:59
49.7.20.28	attack	Port Scan: TCP/443	2020-09-03 16:13:27
49.7.20.28	attack	Port Scan: TCP/443	2020-09-03 08:21:48
49.7.20.86	attackbotsspam	Dangerous	2020-08-18 05:09:48
49.7.20.28	attackbots	404 NOT FOUND	2020-08-14 12:45:26
49.7.20.28	attack	Malicious brute force vulnerability hacking attacks	2020-06-24 21:19:56
49.7.20.28	attackbots	IP: 49.7.20.28 Ports affected http protocol over TLS/SSL (443) World Wide Web HTTP (80) Abuse Confidence rating 35% Found in DNSBL('s) ASN Details AS23724 IDC China Telecommunications Corporation China (CN) CIDR 49.7.0.0/16 Log Date: 7/03/2020 5:59:58 AM UTC	2020-03-07 15:39:15
49.7.20.96	attackspambots	IP: 49.7.20.96 Ports affected World Wide Web HTTP (80) Found in DNSBL('s) ASN Details AS23724 IDC China Telecommunications Corporation China (CN) CIDR 49.7.0.0/16 Log Date: 28/02/2020 4:42:31 PM UTC	2020-02-29 01:36:31
49.7.20.161	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 54330e29e9a3e819 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:57:49
49.7.20.7	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5430747a7e05eb25 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:06:55
49.7.20.22	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 54340382ba31e7f9 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 00:15:26
49.7.20.177	attack	The IP has triggered Cloudflare WAF. CF-Ray: 540fb9f34fb3e50e \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:22:51
49.7.20.173	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 540f7019ae38e82d \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 00:26:18

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.7.20.150
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8092
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.7.20.150.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 08:08:28 CST 2022
;; MSG SIZE  rcvd: 104

Host info

150.20.7.49.in-addr.arpa domain name pointer sogouspider-49-7-20-150.crawl.sogou.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
150.20.7.49.in-addr.arpa	name = sogouspider-49-7-20-150.crawl.sogou.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
14.155.222.132	attackbots	RDP 445 protocol access attempt, port scan and brute force attack	2020-09-13 06:06:00
134.209.41.198	attackspam	Sep 12 23:27:08 cp sshd[20608]: Failed password for root from 134.209.41.198 port 34222 ssh2 Sep 12 23:31:39 cp sshd[22993]: Failed password for root from 134.209.41.198 port 38372 ssh2 Sep 12 23:33:05 cp sshd[23862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.41.198	2020-09-13 05:46:27
141.98.9.163	attackspambots	TCP (SYN) 141.98.9.163:43911 -> port 22, len 60	2020-09-13 05:44:25
38.21.240.216	attackbotsspam	SSH Invalid Login	2020-09-13 06:08:56
185.251.45.84	attackbotsspam	22/tcp [2020-09-12]1pkt	2020-09-13 05:57:49
104.50.180.85	attackbots	2020-09-12T16:48:47.455259abusebot-8.cloudsearch.cf sshd[5775]: Invalid user root123 from 104.50.180.85 port 41096 2020-09-12T16:48:47.459641abusebot-8.cloudsearch.cf sshd[5775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104-50-180-85.lightspeed.elpstx.sbcglobal.net 2020-09-12T16:48:47.455259abusebot-8.cloudsearch.cf sshd[5775]: Invalid user root123 from 104.50.180.85 port 41096 2020-09-12T16:48:49.619142abusebot-8.cloudsearch.cf sshd[5775]: Failed password for invalid user root123 from 104.50.180.85 port 41096 ssh2 2020-09-12T16:57:48.229670abusebot-8.cloudsearch.cf sshd[5861]: Invalid user ubuntu from 104.50.180.85 port 58098 2020-09-12T16:57:48.234324abusebot-8.cloudsearch.cf sshd[5861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104-50-180-85.lightspeed.elpstx.sbcglobal.net 2020-09-12T16:57:48.229670abusebot-8.cloudsearch.cf sshd[5861]: Invalid user ubuntu from 104.50.180.85 port 58098 2020-0 ...	2020-09-13 06:00:51
193.56.28.18	attackspambots	2020-09-12 20:06:45 dovecot_login authenticator failed for \(win-jm5ndcqfsu3.domain\) \[193.56.28.18\]: 535 Incorrect authentication data \(set_id=service\) 2020-09-12 20:07:00 dovecot_login authenticator failed for \(win-jm5ndcqfsu3.domain\) \[193.56.28.18\]: 535 Incorrect authentication data \(set_id=service\) 2020-09-12 20:07:15 dovecot_login authenticator failed for \(win-jm5ndcqfsu3.domain\) \[193.56.28.18\]: 535 Incorrect authentication data \(set_id=service\) 2020-09-12 20:07:31 dovecot_login authenticator failed for \(win-jm5ndcqfsu3.domain\) \[193.56.28.18\]: 535 Incorrect authentication data \(set_id=service\) 2020-09-12 20:07:49 dovecot_login authenticator failed for \(win-jm5ndcqfsu3.domain\) \[193.56.28.18\]: 535 Incorrect authentication data \(set_id=service\)	2020-09-13 06:05:34
51.79.82.137	attack	Attempt to run wp-login.php	2020-09-13 05:58:20
112.94.22.76	attack	2020-09-12T21:57:44.172146ns386461 sshd\[2904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.94.22.76 user=root 2020-09-12T21:57:45.698627ns386461 sshd\[2904\]: Failed password for root from 112.94.22.76 port 47962 ssh2 2020-09-12T22:07:55.456993ns386461 sshd\[11919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.94.22.76 user=root 2020-09-12T22:07:57.530369ns386461 sshd\[11919\]: Failed password for root from 112.94.22.76 port 50098 ssh2 2020-09-12T22:11:01.881553ns386461 sshd\[14890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.94.22.76 user=root ...	2020-09-13 06:02:39
42.104.109.194	attack	Sep 12 23:38:27 rancher-0 sshd[10342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.104.109.194 user=root Sep 12 23:38:29 rancher-0 sshd[10342]: Failed password for root from 42.104.109.194 port 53816 ssh2 ...	2020-09-13 05:51:19
61.141.252.106	attack	20 attempts against mh-ssh on hail	2020-09-13 05:52:46
23.129.64.206	attack	Scan or attack attempt on email service.	2020-09-13 06:01:08
2.57.122.204	attack	Sep 12 23:57:28 rotator sshd\[28496\]: Failed password for root from 2.57.122.204 port 45404 ssh2Sep 12 23:57:43 rotator sshd\[28505\]: Failed password for root from 2.57.122.204 port 34452 ssh2Sep 12 23:58:04 rotator sshd\[28510\]: Failed password for root from 2.57.122.204 port 51708 ssh2Sep 12 23:58:25 rotator sshd\[28513\]: Failed password for root from 2.57.122.204 port 40742 ssh2Sep 12 23:58:43 rotator sshd\[28520\]: Invalid user tomcat from 2.57.122.204Sep 12 23:58:45 rotator sshd\[28520\]: Failed password for invalid user tomcat from 2.57.122.204 port 58028 ssh2 ...	2020-09-13 06:05:08
200.60.110.117	attack	Port probing on unauthorized port 445	2020-09-13 05:48:48
1.194.235.196	attackspam	1599929891 - 09/12/2020 18:58:11 Host: 1.194.235.196/1.194.235.196 Port: 445 TCP Blocked	2020-09-13 05:47:56

Recently Reported IPs

27.43.205.131	64.71.1.110	103.113.64.18	106.244.127.5
185.243.175.99	43.132.181.130	117.199.117.16	42.117.145.83
220.128.142.40	184.72.206.207	189.212.121.109	122.162.131.59
189.90.87.86	183.230.71.96	171.239.185.146	46.71.68.196
45.191.79.192	175.107.1.128	83.248.157.67	125.27.15.122