49.7.20.91 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
49.7.20.28	attack	Automatic report - Banned IP Access	2020-09-04 00:48:59
49.7.20.28	attack	Port Scan: TCP/443	2020-09-03 16:13:27
49.7.20.28	attack	Port Scan: TCP/443	2020-09-03 08:21:48
49.7.20.86	attackbotsspam	Dangerous	2020-08-18 05:09:48
49.7.20.28	attackbots	404 NOT FOUND	2020-08-14 12:45:26
49.7.20.28	attack	Malicious brute force vulnerability hacking attacks	2020-06-24 21:19:56
49.7.20.28	attackbots	IP: 49.7.20.28 Ports affected http protocol over TLS/SSL (443) World Wide Web HTTP (80) Abuse Confidence rating 35% Found in DNSBL('s) ASN Details AS23724 IDC China Telecommunications Corporation China (CN) CIDR 49.7.0.0/16 Log Date: 7/03/2020 5:59:58 AM UTC	2020-03-07 15:39:15
49.7.20.96	attackspambots	IP: 49.7.20.96 Ports affected World Wide Web HTTP (80) Found in DNSBL('s) ASN Details AS23724 IDC China Telecommunications Corporation China (CN) CIDR 49.7.0.0/16 Log Date: 28/02/2020 4:42:31 PM UTC	2020-02-29 01:36:31
49.7.20.161	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 54330e29e9a3e819 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:57:49
49.7.20.7	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5430747a7e05eb25 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:06:55
49.7.20.22	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 54340382ba31e7f9 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 00:15:26
49.7.20.177	attack	The IP has triggered Cloudflare WAF. CF-Ray: 540fb9f34fb3e50e \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:22:51
49.7.20.173	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 540f7019ae38e82d \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 00:26:18

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.7.20.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37018
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.7.20.91.			IN	A

;; AUTHORITY SECTION:
.			141	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062600 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 26 21:02:39 CST 2022
;; MSG SIZE  rcvd: 103

Host info

91.20.7.49.in-addr.arpa domain name pointer sogouspider-49-7-20-91.crawl.sogou.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
91.20.7.49.in-addr.arpa	name = sogouspider-49-7-20-91.crawl.sogou.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.88.112.112	attack	August 28 2020, 08:23:46 [sshd] - Banned from the Mad Pony WordPress hosting platform by Fail2ban.	2020-08-28 20:24:45
178.62.117.106	attack	Aug 28 14:02:34 eventyay sshd[567]: Failed password for root from 178.62.117.106 port 52942 ssh2 Aug 28 14:06:18 eventyay sshd[687]: Failed password for root from 178.62.117.106 port 56888 ssh2 Aug 28 14:09:51 eventyay sshd[829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.117.106 ...	2020-08-28 20:26:17
117.239.232.59	attack	2020-08-28 07:05:48.659465-0500 localhost sshd[34722]: Failed password for invalid user spike from 117.239.232.59 port 60992 ssh2	2020-08-28 20:13:28
51.195.166.192	attackbots	[MK-VM6] SSH login failed	2020-08-28 20:25:11
123.22.212.225	attackspam	445/tcp 445/tcp 445/tcp... [2020-08-21/28]5pkt,1pt.(tcp)	2020-08-28 20:06:33
183.238.0.242	attackbotsspam	Aug 28 14:41:24 ift sshd\[55770\]: Invalid user guo from 183.238.0.242Aug 28 14:41:25 ift sshd\[55770\]: Failed password for invalid user guo from 183.238.0.242 port 34923 ssh2Aug 28 14:45:18 ift sshd\[56579\]: Invalid user family from 183.238.0.242Aug 28 14:45:20 ift sshd\[56579\]: Failed password for invalid user family from 183.238.0.242 port 52653 ssh2Aug 28 14:49:18 ift sshd\[57030\]: Invalid user wrk from 183.238.0.242 ...	2020-08-28 19:58:47
205.251.136.39	attackspambots	Brute forcing RDP port 3389	2020-08-28 20:31:33
196.218.89.46	attackspam	139/tcp 139/tcp 139/tcp... [2020-07-05/08-28]9pkt,1pt.(tcp)	2020-08-28 19:55:04
78.101.81.191	attackbots	TCP (SYN) 78.101.81.191:22538 -> port 23, len 40	2020-08-28 19:59:36
218.69.191.127	attackspam	23/tcp 23/tcp [2020-08-26/27]2pkt	2020-08-28 19:53:27
212.70.149.52	attack	2020-08-28 15:16:39 auth_plain authenticator failed for (User) [212.70.149.52]: 535 Incorrect authentication data (set_id=tigger@lavrinenko.info) 2020-08-28 15:17:06 auth_plain authenticator failed for (User) [212.70.149.52]: 535 Incorrect authentication data (set_id=tienda.mercadolibre@lavrinenko.info) ...	2020-08-28 20:17:20
36.74.47.179	attackspam	20/8/27@23:46:40: FAIL: Alarm-Network address from=36.74.47.179 ...	2020-08-28 20:09:27
180.123.235.218	attackspam	[portscan] tcp/23 [TELNET] *(RWIN=33112)(08281101)	2020-08-28 20:05:40
161.35.37.149	attack	Aug 28 14:09:53 santamaria sshd\[12919\]: Invalid user emerson from 161.35.37.149 Aug 28 14:09:53 santamaria sshd\[12919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.37.149 Aug 28 14:09:55 santamaria sshd\[12919\]: Failed password for invalid user emerson from 161.35.37.149 port 38466 ssh2 ...	2020-08-28 20:21:08
125.160.114.150	attackspam	Automatic report - Port Scan Attack	2020-08-28 19:56:01

Recently Reported IPs

180.76.147.57	61.216.45.35	169.229.157.72	169.229.219.34
180.76.31.222	180.76.32.86	180.76.32.129	169.229.162.59
8.9.182.211	169.229.185.232	169.229.149.148	169.229.210.6
180.76.33.161	169.229.163.204	169.229.164.220	180.76.33.212
180.76.34.93	180.76.35.55	169.229.212.21	112.47.16.172