49.70.20.71 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
49.70.207.70	attackspam	Apr 26 22:47:14 mail sshd\[3199\]: Invalid user ubuntu from 49.70.207.70 Apr 26 22:47:14 mail sshd\[3199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.70.207.70 Apr 26 22:47:15 mail sshd\[3199\]: Failed password for invalid user ubuntu from 49.70.207.70 port 43947 ssh2 ...	2020-04-27 05:25:18
49.70.209.23	attack	lfd: (smtpauth) Failed SMTP AUTH login from 49.70.209.23 (-): 5 in the last 3600 secs - Wed Jun 27 18:22:47 2018	2020-02-23 22:12:09
49.70.207.187	attack	Dec 9 10:24:27 sauna sshd[62134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.70.207.187 Dec 9 10:24:29 sauna sshd[62134]: Failed password for invalid user test from 49.70.207.187 port 38676 ssh2 ...	2019-12-09 17:46:43
49.70.20.13	attackspam	Unauthorised access (Dec 4) SRC=49.70.20.13 LEN=52 TTL=116 ID=6490 DF TCP DPT=3389 WINDOW=8192 SYN Unauthorised access (Dec 4) SRC=49.70.20.13 LEN=52 TTL=113 ID=30962 DF TCP DPT=1433 WINDOW=8192 SYN	2019-12-04 13:40:28
49.70.207.187	attackbotsspam	Lines containing failures of 49.70.207.187 Nov 25 23:06:46 * sshd[85687]: Invalid user tshostnamesior from 49.70.207.187 port 39902 Nov 25 23:06:46 * sshd[85687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.70.207.187 Nov 25 23:06:49 * sshd[85687]: Failed password for invalid user tshostnamesior from 49.70.207.187 port 39902 ssh2 Nov 25 23:06:49 * sshd[85687]: Received disconnect from 49.70.207.187 port 39902:11: Bye Bye [preauth] Nov 25 23:06:49 * sshd[85687]: Disconnected from invalid user tshostnamesior 49.70.207.187 port 39902 [preauth] Nov 25 23:31:29 * sshd[87274]: Invalid user vara from 49.70.207.187 port 40227 Nov 25 23:31:29 * sshd[87274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.70.207.187 Nov 25 23:31:31 * sshd[87274]: Failed password for invalid user vara from 49.70.207.187 port 40227 ssh2 Nov 25 23:31:31 *** sshd[87274]: Received disconnect from 4........ ------------------------------	2019-11-26 08:41:49
49.70.207.187	attackspam	Nov 24 01:49:24 vserver sshd\[31134\]: Failed password for root from 49.70.207.187 port 37332 ssh2Nov 24 01:53:18 vserver sshd\[31180\]: Invalid user cansanay from 49.70.207.187Nov 24 01:53:21 vserver sshd\[31180\]: Failed password for invalid user cansanay from 49.70.207.187 port 37336 ssh2Nov 24 01:56:54 vserver sshd\[31239\]: Invalid user esquer from 49.70.207.187 ...	2019-11-24 09:13:32
49.70.207.90	attack	Oct 31 00:28:47 vps647732 sshd[4465]: Failed password for root from 49.70.207.90 port 8942 ssh2 ...	2019-10-31 08:22:56
49.70.205.186	attackspambots	Sep 13 11:09:28 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 10 secs): user=, method=PLAIN, rip=49.70.205.186, lip=10.140.194.78, TLS, session= Sep 13 11:09:37 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 9 secs): user=, method=PLAIN, rip=49.70.205.186, lip=10.140.194.78, TLS: Disconnected, session= Sep 13 11:11:27 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=49.70.205.186, lip=10.140.194.78, TLS, session=	2019-09-14 03:32:33

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.70.20.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 287
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.70.20.71.			IN	A

;; AUTHORITY SECTION:
.			461	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022100700 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 08 00:57:29 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 71.20.70.49.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 71.20.70.49.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
170.246.115.106	attackbotsspam	Automatic report - XMLRPC Attack	2020-02-11 17:45:49
116.48.80.138	attackbotsspam	Honeypot attack, port: 5555, PTR: n1164880138.netvigator.com.	2020-02-11 18:18:31
211.99.212.60	attack	Fail2Ban Ban Triggered	2020-02-11 17:47:28
139.219.1.73	attack	ssh failed login	2020-02-11 17:37:39
45.148.10.143	attackspambots	Feb 11 04:16:33 lanister sshd[20956]: Failed password for root from 45.148.10.143 port 59706 ssh2 Feb 11 04:16:45 lanister sshd[20959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.143 user=root Feb 11 04:16:47 lanister sshd[20959]: Failed password for root from 45.148.10.143 port 58976 ssh2 Feb 11 04:16:58 lanister sshd[20961]: Invalid user admin from 45.148.10.143 ...	2020-02-11 17:58:41
144.217.181.112	attackbotsspam	[munged]::443 144.217.181.112 - - [11/Feb/2020:05:49:25 +0100] "POST /[munged]: HTTP/1.1" 200 6088 "-" "-" [munged]::443 144.217.181.112 - - [11/Feb/2020:05:49:41 +0100] "POST /[munged]: HTTP/1.1" 200 6088 "-" "-" [munged]::443 144.217.181.112 - - [11/Feb/2020:05:49:57 +0100] "POST /[munged]: HTTP/1.1" 200 6088 "-" "-" [munged]::443 144.217.181.112 - - [11/Feb/2020:05:50:13 +0100] "POST /[munged]: HTTP/1.1" 200 6088 "-" "-" [munged]::443 144.217.181.112 - - [11/Feb/2020:05:50:28 +0100] "POST /[munged]: HTTP/1.1" 200 6088 "-" "-" [munged]::443 144.217.181.112 - - [11/Feb/2020:05:50:45 +0100] "POST /[munged]: HTTP/1.1" 200 6088 "-" "-" [munged]::443 144.217.181.112 - - [11/Feb/2020:05:51:01 +0100] "POST /[munged]: HTTP/1.1" 200 6088 "-" "-" [munged]::443 144.217.181.112 - - [11/Feb/2020:05:51:17 +0100] "POST /[munged]: HTTP/1.1" 200 6088 "-" "-" [munged]::443 144.217.181.112 - - [11/Feb/2020:05:51:33 +0100] "POST /[munged]: HTTP/1.1" 200 6088 "-" "-" [munged]::443 144.217.181.112 - - [11/Feb/2020:05:51:49 +0100	2020-02-11 18:07:50
167.71.67.238	attack	Invalid user jdy from 167.71.67.238 port 47558	2020-02-11 17:54:59
36.92.185.127	attack	Port probing on unauthorized port 445	2020-02-11 17:59:44
202.5.52.67	attack	Brute force attempt	2020-02-11 18:05:48
102.22.217.166	attackspambots	2020-02-1105:50:281j1NVD-0007eU-Ou\<=verena@rs-solution.chH=\(localhost\)[180.183.128.222]:42615P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=2560id=5055E3B0BB6F41F22E2B62DA2E462FD0@rs-solution.chT="\;\)beveryhappytoreceiveyouranswer\	2020-02-11 18:18:58
141.98.10.130	attackspambots	Rude login attack (5 tries in 1d)	2020-02-11 18:02:32
69.229.6.31	attack	SSH Login Bruteforce	2020-02-11 17:56:27
170.106.38.190	attackspambots	2020-02-11T09:37:31.744525host3.slimhost.com.ua sshd[1530294]: Invalid user eee from 170.106.38.190 port 45542 2020-02-11T09:37:31.749170host3.slimhost.com.ua sshd[1530294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.106.38.190 2020-02-11T09:37:31.744525host3.slimhost.com.ua sshd[1530294]: Invalid user eee from 170.106.38.190 port 45542 2020-02-11T09:37:33.976187host3.slimhost.com.ua sshd[1530294]: Failed password for invalid user eee from 170.106.38.190 port 45542 ssh2 2020-02-11T09:39:58.836634host3.slimhost.com.ua sshd[1531951]: Invalid user ahm from 170.106.38.190 port 41604 ...	2020-02-11 17:40:56
87.225.90.201	attackbots	Honeypot attack, port: 81, PTR: PTR record not found	2020-02-11 17:56:06
180.244.190.99	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 11-02-2020 10:05:11.	2020-02-11 18:10:21

Recently Reported IPs

113.215.58.12	20.164.36.226	180.107.21.112	8.249.33.254
20.19.121.168	121.224.43.215	106.57.7.211	27.210.177.68
180.115.95.171	23.138.80.27	20.243.121.191	104.248.22.51
185.3.164.156	23.97.79.17	199.250.223.180	78.142.50.85
18.130.249.252	78.54.81.83	49.248.16.146	119.96.227.106