49.81.39.57 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Jiangsu Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Jan 11 14:08:09 grey postfix/smtpd\[7806\]: NOQUEUE: reject: RCPT from unknown\[49.81.39.57\]: 554 5.7.1 Service unavailable\; Client host \[49.81.39.57\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.39.57\]\; from=\ to=\ proto=SMTP helo=\ ...	2020-01-12 02:30:38

Type

Details

Datetime

attack

Jan 11 14:08:09 grey postfix/smtpd\[7806\]: NOQUEUE: reject: RCPT from unknown\[49.81.39.57\]: 554 5.7.1 Service unavailable\; Client host \[49.81.39.57\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.39.57\]\; from=\ to=\ proto=SMTP helo=\
...

2020-01-12 02:30:38

Comments on same subnet:

IP	Type	Details	Datetime
49.81.39.146	attack	Unauthorized connection attempt detected from IP address 49.81.39.146 to port 23 [T]	2020-02-01 16:59:13
49.81.39.232	attack	Jan 5 22:47:05 grey postfix/smtpd\[32181\]: NOQUEUE: reject: RCPT from unknown\[49.81.39.232\]: 554 5.7.1 Service unavailable\; Client host \[49.81.39.232\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.39.232\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-06 09:21:26
49.81.39.252	attackspambots	Brute force SMTP login attempts.	2019-12-28 09:14:12
49.81.39.212	attackbots	SpamReport	2019-12-19 14:47:38
49.81.39.135	attack	SASL Brute Force	2019-11-03 20:10:49
49.81.39.56	attackspam	TCP Port: 25 _ invalid blocked abuseat-org also barracudacentral _ _ _ _ (442)	2019-10-04 01:42:19
49.81.39.156	attackspam	Brute force SMTP login attempts.	2019-09-15 06:25:36
49.81.39.204	attack	Brute force SMTP login attempts.	2019-09-13 13:59:13
49.81.39.120	attackbotsspam	Brute force SMTP login attempts.	2019-09-12 16:31:34
49.81.39.205	attack	IP: 49.81.39.205 ASN: AS4134 No.31 Jin-rong Street Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 3/09/2019 8:07:39 AM UTC	2019-09-03 19:50:16
49.81.39.98	attackspambots	IP: 49.81.39.98 ASN: AS4134 No.31 Jin-rong Street Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 3/09/2019 8:07:40 AM UTC	2019-09-03 19:47:17
49.81.39.139	attackbots	Brute force SMTP login attempts.	2019-08-28 12:53:52
49.81.39.66	attackspambots	Brute force SMTP login attempts.	2019-07-18 05:08:48
49.81.39.72	attack	$f2bV_matches	2019-07-10 11:40:11
49.81.39.116	attackbotsspam	$f2bV_matches	2019-07-05 23:31:35

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.81.39.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10902
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.81.39.57.			IN	A

;; AUTHORITY SECTION:
.			243	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011100 1800 900 604800 86400

;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 12 02:30:35 CST 2020
;; MSG SIZE  rcvd: 115

Host info

Host 57.39.81.49.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 57.39.81.49.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
144.217.83.201	attackspambots	sshd: Failed password for .... from 144.217.83.201 port 52478 ssh2 (7 attempts)	2020-06-10 17:35:29
200.141.166.170	attackspam	2020-06-10T08:35:45+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)	2020-06-10 17:51:33
121.12.151.250	attackbotsspam	Jun 10 05:45:02 vps647732 sshd[14732]: Failed password for root from 121.12.151.250 port 59214 ssh2 ...	2020-06-10 18:11:09
221.229.218.50	attackbots	2020-06-10T07:00:15.104054abusebot-6.cloudsearch.cf sshd[17722]: Invalid user rpm from 221.229.218.50 port 60837 2020-06-10T07:00:15.110069abusebot-6.cloudsearch.cf sshd[17722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.229.218.50 2020-06-10T07:00:15.104054abusebot-6.cloudsearch.cf sshd[17722]: Invalid user rpm from 221.229.218.50 port 60837 2020-06-10T07:00:16.980938abusebot-6.cloudsearch.cf sshd[17722]: Failed password for invalid user rpm from 221.229.218.50 port 60837 ssh2 2020-06-10T07:06:41.639322abusebot-6.cloudsearch.cf sshd[18088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.229.218.50 user=root 2020-06-10T07:06:43.500326abusebot-6.cloudsearch.cf sshd[18088]: Failed password for root from 221.229.218.50 port 60420 ssh2 2020-06-10T07:08:39.457764abusebot-6.cloudsearch.cf sshd[18192]: Invalid user test from 221.229.218.50 port 43693 ...	2020-06-10 17:36:27
172.93.44.105	attackspambots	Jun 10 06:12:17 legacy sshd[14818]: Failed password for root from 172.93.44.105 port 53760 ssh2 Jun 10 06:14:22 legacy sshd[14892]: Failed password for root from 172.93.44.105 port 38814 ssh2 Jun 10 06:16:58 legacy sshd[14972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.93.44.105 ...	2020-06-10 18:08:47
125.91.126.92	attack	Jun 10 06:55:55 cdc sshd[9105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.91.126.92 Jun 10 06:55:57 cdc sshd[9105]: Failed password for invalid user git from 125.91.126.92 port 52008 ssh2	2020-06-10 17:15:48
149.202.206.206	attackbotsspam	Jun 10 05:47:10 gestao sshd[22957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.206.206 Jun 10 05:47:12 gestao sshd[22957]: Failed password for invalid user xiuno from 149.202.206.206 port 56276 ssh2 Jun 10 05:47:34 gestao sshd[22963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.206.206 ...	2020-06-10 18:05:05
46.105.149.168	attackspam	2020-06-10T06:14:15.176813shield sshd\[23715\]: Invalid user admin from 46.105.149.168 port 50372 2020-06-10T06:14:15.180515shield sshd\[23715\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip168.ip-46-105-149.eu 2020-06-10T06:14:17.159169shield sshd\[23715\]: Failed password for invalid user admin from 46.105.149.168 port 50372 ssh2 2020-06-10T06:17:33.729940shield sshd\[25153\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip168.ip-46-105-149.eu user=root 2020-06-10T06:17:35.216957shield sshd\[25153\]: Failed password for root from 46.105.149.168 port 52898 ssh2	2020-06-10 17:52:07
189.231.143.156	attack	DATE:2020-06-10 05:49:00, IP:189.231.143.156, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-06-10 17:20:41
111.229.165.57	attack	2020-06-10T11:53:32.086063afi-git.jinr.ru sshd[7763]: Failed password for invalid user san from 111.229.165.57 port 51594 ssh2 2020-06-10T11:56:58.755661afi-git.jinr.ru sshd[8710]: Invalid user cy from 111.229.165.57 port 39928 2020-06-10T11:56:58.759099afi-git.jinr.ru sshd[8710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.165.57 2020-06-10T11:56:58.755661afi-git.jinr.ru sshd[8710]: Invalid user cy from 111.229.165.57 port 39928 2020-06-10T11:57:01.020440afi-git.jinr.ru sshd[8710]: Failed password for invalid user cy from 111.229.165.57 port 39928 ssh2 ...	2020-06-10 17:19:29
192.99.34.42	attackspambots	192.99.34.42 - - [10/Jun/2020:08:57:26 +0100] "POST /wp-login.php HTTP/1.1" 200 6669 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.99.34.42 - - [10/Jun/2020:08:57:30 +0100] "POST /wp-login.php HTTP/1.1" 200 6662 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.99.34.42 - - [10/Jun/2020:08:57:33 +0100] "POST /wp-login.php HTTP/1.1" 200 6662 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" ...	2020-06-10 17:29:04
222.186.180.130	attack	Unauthorized connection attempt detected from IP address 222.186.180.130 to port 22	2020-06-10 17:22:54
221.7.131.28	attackspam	port scan and connect, tcp 1433 (ms-sql-s)	2020-06-10 17:27:44
64.91.249.207	attack	trying to access non-authorized port	2020-06-10 17:42:17
46.161.27.75	attack	Port scan	2020-06-10 18:08:23

Recently Reported IPs

0.83.149.20	112.84.91.56	246.254.136.91	183.235.235.44
197.116.166.202	55.209.36.185	214.74.199.208	111.203.185.28
204.205.255.238	124.127.185.176	1.244.109.199	123.21.193.117
123.207.37.64	115.113.208.124	107.172.143.244	123.20.180.229
123.20.103.78	178.112.245.86	123.145.207.102	123.16.254.241