49.81.39.66 - IPInfo

Basic Info

City: Xuzhou

Region: Jiangsu

Country: China

Internet Service Provider: ChinaNet Jiangsu Province Network

Hostname: unknown

Organization: No.31,Jin-rong Street

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Brute force SMTP login attempts.	2019-07-18 05:08:48

Comments on same subnet:

IP	Type	Details	Datetime
49.81.39.146	attack	Unauthorized connection attempt detected from IP address 49.81.39.146 to port 23 [T]	2020-02-01 16:59:13
49.81.39.57	attack	Jan 11 14:08:09 grey postfix/smtpd\[7806\]: NOQUEUE: reject: RCPT from unknown\[49.81.39.57\]: 554 5.7.1 Service unavailable\; Client host \[49.81.39.57\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.39.57\]\; from=\ to=\ proto=SMTP helo=\ ...	2020-01-12 02:30:38
49.81.39.232	attack	Jan 5 22:47:05 grey postfix/smtpd\[32181\]: NOQUEUE: reject: RCPT from unknown\[49.81.39.232\]: 554 5.7.1 Service unavailable\; Client host \[49.81.39.232\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.39.232\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-06 09:21:26
49.81.39.252	attackspambots	Brute force SMTP login attempts.	2019-12-28 09:14:12
49.81.39.212	attackbots	SpamReport	2019-12-19 14:47:38
49.81.39.135	attack	SASL Brute Force	2019-11-03 20:10:49
49.81.39.56	attackspam	TCP Port: 25 _ invalid blocked abuseat-org also barracudacentral _ _ _ _ (442)	2019-10-04 01:42:19
49.81.39.156	attackspam	Brute force SMTP login attempts.	2019-09-15 06:25:36
49.81.39.204	attack	Brute force SMTP login attempts.	2019-09-13 13:59:13
49.81.39.120	attackbotsspam	Brute force SMTP login attempts.	2019-09-12 16:31:34
49.81.39.205	attack	IP: 49.81.39.205 ASN: AS4134 No.31 Jin-rong Street Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 3/09/2019 8:07:39 AM UTC	2019-09-03 19:50:16
49.81.39.98	attackspambots	IP: 49.81.39.98 ASN: AS4134 No.31 Jin-rong Street Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 3/09/2019 8:07:40 AM UTC	2019-09-03 19:47:17
49.81.39.139	attackbots	Brute force SMTP login attempts.	2019-08-28 12:53:52
49.81.39.72	attack	$f2bV_matches	2019-07-10 11:40:11
49.81.39.116	attackbotsspam	$f2bV_matches	2019-07-05 23:31:35

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.81.39.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45035
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.81.39.66.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071701 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 18 05:08:43 CST 2019
;; MSG SIZE  rcvd: 115

Host info

Host 66.39.81.49.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 66.39.81.49.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.176.27.118	attackspam	Dec 8 23:54:30 mc1 kernel: \[ 4516.493159\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=57579 PROTO=TCP SPT=42880 DPT=8444 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 8 23:59:38 mc1 kernel: \[ 4825.098299\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=42003 PROTO=TCP SPT=42880 DPT=60200 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 8 23:59:47 mc1 kernel: \[ 4834.249487\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=53907 PROTO=TCP SPT=42880 DPT=5020 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-12-09 07:20:57
203.156.125.195	attack	Dec 6 23:05:36 mail sshd[1845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.156.125.195 Dec 6 23:05:38 mail sshd[1845]: Failed password for invalid user liwa from 203.156.125.195 port 35638 ssh2 Dec 6 23:12:34 mail sshd[3583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.156.125.195	2019-12-09 07:15:26
139.219.0.29	attackbotsspam	$f2bV_matches	2019-12-09 07:00:49
51.75.30.199	attackspam	Dec 8 23:54:47 tux-35-217 sshd\[12625\]: Invalid user ottmar from 51.75.30.199 port 56719 Dec 8 23:54:47 tux-35-217 sshd\[12625\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.30.199 Dec 8 23:54:49 tux-35-217 sshd\[12625\]: Failed password for invalid user ottmar from 51.75.30.199 port 56719 ssh2 Dec 8 23:59:37 tux-35-217 sshd\[12707\]: Invalid user carling from 51.75.30.199 port 60590 Dec 8 23:59:37 tux-35-217 sshd\[12707\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.30.199 ...	2019-12-09 07:07:15
167.250.132.18	attackspambots	19/12/8@10:52:03: FAIL: Alarm-Intrusion address from=167.250.132.18 ...	2019-12-09 06:58:48
112.196.54.35	attackspam	2019-12-08T22:59:44.491489abusebot-6.cloudsearch.cf sshd\[4537\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.196.54.35 user=root	2019-12-09 07:24:25
142.112.115.160	attackbots	2019-12-08T23:30:58.412518abusebot-6.cloudsearch.cf sshd\[5751\]: Invalid user gennetten from 142.112.115.160 port 44368	2019-12-09 07:32:13
51.38.186.47	attackspambots	Dec 8 18:14:18 linuxvps sshd\[29041\]: Invalid user wwwadmin from 51.38.186.47 Dec 8 18:14:18 linuxvps sshd\[29041\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.186.47 Dec 8 18:14:20 linuxvps sshd\[29041\]: Failed password for invalid user wwwadmin from 51.38.186.47 port 42718 ssh2 Dec 8 18:19:16 linuxvps sshd\[32454\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.186.47 user=root Dec 8 18:19:19 linuxvps sshd\[32454\]: Failed password for root from 51.38.186.47 port 51332 ssh2	2019-12-09 07:30:58
195.143.103.194	attackspambots	Dec 8 12:52:03 auw2 sshd\[14418\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.143.103.194 user=root Dec 8 12:52:05 auw2 sshd\[14418\]: Failed password for root from 195.143.103.194 port 58899 ssh2 Dec 8 12:59:48 auw2 sshd\[15377\]: Invalid user rah from 195.143.103.194 Dec 8 12:59:48 auw2 sshd\[15377\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.143.103.194 Dec 8 12:59:50 auw2 sshd\[15377\]: Failed password for invalid user rah from 195.143.103.194 port 34663 ssh2	2019-12-09 07:18:59
106.54.134.145	attackspam	Dec 8 18:11:40 ny01 sshd[11698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.134.145 Dec 8 18:11:42 ny01 sshd[11698]: Failed password for invalid user test from 106.54.134.145 port 57296 ssh2 Dec 8 18:17:30 ny01 sshd[12310]: Failed password for root from 106.54.134.145 port 58658 ssh2	2019-12-09 07:19:36
84.232.244.221	attackspam	Automatic report - Banned IP Access	2019-12-09 06:53:27
223.247.194.119	attackbots	Dec 8 13:12:06 wbs sshd\[14849\]: Invalid user buscarino from 223.247.194.119 Dec 8 13:12:06 wbs sshd\[14849\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.194.119 Dec 8 13:12:08 wbs sshd\[14849\]: Failed password for invalid user buscarino from 223.247.194.119 port 50620 ssh2 Dec 8 13:18:14 wbs sshd\[15519\]: Invalid user centsq from 223.247.194.119 Dec 8 13:18:14 wbs sshd\[15519\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.194.119	2019-12-09 07:21:23
36.92.21.50	attackbotsspam	Dec 8 23:59:34 legacy sshd[28192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.92.21.50 Dec 8 23:59:36 legacy sshd[28192]: Failed password for invalid user pcap from 36.92.21.50 port 39245 ssh2 Dec 9 00:07:25 legacy sshd[28683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.92.21.50 ...	2019-12-09 07:11:31
36.66.69.33	attackbots	Dec 8 19:20:48 firewall sshd[29292]: Invalid user copex from 36.66.69.33 Dec 8 19:20:50 firewall sshd[29292]: Failed password for invalid user copex from 36.66.69.33 port 13170 ssh2 Dec 8 19:27:19 firewall sshd[29524]: Invalid user alice from 36.66.69.33 ...	2019-12-09 06:58:18
222.186.180.223	attackspambots	2019-12-08T22:58:28.891964abusebot.cloudsearch.cf sshd\[31659\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root	2019-12-09 07:00:18

Recently Reported IPs

2001:16b8:64e1:1f00:cc8:10a2:bf9f:9e80	166.205.88.82	174.84.60.12	90.164.125.255
205.118.225.243	218.161.51.197	114.204.141.91	17.197.140.193
185.67.177.211	49.2.139.152	81.33.158.173	103.226.216.20
86.168.172.122	67.207.94.182	94.19.219.107	187.29.115.6
109.87.64.120	219.240.23.98	201.242.39.250	24.68.171.119