49.81.95.53 - IPInfo

Basic Info

City: Xuzhou

Region: Jiangsu

Country: China

Internet Service Provider: ChinaNet Jiangsu Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	SpamReport	2019-11-08 15:32:59

Comments on same subnet:

IP	Type	Details	Datetime
49.81.95.239	attackspambots	Dec 16 07:29:54 grey postfix/smtpd\[10632\]: NOQUEUE: reject: RCPT from unknown\[49.81.95.239\]: 554 5.7.1 Service unavailable\; Client host \[49.81.95.239\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.95.239\]\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-16 15:02:25
49.81.95.190	attackspam	$f2bV_matches	2019-12-01 00:41:17
49.81.95.184	attack	[Aegis] @ 2019-11-27 06:23:34 0000 -> Sendmail rejected message.	2019-11-27 19:46:04
49.81.95.3	attackbotsspam	$f2bV_matches	2019-10-22 03:04:09
49.81.95.115	attack	Email spam message	2019-10-20 17:37:47
49.81.95.211	attackbots	Brute force attempt	2019-10-01 09:03:17
49.81.95.225	attack	SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2019-09-14 03:04:53
49.81.95.207	attackspambots	IP: 49.81.95.207 ASN: AS4134 No.31 Jin-rong Street Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 3/09/2019 8:07:41 AM UTC	2019-09-03 19:46:28
49.81.95.160	attack	Brute force SMTP login attempts.	2019-08-28 09:39:19
49.81.95.103	attackbotsspam	MagicSpam Rule: check_ip_reverse_dns; Spammer IP: 49.81.95.103	2019-07-20 16:45:33
49.81.95.164	attackbotsspam	TCP Port: 25 _ invalid blocked abuseat-org barracudacentral _ _ _ _ (457)	2019-07-11 23:29:57

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.81.95.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14685
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.81.95.53.			IN	A

;; AUTHORITY SECTION:
.			516	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110800 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 08 15:32:56 CST 2019
;; MSG SIZE  rcvd: 115

Host info

Host 53.95.81.49.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 53.95.81.49.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
91.226.210.84	attack	Unauthorised access (Jul 3) SRC=91.226.210.84 LEN=52 TTL=115 ID=1508 DF TCP DPT=445 WINDOW=8192 SYN	2019-07-04 02:44:32
95.216.11.34	attackbots	do not respect robot.txt	2019-07-04 03:19:21
106.12.194.79	attackspambots	Jul 3 15:17:12 vps65 sshd\[28738\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.194.79 user=root Jul 3 15:17:14 vps65 sshd\[28738\]: Failed password for root from 106.12.194.79 port 58184 ssh2 ...	2019-07-04 03:09:15
142.93.39.181	attack	Jul 3 16:18:01 srv-4 sshd\[11558\]: Invalid user hamish from 142.93.39.181 Jul 3 16:18:01 srv-4 sshd\[11558\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.181 Jul 3 16:18:04 srv-4 sshd\[11558\]: Failed password for invalid user hamish from 142.93.39.181 port 59938 ssh2 ...	2019-07-04 02:43:22
27.203.195.182	attack	37215/tcp 37215/tcp 37215/tcp... [2019-05-06/07-03]54pkt,1pt.(tcp)	2019-07-04 03:08:22
141.98.10.53	attackspam	Rude login attack (13 tries in 1d)	2019-07-04 02:58:09
105.107.8.26	attack	105.107.8.26 - - [03/Jul/2019:15:17:19 +0200] "GET /wp-login.php HTTP/1.1" 403 1012 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1"	2019-07-04 03:04:08
125.16.66.69	attack	445/tcp 445/tcp 445/tcp [2019-06-04/07-03]3pkt	2019-07-04 03:03:42
27.102.106.224	attack	445/tcp 445/tcp 445/tcp... [2019-05-02/07-03]16pkt,1pt.(tcp)	2019-07-04 03:12:18
113.161.64.106	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 13:11:57,129 INFO [amun_request_handler] PortScan Detected on Port: 445 (113.161.64.106)	2019-07-04 03:26:07
5.249.145.245	attackbotsspam	Jul 3 15:59:45 lnxded63 sshd[1567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.249.145.245	2019-07-04 02:53:06
222.73.85.76	attack	445/tcp 445/tcp 445/tcp... [2019-05-08/07-03]15pkt,1pt.(tcp)	2019-07-04 03:00:48
171.254.10.118	attackbots	445/tcp 445/tcp 445/tcp... [2019-05-31/07-03]11pkt,1pt.(tcp)	2019-07-04 02:57:08
69.94.143.19	attackbotsspam	TCP Port: 25 _ invalid blocked dnsbl-sorbs spamcop _ _ _ _ (721)	2019-07-04 03:02:53
71.6.147.254	attackspam	Honeypot hit.	2019-07-04 03:24:39

Recently Reported IPs

45.64.1.50	23.253.57.102	182.1.18.101	222.88.238.242
181.48.155.149	39.49.99.140	181.197.177.36	64.183.78.122
50.62.177.49	89.47.217.222	175.140.138.9	178.128.25.223
45.178.2.0	107.161.91.60	176.109.234.114	182.1.3.116
167.172.139.65	34.93.7.119	92.222.180.182	130.162.66.249