49.83.2.54 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Jiangsu Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Honeypot attack, port: 5555, PTR: PTR record not found	2020-01-18 09:05:11

Comments on same subnet:

IP	Type	Details	Datetime
49.83.241.166	attack	Aug 31 22:10:05 host sshd[30635]: Invalid user netscreen from 49.83.241.166 port 47448 Aug 31 22:10:06 host sshd[30637]: Invalid user misp from 49.83.241.166 port 48062 Aug 31 22:10:12 host sshd[30641]: Invalid user admin from 49.83.241.166 port 49647 Aug 31 22:10:15 host sshd[30643]: Invalid user admin from 49.83.241.166 port 50835 Aug 31 22:10:17 host sshd[30645]: Invalid user admin from 49.83.241.166 port 51992 Aug 31 22:10:19 host sshd[30647]: Invalid user admin from 49.83.241.166 port 52859 Aug 31 22:10:21 host sshd[30649]: Invalid user admin from 49.83.241.166 port 53769 Au ...	2020-09-01 07:18:39
49.83.220.48	attackspambots	Aug 11 07:18:21 lvps5-35-247-183 sshd[32521]: Bad protocol version identification '' from 49.83.220.48 Aug 11 07:18:27 lvps5-35-247-183 sshd[32522]: Invalid user openhabian from 49.83.220.48 Aug 11 07:18:27 lvps5-35-247-183 sshd[32522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.220.48 Aug 11 07:18:29 lvps5-35-247-183 sshd[32522]: Failed password for invalid user openhabian from 49.83.220.48 port 54950 ssh2 Aug 11 07:18:29 lvps5-35-247-183 sshd[32522]: Connection closed by 49.83.220.48 [preauth] Aug 11 07:18:33 lvps5-35-247-183 sshd[32526]: Invalid user support from 49.83.220.48 Aug 11 07:18:34 lvps5-35-247-183 sshd[32526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.220.48 Aug 11 07:18:36 lvps5-35-247-183 sshd[32526]: Failed password for invalid user support from 49.83.220.48 port 58333 ssh2 Aug 11 07:18:36 lvps5-35-247-183 sshd[32526]: Connection closed by 49.83.220......... -------------------------------	2020-08-15 00:08:49
49.83.241.73	attackbotsspam	Lines containing failures of 49.83.241.73 Aug 13 23:35:59 penfold sshd[17214]: Bad protocol version identification '' from 49.83.241.73 port 56868 Aug 13 23:36:08 penfold sshd[17215]: Invalid user NetLinx from 49.83.241.73 port 57479 Aug 13 23:36:10 penfold sshd[17215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.241.73 Aug 13 23:36:11 penfold sshd[17215]: Failed password for invalid user NetLinx from 49.83.241.73 port 57479 ssh2 Aug 13 23:36:13 penfold sshd[17215]: Connection closed by invalid user NetLinx 49.83.241.73 port 57479 [preauth] Aug 13 23:36:20 penfold sshd[17221]: Invalid user netscreen from 49.83.241.73 port 35054 Aug 13 23:36:21 penfold sshd[17221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.241.73 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.83.241.73	2020-08-14 12:44:54
49.83.209.75	attackbots	WEB Remote Command Execution via Shell Script -1.a	2020-07-12 19:53:30
49.83.230.25	attackspambots	Jun 22 05:51:05 host sshd[26871]: Invalid user bojan from 49.83.230.25 port 56285 ...	2020-06-22 16:21:48
49.83.230.180	attackspambots	Invalid user loginuser from 49.83.230.180 port 64109	2020-06-16 19:24:22
49.83.230.226	attackspam	SSH/22 MH Probe, BF, Hack -	2020-06-16 19:19:12
49.83.231.62	attack	SSH/22 MH Probe, BF, Hack -	2020-06-16 19:18:22
49.83.230.18	attackspam	Lines containing failures of 49.83.230.18 Jun 13 14:18:10 linuxrulz sshd[611]: Invalid user hdesk from 49.83.230.18 port 56189 Jun 13 14:18:10 linuxrulz sshd[611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.230.18 Jun 13 14:18:12 linuxrulz sshd[611]: Failed password for invalid user hdesk from 49.83.230.18 port 56189 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.83.230.18	2020-06-14 03:44:13
49.83.230.213	attack	Lines containing failures of 49.83.230.213 Jun 11 00:43:10 MAKserver05 sshd[10204]: Invalid user company from 49.83.230.213 port 61866 Jun 11 00:43:10 MAKserver05 sshd[10204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.230.213 Jun 11 00:43:12 MAKserver05 sshd[10204]: Failed password for invalid user company from 49.83.230.213 port 61866 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.83.230.213	2020-06-13 22:20:00
49.83.230.220	attackspam	Invalid user mssql from 49.83.230.220 port 63647	2020-06-12 02:04:50
49.83.21.190	attackspambots	Unauthorized connection attempt detected from IP address 49.83.21.190 to port 23	2020-05-30 04:37:33
49.83.226.31	attackbotsspam	" "	2020-05-04 23:50:07
49.83.226.99	attackbotsspam	suspicious action Sun, 08 Mar 2020 18:33:59 -0300	2020-03-09 05:54:44
49.83.240.69	attackbots	Unauthorized connection attempt detected from IP address 49.83.240.69 to port 23 [J]	2020-02-05 21:21:43

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.83.2.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28759
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.83.2.54.			IN	A

;; AUTHORITY SECTION:
.			172	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011701 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 18 09:05:08 CST 2020
;; MSG SIZE  rcvd: 114

Host info

Host 54.2.83.49.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 54.2.83.49.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
198.199.77.16	attack	bruteforce detected	2020-09-05 14:27:37
62.173.149.88	attackbots	[2020-09-04 14:16:15] NOTICE[1194][C-000006b8] chan_sip.c: Call from '' (62.173.149.88:56458) to extension '145501148943147001' rejected because extension not found in context 'public'. [2020-09-04 14:16:15] SECURITY[1233] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-04T14:16:15.574-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="145501148943147001",SessionID="0x7f2ddc036c38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.173.149.88/56458",ACLName="no_extension_match" [2020-09-04 14:16:50] NOTICE[1194][C-000006bb] chan_sip.c: Call from '' (62.173.149.88:57680) to extension '145601148943147001' rejected because extension not found in context 'public'. [2020-09-04 14:16:50] SECURITY[1233] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-04T14:16:50.942-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="145601148943147001",SessionID="0x7f2ddc1b7848",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddres ...	2020-09-05 14:56:01
143.204.194.67	attackbots	TCP Port: 443 invalid blocked Listed on zen-spamhaus Client xx.xx.6.14 (164)	2020-09-05 14:57:27
45.142.120.89	attackspam	2020-09-05 07:05:50 dovecot_login authenticator failed for \(User\) \[45.142.120.89\]: 535 Incorrect authentication data \(set_id=army@no-server.de\) 2020-09-05 07:06:01 dovecot_login authenticator failed for \(User\) \[45.142.120.89\]: 535 Incorrect authentication data \(set_id=army@no-server.de\) 2020-09-05 07:06:05 dovecot_login authenticator failed for \(User\) \[45.142.120.89\]: 535 Incorrect authentication data \(set_id=nmail@no-server.de\) 2020-09-05 07:06:05 dovecot_login authenticator failed for \(User\) \[45.142.120.89\]: 535 Incorrect authentication data \(set_id=nmail@no-server.de\) 2020-09-05 07:06:32 dovecot_login authenticator failed for \(User\) \[45.142.120.89\]: 535 Incorrect authentication data \(set_id=nmail@no-server.de\) ...	2020-09-05 14:35:09
197.51.193.194	attackspam	Honeypot attack, port: 81, PTR: host-197.51.193.194.tedata.net.	2020-09-05 14:29:38
89.248.167.141	attack	Port scan: Attack repeated for 24 hours	2020-09-05 15:08:18
220.76.205.178	attack	Sep 4 18:13:59 sachi sshd\[19420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.76.205.178 user=root Sep 4 18:14:01 sachi sshd\[19420\]: Failed password for root from 220.76.205.178 port 54205 ssh2 Sep 4 18:18:13 sachi sshd\[19706\]: Invalid user gavin from 220.76.205.178 Sep 4 18:18:13 sachi sshd\[19706\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.76.205.178 Sep 4 18:18:15 sachi sshd\[19706\]: Failed password for invalid user gavin from 220.76.205.178 port 55735 ssh2	2020-09-05 14:34:06
203.195.205.202	attackbotsspam	Sep 5 04:03:53 mavik sshd[8844]: Invalid user postgres from 203.195.205.202 Sep 5 04:03:53 mavik sshd[8844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.205.202 Sep 5 04:03:55 mavik sshd[8844]: Failed password for invalid user postgres from 203.195.205.202 port 43824 ssh2 Sep 5 04:08:39 mavik sshd[9130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.205.202 user=root Sep 5 04:08:42 mavik sshd[9130]: Failed password for root from 203.195.205.202 port 36340 ssh2 ...	2020-09-05 14:57:47
207.46.13.42	attack	Automatic report - Banned IP Access	2020-09-05 15:02:25
122.164.242.113	attackspambots	Sep 4 18:50:25 mellenthin postfix/smtpd[32087]: NOQUEUE: reject: RCPT from unknown[122.164.242.113]: 554 5.7.1 Service unavailable; Client host [122.164.242.113] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/122.164.242.113; from= to= proto=ESMTP helo=	2020-09-05 14:46:52
170.245.92.22	attack	Honeypot attack, port: 445, PTR: host-22.voob.net.br.92.245.170.in-addr.arpa.	2020-09-05 14:32:34
159.65.196.65	attackbots	Sep 5 04:11:12 l02a sshd[32134]: Invalid user vod from 159.65.196.65 Sep 5 04:11:12 l02a sshd[32134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.196.65 Sep 5 04:11:12 l02a sshd[32134]: Invalid user vod from 159.65.196.65 Sep 5 04:11:14 l02a sshd[32134]: Failed password for invalid user vod from 159.65.196.65 port 42736 ssh2	2020-09-05 15:02:50
180.166.117.254	attack	2020-09-04 22:23:19.833673-0500 localhost sshd[78489]: Failed password for invalid user villa from 180.166.117.254 port 47381 ssh2	2020-09-05 14:37:32
106.13.237.235	attackspambots	Invalid user vbox from 106.13.237.235 port 44720	2020-09-05 14:31:53
189.225.191.252	attack	Honeypot attack, port: 445, PTR: dsl-189-225-191-252-dyn.prod-infinitum.com.mx.	2020-09-05 14:59:25

Recently Reported IPs

153.81.196.101	153.9.156.5	203.67.134.57	198.54.124.2
39.141.58.110	206.189.155.15	91.188.212.159	195.24.88.163
115.40.117.74	233.250.127.207	179.133.138.104	32.225.87.198
223.83.209.97	223.10.29.40	154.23.132.2	153.99.182.146
106.52.196.166	91.232.96.8	203.73.176.120	51.1.76.72