49.85.1.63 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
49.85.110.244	spamattack	Steam account attach	2023-06-29 14:25:03
49.85.144.103	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-08-05 15:31:24
49.85.144.35	attack	TCP (SYN) 49.85.144.35:15285 -> port 23, len 44	2020-08-04 19:10:00
49.85.184.186	attackspambots	Email rejected due to spam filtering	2020-06-23 04:00:59
49.85.197.74	attackspam	May 8 22:50:20 host sshd[28632]: Invalid user silvio from 49.85.197.74 port 49178 ...	2020-05-09 05:38:40
49.85.138.73	attackspam	Unauthorized connection attempt detected from IP address 49.85.138.73 to port 23 [T]	2020-03-24 19:09:49
49.85.15.205	attack	Unauthorized connection attempt detected from IP address 49.85.15.205 to port 6656 [T]	2020-01-29 20:52:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.85.1.63
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38144
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.85.1.63.			IN	A

;; AUTHORITY SECTION:
.			238	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061500 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 15 15:59:47 CST 2022
;; MSG SIZE  rcvd: 103

Host info

Host 63.1.85.49.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 63.1.85.49.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.156.73.11	attack	185.156.73.11 was recorded 34 times by 16 hosts attempting to connect to the following ports: 42016,42018,42017,64767,64765,64766. Incident counter (4h, 24h, all-time): 34, 205, 2234	2019-11-21 08:43:04
199.195.250.111	attack	CloudCIX Reconnaissance Scan Detected, PTR: .	2019-11-21 08:12:21
89.40.114.94	attackbots	CloudCIX Reconnaissance Scan Detected, PTR: host94-114-40-89.serverdedicati.aruba.it.	2019-11-21 08:09:44
188.225.83.210	attackspam	Multiport scan : 22 ports scanned 789 1029 2221 2670 3011 3418 3989 4410 4459 4733 5141 5233 5301 5505 6933 6988 9006 9021 9874 10102 10151 11005	2019-11-21 08:23:42
93.42.255.250	attackspam	Automatic report - Banned IP Access	2019-11-21 08:34:06
151.80.254.73	attackspambots	Nov 20 23:36:24 DAAP sshd[29730]: Invalid user kondoff from 151.80.254.73 port 60022 Nov 20 23:36:24 DAAP sshd[29730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.254.73 Nov 20 23:36:24 DAAP sshd[29730]: Invalid user kondoff from 151.80.254.73 port 60022 Nov 20 23:36:26 DAAP sshd[29730]: Failed password for invalid user kondoff from 151.80.254.73 port 60022 ssh2 ...	2019-11-21 08:27:07
202.29.57.103	attackbotsspam	202.29.57.103 was recorded 89 times by 31 hosts attempting to connect to the following ports: 28081,8895,20332,18082,10331,8555,38082,10332,6588,20334,26969,26968,36968,8546,9656,8547,38081,8588,10334,18081,28082,36969. Incident counter (4h, 24h, all-time): 89, 424, 3983	2019-11-21 08:21:11
185.156.73.17	attackbots	11/20/2019-19:00:32.288300 185.156.73.17 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-11-21 08:42:32
185.209.0.92	attackspam	185.209.0.92 was recorded 158 times by 32 hosts attempting to connect to the following ports: 3546,3568,3569,3596,3537,3529,3558,3531,3519,3532,3525,3511,3554,3538,3567,3524,3560,3595,3564,3592,3563,3583,3548,3581,3528,3577,3553,3506,3551,3523,3500,3516,3572,3549,3571,3575,3557,3513,3582,3527,3579,3542,3576,3562,3547,3507,3580,3570,3544,3552,3522,3556,3539,3535,3573,3565,3521,3550,3518,3597,3566,3501,3530,3508,3578,3520,3574,3584,3526,3591,3515,3540,3559,3587. Incident counter (4h, 24h, all-time): 158, 520, 3573	2019-11-21 08:29:28
185.156.73.42	attackspam	Portscan or hack attempt detected by psad/fwsnort	2019-11-21 08:37:11
111.231.94.138	attack	Nov 21 01:27:49 localhost sshd\[18258\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.94.138 user=bin Nov 21 01:27:51 localhost sshd\[18258\]: Failed password for bin from 111.231.94.138 port 58776 ssh2 Nov 21 01:31:52 localhost sshd\[18659\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.94.138 user=root	2019-11-21 08:38:12
121.36.160.145	attackspam	121.36.160.145 was recorded 5 times by 5 hosts attempting to connect to the following ports: 6379. Incident counter (4h, 24h, all-time): 5, 5, 6	2019-11-21 08:17:21
185.175.93.104	attackspam	Multiport scan : 16 ports scanned 1910 1919 2001 2010 2015 2017 2018 2019 18181 19191 19721 20000 20001 20002 20003 20200	2019-11-21 08:34:37
185.175.93.18	attackspam	11/21/2019-01:18:13.483297 185.175.93.18 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-11-21 08:36:39
188.225.83.121	attack	Multiport scan : 28 ports scanned 123 555 1003 1212 1250 2017 2214 2227 2323 3003 3316 3338 3351 4123 4242 4412 4991 5151 5588 5960 9033 11114 19000 33801 33861 33870 39000 45389	2019-11-21 08:24:22

Recently Reported IPs

49.85.7.203	49.85.28.40	49.85.5.100	49.85.7.38
189.113.186.129	45.189.116.21	23.236.227.65	45.248.41.99
45.249.103.116	45.247.127.107	45.251.231.78	45.242.198.41
78.39.136.5	49.85.2.14	49.85.5.210	49.85.7.128
49.85.2.127	49.85.4.63	49.85.30.52	49.85.48.30