49.85.52.138 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.85.52.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37098
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.85.52.138.			IN	A

;; AUTHORITY SECTION:
.			88	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061401 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 15 12:55:17 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 138.52.85.49.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.52.85.49.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
91.134.248.230	attackspambots	91.134.248.230 - - \[07/Jan/2020:15:27:37 +0100\] "POST /wp-login.php HTTP/1.0" 200 4404 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 91.134.248.230 - - \[07/Jan/2020:15:27:44 +0100\] "POST /wp-login.php HTTP/1.0" 200 4236 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 91.134.248.230 - - \[07/Jan/2020:15:27:47 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-01-08 04:31:17
185.176.27.18	attackbots	01/07/2020-14:40:55.908679 185.176.27.18 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-01-08 04:20:29
139.199.115.210	attackbotsspam	Jan 7 19:31:29 124388 sshd[9299]: Invalid user wf from 139.199.115.210 port 26736 Jan 7 19:31:29 124388 sshd[9299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.115.210 Jan 7 19:31:29 124388 sshd[9299]: Invalid user wf from 139.199.115.210 port 26736 Jan 7 19:31:31 124388 sshd[9299]: Failed password for invalid user wf from 139.199.115.210 port 26736 ssh2 Jan 7 19:36:09 124388 sshd[9389]: Invalid user lian from 139.199.115.210 port 49358	2020-01-08 04:37:25
49.235.42.19	attackspam	Unauthorized connection attempt detected from IP address 49.235.42.19 to port 2220 [J]	2020-01-08 04:49:46
179.124.36.195	attackbots	Jan 7 21:26:56 vpn01 sshd[29915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.124.36.195 Jan 7 21:26:57 vpn01 sshd[29915]: Failed password for invalid user ftpuser from 179.124.36.195 port 49415 ssh2 ...	2020-01-08 04:36:53
185.239.238.129	attack	2020-01-07T20:33:08.439702shield sshd\[21330\]: Invalid user jared from 185.239.238.129 port 44848 2020-01-07T20:33:08.444935shield sshd\[21330\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.239.238.129 2020-01-07T20:33:10.310121shield sshd\[21330\]: Failed password for invalid user jared from 185.239.238.129 port 44848 ssh2 2020-01-07T20:38:13.480074shield sshd\[23383\]: Invalid user jarod from 185.239.238.129 port 50228 2020-01-07T20:38:13.485462shield sshd\[23383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.239.238.129	2020-01-08 04:55:34
49.235.77.252	attack	Unauthorized connection attempt detected from IP address 49.235.77.252 to port 2220 [J]	2020-01-08 04:36:35
220.88.1.208	attackbots	Unauthorized connection attempt detected from IP address 220.88.1.208 to port 2220 [J]	2020-01-08 04:26:58
218.92.0.148	attack	2020-01-07T20:16:01.381752shield sshd\[15879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148 user=root 2020-01-07T20:16:03.588658shield sshd\[15879\]: Failed password for root from 218.92.0.148 port 55807 ssh2 2020-01-07T20:16:07.095278shield sshd\[15879\]: Failed password for root from 218.92.0.148 port 55807 ssh2 2020-01-07T20:16:10.161024shield sshd\[15879\]: Failed password for root from 218.92.0.148 port 55807 ssh2 2020-01-07T20:16:13.628040shield sshd\[15879\]: Failed password for root from 218.92.0.148 port 55807 ssh2	2020-01-08 04:30:51
159.203.90.122	attackspam	Automatic report - XMLRPC Attack	2020-01-08 04:48:15
101.89.150.171	attack	3x Failed Password	2020-01-08 04:26:46
118.150.201.142	attackspam	1578401664 - 01/07/2020 13:54:24 Host: 118.150.201.142/118.150.201.142 Port: 445 TCP Blocked	2020-01-08 04:27:59
45.40.194.129	attackspam	SSH Brute Force, server-1 sshd[20296]: Failed password for invalid user user from 45.40.194.129 port 42492 ssh2	2020-01-08 04:22:51
148.70.236.112	attack	Unauthorized connection attempt detected from IP address 148.70.236.112 to port 2220 [J]	2020-01-08 04:48:30
78.47.255.232	attackspambots	Jan 7 19:19:01 grey postfix/smtpd\[24772\]: NOQUEUE: reject: RCPT from static.232.255.47.78.clients.your-server.de\[78.47.255.232\]: 554 5.7.1 Service unavailable\; Client host \[78.47.255.232\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[78.47.255.232\]\; from=\ to=\ proto=SMTP helo=\ ...	2020-01-08 04:44:22

Recently Reported IPs

49.85.50.3	49.85.51.168	49.85.49.204	49.85.52.201
49.85.51.240	49.85.50.115	49.85.54.213	49.85.75.243
49.85.53.130	49.85.54.51	49.85.54.60	49.85.54.88
49.85.54.178	49.85.54.217	49.85.55.6	49.85.55.220
49.85.55.244	49.85.73.116	49.85.73.218	49.85.75.130