49.85.98.44 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
49.85.98.183	spamattack	[2020/02/17 00:38:20] [49.85.98.183:2105-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 00:38:21] [49.85.98.183:2098-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 00:39:10] [49.85.98.183:2105-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 00:39:11] [49.85.98.183:2097-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 00:39:15] [49.85.98.183:2102-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 00:39:17] [49.85.98.183:2097-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 00:39:20] [49.85.98.183:2095-0] User leslie@luxnetcorp.com.tw AUTH fails.	2020-02-17 09:12:29
49.85.98.250	attackbotsspam	Unauthorized connection attempt detected from IP address 49.85.98.250 to port 6656 [T]	2020-01-30 18:09:23
49.85.98.97	attackspam	Unauthorized connection attempt detected from IP address 49.85.98.97 to port 6656 [T]	2020-01-27 08:01:47

Type

Details

Datetime

49.85.98.183

spamattack

[2020/02/17 00:38:20] [49.85.98.183:2105-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 00:38:21] [49.85.98.183:2098-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 00:39:10] [49.85.98.183:2105-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 00:39:11] [49.85.98.183:2097-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 00:39:15] [49.85.98.183:2102-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 00:39:17] [49.85.98.183:2097-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 00:39:20] [49.85.98.183:2095-0] User leslie@luxnetcorp.com.tw AUTH fails.

2020-02-17 09:12:29

49.85.98.250

attackbotsspam

Unauthorized connection attempt detected from IP address 49.85.98.250 to port 6656 [T]

2020-01-30 18:09:23

49.85.98.97

attackspam

Unauthorized connection attempt detected from IP address 49.85.98.97 to port 6656 [T]

2020-01-27 08:01:47

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.85.98.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15073
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.85.98.44.			IN	A

;; AUTHORITY SECTION:
.			423	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061401 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 15 13:04:18 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 44.98.85.49.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 44.98.85.49.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
195.91.136.58	attack	Nov 9 08:54:05 mailman postfix/smtpd[25900]: NOQUEUE: reject: RCPT from unknown[195.91.136.58]: 554 5.7.1 Service unavailable; Client host [195.91.136.58] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/195.91.136.58; from= to= proto=ESMTP helo=<[195.91.136.58]> Nov 9 08:57:10 mailman postfix/smtpd[25914]: NOQUEUE: reject: RCPT from unknown[195.91.136.58]: 554 5.7.1 Service unavailable; Client host [195.91.136.58] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/195.91.136.58; from= to= proto=ESMTP helo=<[195.91.136.58]>	2019-11-09 23:22:39
120.132.13.196	attack	F2B jail: sshd. Time: 2019-11-09 15:57:56, Reported by: VKReport	2019-11-09 23:09:14
114.67.109.20	attackspambots	2019-11-09T15:22:41.073533abusebot.cloudsearch.cf sshd\[16661\]: Invalid user sven123 from 114.67.109.20 port 42110	2019-11-09 23:26:13
203.160.174.214	attackspambots	SSH invalid-user multiple login attempts	2019-11-09 23:50:54
88.227.178.225	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/88.227.178.225/ TR - 1H : (47) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TR NAME ASN : ASN9121 IP : 88.227.178.225 CIDR : 88.227.176.0/22 PREFIX COUNT : 4577 UNIQUE IP COUNT : 6868736 ATTACKS DETECTED ASN9121 : 1H - 2 3H - 4 6H - 5 12H - 7 24H - 23 DateTime : 2019-11-09 15:56:54 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-09 23:31:04
45.136.110.46	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-09 23:23:10
51.68.228.85	attack	51.68.228.85 - - [09/Nov/2019:16:02:37 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.68.228.85 - - [09/Nov/2019:16:02:38 +0100] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.68.228.85 - - [09/Nov/2019:16:02:38 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.68.228.85 - - [09/Nov/2019:16:02:39 +0100] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.68.228.85 - - [09/Nov/2019:16:02:39 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.68.228.85 - - [09/Nov/2019:16:02:39 +0100] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-11-09 23:25:09
51.89.185.101	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-09 23:24:49
120.188.65.212	attack	2019-11-09T15:57:00.342661mail01 postfix/smtpd[1211]: warning: unknown[120.188.65.212]: SASL PLAIN authentication failed: 2019-11-09T15:57:07.272157mail01 postfix/smtpd[1211]: warning: unknown[120.188.65.212]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-09T15:57:15.001093mail01 postfix/smtpd[13862]: warning: unknown[120.188.65.212]: SASL PLAIN authentication failed:	2019-11-09 23:21:03
104.236.192.6	attackbotsspam	Nov 9 15:51:45 zulu412 sshd\[13295\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.192.6 user=root Nov 9 15:51:47 zulu412 sshd\[13295\]: Failed password for root from 104.236.192.6 port 35104 ssh2 Nov 9 15:57:26 zulu412 sshd\[13672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.192.6 user=root ...	2019-11-09 23:14:12
117.185.62.146	attack	Nov 8 21:44:21 server sshd\[5837\]: Failed password for invalid user tsingh from 117.185.62.146 port 44266 ssh2 Nov 9 17:38:58 server sshd\[28769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.185.62.146 user=root Nov 9 17:39:00 server sshd\[28769\]: Failed password for root from 117.185.62.146 port 57776 ssh2 Nov 9 17:57:28 server sshd\[1065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.185.62.146 user=root Nov 9 17:57:30 server sshd\[1065\]: Failed password for root from 117.185.62.146 port 43488 ssh2 ...	2019-11-09 23:10:02
61.163.190.49	attack	Nov 9 15:56:54 lnxded64 sshd[30318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.163.190.49 Nov 9 15:56:54 lnxded64 sshd[30318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.163.190.49	2019-11-09 23:33:19
192.241.253.218	attackspambots	2019-11-09T14:57:05.108526abusebot-3.cloudsearch.cf sshd\[14882\]: Invalid user k.okuda from 192.241.253.218 port 28253	2019-11-09 23:27:24
45.227.254.30	attackbots	Nov 9 15:47:56 mc1 kernel: \[4597165.021198\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.227.254.30 DST=159.69.205.51 LEN=40 TOS=0x08 PREC=0x00 TTL=239 ID=41524 PROTO=TCP SPT=50771 DPT=33891 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 9 15:48:05 mc1 kernel: \[4597174.445413\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.227.254.30 DST=159.69.205.51 LEN=40 TOS=0x08 PREC=0x00 TTL=239 ID=5253 PROTO=TCP SPT=50771 DPT=3489 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 9 15:57:04 mc1 kernel: \[4597712.760584\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.227.254.30 DST=159.69.205.51 LEN=40 TOS=0x08 PREC=0x00 TTL=239 ID=11109 PROTO=TCP SPT=50771 DPT=33894 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-11-09 23:26:35
60.168.64.107	attack	port 23 attempt blocked	2019-11-09 23:30:07

Recently Reported IPs

45.57.182.35	45.57.191.2	78.62.204.58	45.57.192.34
49.85.98.147	45.57.197.247	45.57.199.74	45.57.205.122
45.57.209.173	45.57.209.157	45.57.209.188	45.57.211.145
45.57.226.152	45.57.232.33	208.98.230.97	45.57.237.2
45.57.242.182	49.85.85.113	49.85.97.171	37.146.210.238