49.85.99.149 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
49.85.99.87	spam	[2020/02/17 02:11:06] [49.85.99.87:2095-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:07] [49.85.99.87:2099-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:09] [49.85.99.87:2102-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:10] [49.85.99.87:2098-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:11] [49.85.99.87:2103-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:37] [49.85.99.87:2105-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:42] [49.85.99.87:2097-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:46] [49.85.99.87:2098-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:49] [49.85.99.87:2102-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:12:11] [49.85.99.87:2102-0] User leslie@luxnetcorp.com.tw AUTH fails.	2020-02-17 09:09:58

Type

Details

Datetime

49.85.99.87

spam

[2020/02/17 02:11:06] [49.85.99.87:2095-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 02:11:07] [49.85.99.87:2099-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 02:11:09] [49.85.99.87:2102-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 02:11:10] [49.85.99.87:2098-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 02:11:11] [49.85.99.87:2103-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 02:11:37] [49.85.99.87:2105-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 02:11:42] [49.85.99.87:2097-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 02:11:46] [49.85.99.87:2098-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 02:11:49] [49.85.99.87:2102-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 02:12:11] [49.85.99.87:2102-0] User leslie@luxnetcorp.com.tw AUTH fails.

2020-02-17 09:09:58

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.85.99.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1573
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.85.99.149.			IN	A

;; AUTHORITY SECTION:
.			586	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061501 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 16 02:57:37 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 149.99.85.49.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.99.85.49.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
178.62.241.56	attackbotsspam	Invalid user maryam from 178.62.241.56 port 54950	2020-08-27 15:45:14
222.186.175.183	attack	web-1 [ssh] SSH Attack	2020-08-27 16:02:10
143.255.150.22	attackbotsspam	Automatic report - Port Scan Attack	2020-08-27 15:55:03
144.217.72.135	attack	2020-08-26 14:48:32 Unauthorized connection attempt to SMTP	2020-08-27 15:22:58
13.82.56.239	attackspam	Aug 25 11:25:12 hostnameis sshd[46980]: Invalid user admin1 from 13.82.56.239 Aug 25 11:25:12 hostnameis sshd[46980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.82.56.239 Aug 25 11:25:14 hostnameis sshd[46980]: Failed password for invalid user admin1 from 13.82.56.239 port 6976 ssh2 Aug 25 11:25:16 hostnameis sshd[46980]: Failed password for invalid user admin1 from 13.82.56.239 port 6976 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=13.82.56.239	2020-08-27 15:25:21
117.7.185.133	attack	Icarus honeypot on github	2020-08-27 15:51:32
129.28.45.70	attackspambots	Aug 24 12:08:22 nxxxxxxx sshd[16730]: Invalid user win from 129.28.45.70 Aug 24 12:08:22 nxxxxxxx sshd[16730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.45.70 Aug 24 12:08:24 nxxxxxxx sshd[16730]: Failed password for invalid user win from 129.28.45.70 port 56698 ssh2 Aug 24 12:08:24 nxxxxxxx sshd[16730]: Received disconnect from 129.28.45.70: 11: Bye Bye [preauth] Aug 24 12:13:18 nxxxxxxx sshd[17212]: Connection closed by 129.28.45.70 [preauth] Aug 24 12:15:07 nxxxxxxx sshd[17366]: Invalid user dev from 129.28.45.70 Aug 24 12:15:07 nxxxxxxx sshd[17366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.45.70 Aug 24 12:15:09 nxxxxxxx sshd[17366]: Failed password for invalid user dev from 129.28.45.70 port 35280 ssh2 Aug 24 12:15:09 nxxxxxxx sshd[17366]: Received disconnect from 129.28.45.70: 11: Bye Bye [preauth] Aug 24 12:17:00 nxxxxxxx sshd[17508]: Invalid user a from 12........ -------------------------------	2020-08-27 15:39:54
14.240.224.185	attackbots	2020-08-26 22:35:16.645344-0500 localhost smtpd[75750]: NOQUEUE: reject: RCPT from unknown[14.240.224.185]: 554 5.7.1 Service unavailable; Client host [14.240.224.185] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/14.240.224.185; from= to= proto=ESMTP helo=	2020-08-27 15:44:17
184.105.139.67	attack	UDP 184.105.139.67:45314 -> port 161, len 113	2020-08-27 15:52:21
197.63.234.140	attackbotsspam	Tried our host z.	2020-08-27 16:04:20
144.217.79.194	attack	[2020-08-27 02:33:14] NOTICE[1185] chan_sip.c: Registration from '' failed for '144.217.79.194:52220' - Wrong password [2020-08-27 02:33:14] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-27T02:33:14.958-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/144.217.79.194/52220",Challenge="6ccc0905",ReceivedChallenge="6ccc0905",ReceivedHash="aa2f72234ed8d2d5bbdd0936ded1fecc" [2020-08-27 02:33:14] NOTICE[1185] chan_sip.c: Registration from '' failed for '144.217.79.194:52221' - Wrong password [2020-08-27 02:33:14] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-27T02:33:14.958-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7f10c4ab1618",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/144.217.79.194 ...	2020-08-27 15:31:55
131.161.169.254	attackbots	From comercial-andre=truweb.com.br@seg-saudepme.com.br Wed Aug 26 20:47:27 2020 Received: from [131.161.169.254] (port=36608 helo=y2exzmfhzdmw.seg-saudepme.com.br)	2020-08-27 16:03:09
112.140.185.64	attackspam	2020-08-27T07:10:39.809543mail.standpoint.com.ua sshd[29672]: Invalid user web94p2 from 112.140.185.64 port 56828 2020-08-27T07:10:39.812107mail.standpoint.com.ua sshd[29672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.140.185.64 2020-08-27T07:10:39.809543mail.standpoint.com.ua sshd[29672]: Invalid user web94p2 from 112.140.185.64 port 56828 2020-08-27T07:10:41.480606mail.standpoint.com.ua sshd[29672]: Failed password for invalid user web94p2 from 112.140.185.64 port 56828 ssh2 2020-08-27T07:11:46.596982mail.standpoint.com.ua sshd[29799]: Invalid user xerox from 112.140.185.64 port 46034 ...	2020-08-27 15:42:33
219.145.117.2	attack	bruteforce detected	2020-08-27 15:59:47
182.137.62.70	attackbotsspam	spam (f2b h2)	2020-08-27 15:27:09

Recently Reported IPs

49.85.188.91	49.85.197.189	49.85.188.142	37.153.42.16
37.171.66.37	37.156.31.247	45.57.182.30	37.195.136.62
37.152.175.218	49.85.75.198	49.85.85.9	49.85.97.18
49.85.99.199	49.85.99.112	37.152.180.120	49.85.99.118
37.191.42.13	35.202.97.146	49.85.99.188	49.85.99.248