59.49.99.124 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Shanxi Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Dec 8 17:57:48 icinga sshd[25299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 Dec 8 17:57:50 icinga sshd[25299]: Failed password for invalid user atlanta from 59.49.99.124 port 33005 ssh2 ...	2019-12-09 01:32:37
attackbots	Dec 5 13:03:28 kapalua sshd\[28275\]: Invalid user guest from 59.49.99.124 Dec 5 13:03:28 kapalua sshd\[28275\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 Dec 5 13:03:31 kapalua sshd\[28275\]: Failed password for invalid user guest from 59.49.99.124 port 63977 ssh2 Dec 5 13:08:55 kapalua sshd\[28861\]: Invalid user portal from 59.49.99.124 Dec 5 13:08:55 kapalua sshd\[28861\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124	2019-12-06 07:16:15
attack	Dec 3 09:44:12 meumeu sshd[27494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 Dec 3 09:44:13 meumeu sshd[27494]: Failed password for invalid user mysql from 59.49.99.124 port 35920 ssh2 Dec 3 09:51:33 meumeu sshd[28435]: Failed password for root from 59.49.99.124 port 40883 ssh2 ...	2019-12-03 17:00:08
attack	Dec 2 09:55:10 * sshd[2719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 Dec 2 09:55:12 * sshd[2719]: Failed password for invalid user nfs from 59.49.99.124 port 14691 ssh2	2019-12-02 17:20:00
attack	Nov 28 04:45:39 TORMINT sshd\[31017\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 user=root Nov 28 04:45:41 TORMINT sshd\[31017\]: Failed password for root from 59.49.99.124 port 61715 ssh2 Nov 28 04:53:25 TORMINT sshd\[31505\]: Invalid user beevor from 59.49.99.124 Nov 28 04:53:25 TORMINT sshd\[31505\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 ...	2019-11-28 21:38:11
attack	Nov 17 07:40:38 eventyay sshd[23662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 Nov 17 07:40:40 eventyay sshd[23662]: Failed password for invalid user monette from 59.49.99.124 port 34453 ssh2 Nov 17 07:46:13 eventyay sshd[23745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 ...	2019-11-17 15:02:08
attack	SSH invalid-user multiple login try	2019-11-12 03:28:00
attack	Nov 9 07:53:07 php1 sshd\[23483\]: Invalid user anton from 59.49.99.124 Nov 9 07:53:07 php1 sshd\[23483\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 Nov 9 07:53:09 php1 sshd\[23483\]: Failed password for invalid user anton from 59.49.99.124 port 43246 ssh2 Nov 9 07:58:03 php1 sshd\[23991\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 user=root Nov 9 07:58:05 php1 sshd\[23991\]: Failed password for root from 59.49.99.124 port 38203 ssh2	2019-11-10 02:00:07
attackbots	Oct 20 06:49:01 meumeu sshd[11090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 Oct 20 06:49:03 meumeu sshd[11090]: Failed password for invalid user cturner from 59.49.99.124 port 49109 ssh2 Oct 20 06:54:45 meumeu sshd[15940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 ...	2019-10-20 17:38:19
attack	Oct 12 17:15:10 MK-Soft-VM4 sshd[15096]: Failed password for root from 59.49.99.124 port 18061 ssh2 ...	2019-10-13 03:01:07
attackbotsspam	2019-09-27T17:41:21.814330suse-nuc sshd[26422]: Invalid user rf from 59.49.99.124 port 10076 ...	2019-09-28 08:47:49
attackbotsspam	Sep 21 11:35:53 plusreed sshd[32590]: Invalid user ddonato from 59.49.99.124 ...	2019-09-22 01:21:43
attackspam	Sep 19 15:41:38 sachi sshd\[2346\]: Invalid user luanda from 59.49.99.124 Sep 19 15:41:38 sachi sshd\[2346\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 Sep 19 15:41:41 sachi sshd\[2346\]: Failed password for invalid user luanda from 59.49.99.124 port 37721 ssh2 Sep 19 15:46:29 sachi sshd\[2758\]: Invalid user contato from 59.49.99.124 Sep 19 15:46:29 sachi sshd\[2758\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124	2019-09-20 09:55:07
attackspambots	2019-08-25T21:08:46.866979abusebot-4.cloudsearch.cf sshd\[9013\]: Invalid user registry from 59.49.99.124 port 26773	2019-08-26 10:48:31
attackspam	Aug 14 08:06:59 icinga sshd[28364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 Aug 14 08:07:01 icinga sshd[28364]: Failed password for invalid user admin from 59.49.99.124 port 51335 ssh2 ...	2019-08-14 15:21:42
attack	Aug 11 09:43:57 [munged] sshd[569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124	2019-08-12 01:43:02
attackbotsspam	Aug 7 14:01:55 yabzik sshd[26785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 Aug 7 14:01:57 yabzik sshd[26785]: Failed password for invalid user ruthie from 59.49.99.124 port 28752 ssh2 Aug 7 14:06:57 yabzik sshd[28390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124	2019-08-07 19:15:43
attack	Aug 2 15:19:35 vtv3 sshd\[13554\]: Invalid user k from 59.49.99.124 port 58782 Aug 2 15:19:35 vtv3 sshd\[13554\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 Aug 2 15:19:36 vtv3 sshd\[13554\]: Failed password for invalid user k from 59.49.99.124 port 58782 ssh2 Aug 2 15:25:13 vtv3 sshd\[16776\]: Invalid user sm from 59.49.99.124 port 53101 Aug 2 15:25:13 vtv3 sshd\[16776\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 Aug 2 15:36:16 vtv3 sshd\[21960\]: Invalid user iam from 59.49.99.124 port 41737 Aug 2 15:36:16 vtv3 sshd\[21960\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 Aug 2 15:36:18 vtv3 sshd\[21960\]: Failed password for invalid user iam from 59.49.99.124 port 41737 ssh2 Aug 2 15:41:59 vtv3 sshd\[24707\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.49.99.124 user=roo	2019-08-03 12:23:41

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.49.99.124
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30167
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;59.49.99.124.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080202 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 03 12:23:32 CST 2019
;; MSG SIZE  rcvd: 116

Host info

Host 124.99.49.59.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 124.99.49.59.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
104.208.30.92	attack	ICMP MP Probe, Scan -	2019-10-04 01:02:07
149.202.65.173	attackbots	Oct 3 06:58:42 auw2 sshd\[7248\]: Invalid user postgres from 149.202.65.173 Oct 3 06:58:42 auw2 sshd\[7248\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3014527.ip-149-202-65.eu Oct 3 06:58:44 auw2 sshd\[7248\]: Failed password for invalid user postgres from 149.202.65.173 port 50294 ssh2 Oct 3 07:02:59 auw2 sshd\[7644\]: Invalid user la from 149.202.65.173 Oct 3 07:02:59 auw2 sshd\[7644\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3014527.ip-149-202-65.eu	2019-10-04 01:08:12
93.65.228.167	attackbots	Automatic report - Port Scan Attack	2019-10-04 00:34:00
51.75.30.199	attackbotsspam	Oct 3 06:22:55 php1 sshd\[25772\]: Invalid user terraria_user from 51.75.30.199 Oct 3 06:22:55 php1 sshd\[25772\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.ip-51-75-30.eu Oct 3 06:22:57 php1 sshd\[25772\]: Failed password for invalid user terraria_user from 51.75.30.199 port 47899 ssh2 Oct 3 06:26:58 php1 sshd\[28287\]: Invalid user pt from 51.75.30.199 Oct 3 06:26:58 php1 sshd\[28287\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.ip-51-75-30.eu	2019-10-04 00:36:11
104.36.16.0	attack	ICMP MP Probe, Scan -	2019-10-04 00:46:33
218.150.220.206	attack	2019-10-03T12:24:59.188296abusebot-5.cloudsearch.cf sshd\[20961\]: Invalid user aish from 218.150.220.206 port 53574	2019-10-04 01:13:24
81.22.45.254	attackspambots	Oct 2 07:49:15 SRC=81.22.45.254 PROTO=TCP SPT=52706 DPT=8845 Oct 2 07:49:15 SRC=81.22.45.254 PROTO=TCP SPT=52706 DPT=63214 Oct 2 08:37:17 SRC=81.22.45.254 PROTO=TCP SPT=52706 DPT=55043 Oct 2 08:46:42 SRC=81.22.45.254 PROTO=TCP SPT=52706 DPT=5246 Oct 2 09:22:17 SRC=81.22.45.254 PROTO=TCP SPT=52706 DPT=61770	2019-10-04 00:42:56
192.248.43.26	attackbots	$f2bV_matches	2019-10-04 01:04:38
104.198.95.156	attackbots	ICMP MP Probe, Scan -	2019-10-04 01:08:36
85.74.134.171	attackspam	Automatic report - Port Scan Attack	2019-10-04 00:56:23
104.36.16.150	attackspam	ICMP MP Probe, Scan -	2019-10-04 00:37:31
103.1.92.35	attackspam	WordPress XMLRPC scan :: 103.1.92.35 0.244 BYPASS [03/Oct/2019:22:25:19 1000] www.[censored_1] "POST /xmlrpc.php HTTP/1.1" 200 382 "https://www.[censored_1]/" "PHP/6.2.46"	2019-10-04 00:53:38
14.102.115.130	attackspam	2019-10-03 07:25:09 H=(lunisiananet.it) [14.102.115.130]:42758 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address 2019-10-03 07:25:09 H=(lunisiananet.it) [14.102.115.130]:42758 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed 2019-10-03 07:25:09 H=(lunisiananet.it) [14.102.115.130]:42758 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed ...	2019-10-04 01:05:40
139.199.48.216	attackbotsspam	Oct 3 05:02:34 web1 sshd\[6121\]: Invalid user dnslog from 139.199.48.216 Oct 3 05:02:34 web1 sshd\[6121\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.48.216 Oct 3 05:02:36 web1 sshd\[6121\]: Failed password for invalid user dnslog from 139.199.48.216 port 35748 ssh2 Oct 3 05:08:06 web1 sshd\[6658\]: Invalid user wwwrun from 139.199.48.216 Oct 3 05:08:06 web1 sshd\[6658\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.48.216	2019-10-04 00:58:55
144.217.242.111	attackspam	Automatic report - Banned IP Access	2019-10-04 00:37:12

Recently Reported IPs

230.59.84.81	0.201.144.116	71.149.182.145	190.209.42.207
114.170.3.114	158.225.22.223	79.6.229.173	180.69.95.125
178.119.231.202	1.64.53.165	121.62.220.182	58.209.212.30
109.200.135.113	99.90.203.107	86.105.130.7	39.88.7.105
118.167.136.185	93.158.166.145	180.126.76.162	172.79.36.56