59.63.149.20 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Jiangxi Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Unauthorized connection attempt detected from IP address 59.63.149.20 to port 445	2019-12-31 21:59:38

Comments on same subnet:

IP	Type	Details	Datetime
59.63.149.197	attack	Unauthorized connection attempt detected from IP address 59.63.149.197 to port 445	2020-06-13 07:35:20
59.63.149.231	attackspam	1590983553 - 06/01/2020 05:52:33 Host: 59.63.149.231/59.63.149.231 Port: 445 TCP Blocked	2020-06-01 14:06:16
59.63.149.95	attack	Unauthorized connection attempt detected from IP address 59.63.149.95 to port 445 [T]	2020-04-15 02:16:46
59.63.149.96	attackspam	Unauthorized connection attempt detected from IP address 59.63.149.96 to port 445	2020-01-01 04:46:57
59.63.149.179	attackbots	Unauthorized connection attempt from IP address 59.63.149.179 on Port 445(SMB)	2019-10-19 22:13:21
59.63.149.241	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-20 22:45:46,826 INFO [shellcode_manager] (59.63.149.241) no match, writing hexdump (586d94b841b77f0dd27e1526ab7f8251 :2346933) - MS17010 (EternalBlue)	2019-07-23 23:49:50

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.63.149.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50301
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;59.63.149.20.			IN	A

;; AUTHORITY SECTION:
.			193	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123100 1800 900 604800 86400

;; Query time: 958 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 31 22:07:52 CST 2019
;; MSG SIZE  rcvd: 116

Host info

Host 20.149.63.59.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.149.63.59.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
118.24.64.156	attack	Mar 1 16:28:11 v22019058497090703 sshd[30207]: Failed password for root from 118.24.64.156 port 53738 ssh2 ...	2020-03-02 02:03:44
223.16.185.72	attack	Honeypot attack, port: 5555, PTR: 72-185-16-223-on-nets.com.	2020-03-02 01:56:07
78.140.21.22	attack	Honeypot attack, port: 445, PTR: n21-c22.client.tomica.ru.	2020-03-02 02:01:06
192.52.242.127	attackbots	Mar 1 18:23:34 v22018076622670303 sshd\[18894\]: Invalid user gitlab-prometheus from 192.52.242.127 port 58902 Mar 1 18:23:34 v22018076622670303 sshd\[18894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.52.242.127 Mar 1 18:23:37 v22018076622670303 sshd\[18894\]: Failed password for invalid user gitlab-prometheus from 192.52.242.127 port 58902 ssh2 ...	2020-03-02 01:46:31
78.188.42.22	attack	Automatic report - Banned IP Access	2020-03-02 02:00:47
51.38.224.84	attackspam	Mar 1 18:35:56 ns381471 sshd[21833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.224.84 Mar 1 18:35:58 ns381471 sshd[21833]: Failed password for invalid user rmxu from 51.38.224.84 port 44262 ssh2	2020-03-02 01:59:26
195.231.3.188	attack	Mar 1 18:13:50 web01.agentur-b-2.de postfix/smtpd[201882]: warning: unknown[195.231.3.188]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 1 18:15:10 web01.agentur-b-2.de postfix/smtpd[203739]: warning: unknown[195.231.3.188]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 1 18:15:40 web01.agentur-b-2.de postfix/smtpd[195814]: warning: unknown[195.231.3.188]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-03-02 01:46:08
84.54.57.80	attackspam	B: Magento admin pass test (wrong country)	2020-03-02 01:48:13
86.157.35.14	attackbots	Mar 1 14:22:07 grey postfix/smtpd\[21028\]: NOQUEUE: reject: RCPT from host86-157-35-14.range86-157.btcentralplus.com\[86.157.35.14\]: 554 5.7.1 Service unavailable\; Client host \[86.157.35.14\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?86.157.35.14\; from=\ to=\ proto=ESMTP helo=\ ...	2020-03-02 02:00:14
82.78.209.53	attackspambots	Automatic report - Port Scan Attack	2020-03-02 02:10:18
179.61.194.0	attack	missing rdns	2020-03-02 01:39:39
85.228.107.66	attack	Honeypot attack, port: 5555, PTR: ua-85-228-107-66.bbcust.telenor.se.	2020-03-02 01:47:59
186.122.148.9	attack	Mar 1 12:40:37 NPSTNNYC01T sshd[30468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.122.148.9 Mar 1 12:40:39 NPSTNNYC01T sshd[30468]: Failed password for invalid user vps from 186.122.148.9 port 59388 ssh2 Mar 1 12:45:51 NPSTNNYC01T sshd[30815]: Failed password for root from 186.122.148.9 port 47192 ssh2 ...	2020-03-02 01:51:31
93.174.95.106	attackspambots	20547/tcp 1741/tcp 8139/tcp... [2020-01-01/03-01]388pkt,199pt.(tcp),35pt.(udp)	2020-03-02 02:04:16
189.130.73.240	attackspam	Unauthorized connection attempt detected from IP address 189.130.73.240 to port 80 [J]	2020-03-02 01:41:34

Recently Reported IPs

210.245.49.93	209.219.133.4	45.67.24.66	205.3.181.78
145.70.140.87	77.213.244.31	166.172.216.84	210.5.156.196
183.80.122.207	183.80.89.9	183.63.53.53	182.155.13.65
182.115.91.128	182.103.12.199	180.137.30.117	179.252.59.200
176.239.173.45	175.184.167.41	139.226.144.4	123.181.64.242