65.49.20.106 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: The Shadow Server Foundation

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
proxy	Brute force VPN	2023-02-08 14:01:13
attack	Hack Attempt	2020-05-09 17:05:28
attack	ET CINS Active Threat Intelligence Poor Reputation IP group 54 - port: 443 proto: UDP cat: Misc Attack	2020-03-29 04:13:11

Comments on same subnet:

IP	Type	Details	Datetime
65.49.20.78	botsattack	Compromised IP	2025-01-28 22:48:38
65.49.20.67	botsattackproxy	Redis bot	2024-04-23 21:05:33
65.49.20.118	attackproxy	VPN fraud	2023-06-12 13:45:52
65.49.20.110	proxy	VPN fraud	2023-06-06 12:43:08
65.49.20.101	proxy	VPN fraud	2023-06-01 16:00:58
65.49.20.107	proxy	VPN fraud	2023-05-29 12:59:34
65.49.20.100	proxy	VPN fraud	2023-05-22 12:53:45
65.49.20.114	proxy	VPN fraud	2023-04-07 13:32:29
65.49.20.124	proxy	VPN fraud	2023-04-03 13:08:01
65.49.20.105	proxy	VPN fraud	2023-03-16 13:52:13
65.49.20.123	proxy	VPN fraud	2023-03-09 14:09:02
65.49.20.90	proxy	VPN scan	2023-02-20 14:00:04
65.49.20.119	proxy	VPN fraud	2023-02-14 20:08:26
65.49.20.77	proxy	VPN	2023-02-06 13:57:51
65.49.20.81	proxy	VPN	2022-12-27 13:51:59

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 65.49.20.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61110
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;65.49.20.106.			IN	A

;; AUTHORITY SECTION:
.			265	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032802 1800 900 604800 86400

;; Query time: 51 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 29 04:13:07 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 106.20.49.65.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 106.20.49.65.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
177.92.66.226	attackbots	$f2bV_matches_ltvn	2020-03-18 15:22:23
51.91.122.140	attack	Mar 18 06:04:27 ns37 sshd[30127]: Failed password for root from 51.91.122.140 port 52262 ssh2 Mar 18 06:04:27 ns37 sshd[30127]: Failed password for root from 51.91.122.140 port 52262 ssh2	2020-03-18 15:35:13
46.153.85.94	attackbotsspam	SSH bruteforce (Triggered fail2ban)	2020-03-18 15:44:17
107.175.33.240	attackspambots	Mar 18 07:38:29 web8 sshd\[27137\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.33.240 user=root Mar 18 07:38:31 web8 sshd\[27137\]: Failed password for root from 107.175.33.240 port 46900 ssh2 Mar 18 07:46:42 web8 sshd\[31315\]: Invalid user jmiller from 107.175.33.240 Mar 18 07:46:42 web8 sshd\[31315\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.33.240 Mar 18 07:46:44 web8 sshd\[31315\]: Failed password for invalid user jmiller from 107.175.33.240 port 54770 ssh2	2020-03-18 15:47:38
45.120.69.82	attackspambots	Mar 18 02:31:39 mail sshd\[15540\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.120.69.82 user=root ...	2020-03-18 15:20:23
51.68.89.100	attackbots	Mar 18 04:51:46 mail sshd[419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.89.100 user=root Mar 18 04:51:48 mail sshd[419]: Failed password for root from 51.68.89.100 port 34944 ssh2 ...	2020-03-18 15:15:55
175.24.75.215	attack	Mar 18 06:49:18 santamaria sshd\[9356\]: Invalid user andoria from 175.24.75.215 Mar 18 06:49:18 santamaria sshd\[9356\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.75.215 Mar 18 06:49:20 santamaria sshd\[9356\]: Failed password for invalid user andoria from 175.24.75.215 port 45378 ssh2 ...	2020-03-18 15:33:53
185.22.142.132	attackspambots	Mar 18 07:56:46 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.132, lip=176.9.177.164, session=\ Mar 18 07:56:48 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.132, lip=176.9.177.164, session=\ Mar 18 07:57:11 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.132, lip=176.9.177.164, session=\ Mar 18 08:02:22 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.132, lip=176.9.177.164, session=\ Mar 18 08:02:24 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 ...	2020-03-18 15:16:57
212.95.137.169	attack	detected by Fail2Ban	2020-03-18 15:36:38
119.57.162.18	attackbots	Mar 18 05:54:03 minden010 sshd[21003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.57.162.18 Mar 18 05:54:04 minden010 sshd[21003]: Failed password for invalid user mysftp from 119.57.162.18 port 48244 ssh2 Mar 18 05:57:45 minden010 sshd[22100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.57.162.18 ...	2020-03-18 15:37:53
49.234.27.151	attack	Mar 18 08:14:54 cloud sshd[4024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.27.151 Mar 18 08:14:57 cloud sshd[4024]: Failed password for invalid user zhangxiaofei from 49.234.27.151 port 47788 ssh2	2020-03-18 15:35:28
222.191.243.226	attackspambots	Mar 18 07:50:12 hosting sshd[27042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.191.243.226 user=root Mar 18 07:50:15 hosting sshd[27042]: Failed password for root from 222.191.243.226 port 38104 ssh2 ...	2020-03-18 15:45:11
185.143.221.46	attackspam	firewall-block, port(s): 2121/tcp, 2224/tcp, 9693/tcp	2020-03-18 15:31:05
111.231.103.192	attack	Invalid user dasusrl from 111.231.103.192 port 35488	2020-03-18 15:08:05
51.159.35.94	attackspambots	Mar 18 04:50:51 sshd[16847]: Failed password for invalid user kuaisuweb from 51.159.35.94 port 50682 ssh2	2020-03-18 15:49:00

Recently Reported IPs

180.249.180.199	93.183.226.218	79.160.85.76	23.178.58.18
116.202.203.130	95.85.69.126	84.81.70.134	111.229.64.240
61.9.53.10	49.233.92.34	160.16.74.175	103.27.9.128
193.70.71.248	177.70.200.112	16.155.86.81	97.240.126.20
199.83.207.6	100.186.4.146	209.142.206.131	216.36.75.93