65.49.20.117 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
65.49.20.78	botsattack	Compromised IP	2025-01-28 22:48:38
65.49.20.67	botsattackproxy	Redis bot	2024-04-23 21:05:33
65.49.20.118	attackproxy	VPN fraud	2023-06-12 13:45:52
65.49.20.110	proxy	VPN fraud	2023-06-06 12:43:08
65.49.20.101	proxy	VPN fraud	2023-06-01 16:00:58
65.49.20.107	proxy	VPN fraud	2023-05-29 12:59:34
65.49.20.100	proxy	VPN fraud	2023-05-22 12:53:45
65.49.20.114	proxy	VPN fraud	2023-04-07 13:32:29
65.49.20.124	proxy	VPN fraud	2023-04-03 13:08:01
65.49.20.105	proxy	VPN fraud	2023-03-16 13:52:13
65.49.20.123	proxy	VPN fraud	2023-03-09 14:09:02
65.49.20.90	proxy	VPN scan	2023-02-20 14:00:04
65.49.20.119	proxy	VPN fraud	2023-02-14 20:08:26
65.49.20.106	proxy	Brute force VPN	2023-02-08 14:01:13
65.49.20.77	proxy	VPN	2023-02-06 13:57:51

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 65.49.20.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35226
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;65.49.20.117.			IN	A

;; AUTHORITY SECTION:
.			390	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 05:15:31 CST 2022
;; MSG SIZE  rcvd: 105

Host info

117.20.49.65.in-addr.arpa is an alias for 117.64-26.20.49.65.in-addr.arpa.
117.64-26.20.49.65.in-addr.arpa domain name pointer scan-20l.shadowserver.org.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
117.20.49.65.in-addr.arpa	canonical name = 117.64-26.20.49.65.in-addr.arpa.
117.64-26.20.49.65.in-addr.arpa	name = scan-20l.shadowserver.org.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.83.139.55	attackspambots	Brute forcing email accounts	2020-09-05 15:56:46
176.65.241.165	attackspambots	Honeypot attack, port: 445, PTR: mail.omanfuel.com.	2020-09-05 15:40:38
36.69.91.187	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-05 15:34:24
194.87.18.152	attackspambots	Sep 1 16:23:50 clarabelen sshd[20293]: Invalid user dac from 194.87.18.152 Sep 1 16:23:50 clarabelen sshd[20293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.87.18.152 Sep 1 16:23:53 clarabelen sshd[20293]: Failed password for invalid user dac from 194.87.18.152 port 50788 ssh2 Sep 1 16:23:53 clarabelen sshd[20293]: Received disconnect from 194.87.18.152: 11: Bye Bye [preauth] Sep 1 16:37:40 clarabelen sshd[21160]: Invalid user vinci from 194.87.18.152 Sep 1 16:37:40 clarabelen sshd[21160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.87.18.152 Sep 1 16:37:42 clarabelen sshd[21160]: Failed password for invalid user vinci from 194.87.18.152 port 51303 ssh2 Sep 1 16:37:42 clarabelen sshd[21160]: Received disconnect from 194.87.18.152: 11: Bye Bye [preauth] Sep 1 16:41:33 clarabelen sshd[21457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh........ -------------------------------	2020-09-05 15:59:23
45.82.136.236	attack	>10 unauthorized SSH connections	2020-09-05 16:06:29
112.26.98.122	attackspam	srv02 Mass scanning activity detected Target: 18287 ..	2020-09-05 16:10:04
180.76.176.126	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-05T02:36:27Z and 2020-09-05T02:56:59Z	2020-09-05 16:09:03
89.179.72.201	attackspam	20/9/4@13:27:15: FAIL: Alarm-Network address from=89.179.72.201 20/9/4@13:27:15: FAIL: Alarm-Network address from=89.179.72.201 ...	2020-09-05 15:36:47
84.180.236.164	attackspambots	Sep 5 09:28:19 lnxweb61 sshd[16942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.180.236.164	2020-09-05 15:45:10
134.122.112.119	attackbotsspam	TCP (SYN) 134.122.112.119:52273 -> port 8086, len 44	2020-09-05 15:38:28
119.96.124.131	attackbots	Automatic report - Banned IP Access	2020-09-05 15:46:27
217.23.1.87	attackbots	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-05T02:38:59Z and 2020-09-05T03:11:39Z	2020-09-05 15:58:55
64.213.148.44	attack	21 attempts against mh-ssh on cloud	2020-09-05 15:48:47
130.105.53.209	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-05 16:02:08
105.112.90.140	attack	Sep 4 18:48:56 mellenthin postfix/smtpd[28165]: NOQUEUE: reject: RCPT from unknown[105.112.90.140]: 554 5.7.1 Service unavailable; Client host [105.112.90.140] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/105.112.90.140 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[105.112.90.140]>	2020-09-05 16:06:09

Recently Reported IPs

196.203.254.5	208.67.42.95	97.113.244.247	186.94.230.235
114.55.236.65	117.5.140.123	103.70.159.150	103.219.218.171
180.76.191.77	115.171.251.104	103.69.46.90	97.96.199.75
223.155.81.177	45.201.207.234	5.83.104.179	145.255.72.46
209.237.154.186	181.143.117.18	91.107.1.139	197.32.137.33