65.49.20.80 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: The Shadow Server Foundation

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Port 22 Scan, PTR: None	2020-08-17 14:54:00
attack	suspicious action Thu, 20 Feb 2020 10:22:59 -0300	2020-02-21 03:32:39

Comments on same subnet:

IP	Type	Details	Datetime
65.49.20.78	botsattack	Compromised IP	2025-01-28 22:48:38
65.49.20.67	botsattackproxy	Redis bot	2024-04-23 21:05:33
65.49.20.118	attackproxy	VPN fraud	2023-06-12 13:45:52
65.49.20.110	proxy	VPN fraud	2023-06-06 12:43:08
65.49.20.101	proxy	VPN fraud	2023-06-01 16:00:58
65.49.20.107	proxy	VPN fraud	2023-05-29 12:59:34
65.49.20.100	proxy	VPN fraud	2023-05-22 12:53:45
65.49.20.114	proxy	VPN fraud	2023-04-07 13:32:29
65.49.20.124	proxy	VPN fraud	2023-04-03 13:08:01
65.49.20.105	proxy	VPN fraud	2023-03-16 13:52:13
65.49.20.123	proxy	VPN fraud	2023-03-09 14:09:02
65.49.20.90	proxy	VPN scan	2023-02-20 14:00:04
65.49.20.119	proxy	VPN fraud	2023-02-14 20:08:26
65.49.20.106	proxy	Brute force VPN	2023-02-08 14:01:13
65.49.20.77	proxy	VPN	2023-02-06 13:57:51

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 65.49.20.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8367
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;65.49.20.80.			IN	A

;; AUTHORITY SECTION:
.			269	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022002 1800 900 604800 86400

;; Query time: 117 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 03:32:36 CST 2020
;; MSG SIZE  rcvd: 115

Host info

Host 80.20.49.65.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 80.20.49.65.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
64.31.35.218	attackbots	\[2019-11-16 18:30:03\] NOTICE\[2601\] chan_sip.c: Registration from '"801" \' failed for '64.31.35.218:5219' - Wrong password \[2019-11-16 18:30:03\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-16T18:30:03.021-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="801",SessionID="0x7fdf2cdc7888",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.31.35.218/5219",Challenge="6c64f1db",ReceivedChallenge="6c64f1db",ReceivedHash="772027a9863d3cd4c61973a1d4b15128" \[2019-11-16 18:30:03\] NOTICE\[2601\] chan_sip.c: Registration from '"801" \' failed for '64.31.35.218:5219' - Wrong password \[2019-11-16 18:30:03\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-16T18:30:03.118-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="801",SessionID="0x7fdf2c2af9c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.31.3	2019-11-17 07:42:41
182.127.96.80	attack	port 23 attempt blocked	2019-11-17 07:09:53
118.97.67.114	attackspambots	Nov 17 00:49:56 server sshd\[12412\]: Invalid user gal from 118.97.67.114 port 14812 Nov 17 00:49:56 server sshd\[12412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.97.67.114 Nov 17 00:49:57 server sshd\[12412\]: Failed password for invalid user gal from 118.97.67.114 port 14812 ssh2 Nov 17 00:59:18 server sshd\[25811\]: Invalid user apache from 118.97.67.114 port 57489 Nov 17 00:59:18 server sshd\[25811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.97.67.114	2019-11-17 07:26:06
81.214.139.103	attackspam	Unauthorised access (Nov 17) SRC=81.214.139.103 LEN=44 TTL=48 ID=58738 TCP DPT=23 WINDOW=15417 SYN	2019-11-17 07:25:27
222.186.180.41	attackspambots	Nov 16 23:33:36 marvibiene sshd[63300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41 user=root Nov 16 23:33:38 marvibiene sshd[63300]: Failed password for root from 222.186.180.41 port 60136 ssh2 Nov 16 23:33:41 marvibiene sshd[63300]: Failed password for root from 222.186.180.41 port 60136 ssh2 Nov 16 23:33:36 marvibiene sshd[63300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41 user=root Nov 16 23:33:38 marvibiene sshd[63300]: Failed password for root from 222.186.180.41 port 60136 ssh2 Nov 16 23:33:41 marvibiene sshd[63300]: Failed password for root from 222.186.180.41 port 60136 ssh2 ...	2019-11-17 07:35:45
106.12.102.160	attackbotsspam	Automatic report - Banned IP Access	2019-11-17 07:00:20
110.35.173.100	attackspam	Nov 16 16:39:26 cvbnet sshd[11993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.35.173.100 Nov 16 16:39:28 cvbnet sshd[11993]: Failed password for invalid user macmillan from 110.35.173.100 port 45341 ssh2 ...	2019-11-17 07:00:05
110.78.178.186	attackspambots	Nov 16 23:51:03 mail1 sshd[26839]: Invalid user admin from 110.78.178.186 port 57013 Nov 16 23:51:03 mail1 sshd[26839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.78.178.186 Nov 16 23:51:05 mail1 sshd[26839]: Failed password for invalid user admin from 110.78.178.186 port 57013 ssh2 Nov 16 23:51:06 mail1 sshd[26839]: Connection closed by 110.78.178.186 port 57013 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=110.78.178.186	2019-11-17 07:41:29
46.38.144.17	attackbots	Nov 16 23:59:56 relay postfix/smtpd\[16202\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 17 00:00:16 relay postfix/smtpd\[12892\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 17 00:00:34 relay postfix/smtpd\[21521\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 17 00:00:53 relay postfix/smtpd\[9565\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 17 00:01:11 relay postfix/smtpd\[14926\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-11-17 07:07:27
80.82.70.239	attackspambots	11/16/2019-18:27:37.601384 80.82.70.239 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 82	2019-11-17 07:28:38
219.155.245.7	attack	" "	2019-11-17 07:12:05
118.69.56.68	attackbots	Brute force attempt	2019-11-17 07:44:14
222.186.173.183	attackspambots	Nov 15 15:50:31 microserver sshd[60973]: Failed none for root from 222.186.173.183 port 45708 ssh2 Nov 15 15:50:32 microserver sshd[60973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183 user=root Nov 15 15:50:33 microserver sshd[60973]: Failed password for root from 222.186.173.183 port 45708 ssh2 Nov 15 15:50:37 microserver sshd[60973]: Failed password for root from 222.186.173.183 port 45708 ssh2 Nov 15 15:50:40 microserver sshd[60973]: Failed password for root from 222.186.173.183 port 45708 ssh2 Nov 16 09:43:33 microserver sshd[10283]: Failed none for root from 222.186.173.183 port 34300 ssh2 Nov 16 09:43:34 microserver sshd[10283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183 user=root Nov 16 09:43:36 microserver sshd[10283]: Failed password for root from 222.186.173.183 port 34300 ssh2 Nov 16 09:43:40 microserver sshd[10283]: Failed password for root from 222.186.173.183 port 34300 ssh2	2019-11-17 07:37:05
222.186.175.161	attackspam	SSH Brute-Force attacks	2019-11-17 07:24:00
185.156.177.235	attackspambots	Connection by 185.156.177.235 on port: 195 got caught by honeypot at 11/16/2019 10:35:23 PM	2019-11-17 07:42:22

Recently Reported IPs

223.196.161.79	181.199.157.87	192.79.158.15	122.51.167.108
114.40.161.50	59.126.82.183	35.198.237.221	151.61.41.1
200.89.174.205	201.91.143.250	207.154.210.68	36.38.105.245
192.186.161.141	114.35.179.4	149.72.59.102	171.19.198.198
39.41.63.67	122.165.206.114	186.95.139.109	60.191.127.122