必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Bangkok

省份(region): Bangkok

国家(country): Thailand

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
49.49.242.15 attackbots
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-09-03 01:28:07
49.49.242.15 attackbotsspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-09-02 16:53:58
49.49.242.109 attackspam
1586349776 - 04/08/2020 14:42:56 Host: 49.49.242.109/49.49.242.109 Port: 445 TCP Blocked
2020-04-08 21:41:06
49.49.242.130 attackbotsspam
Honeypot attack, port: 445, PTR: mx-ll-49.49.242-130.dynamic.3bb.in.th.
2020-03-26 00:27:19
49.49.242.237 attackbotsspam
Unauthorized connection attempt detected from IP address 49.49.242.237 to port 1022 [T]
2020-01-07 00:12:50
49.49.242.104 attack
Lines containing failures of 49.49.242.104
Sep  4 04:41:51 server sshd[12449]: Connection from 49.49.242.104 port 53283 on 62.116.165.82 port 22
Sep  4 04:41:51 server sshd[12449]: Did not receive identification string from 49.49.242.104 port 53283
Sep  4 04:41:53 server sshd[12451]: Connection from 49.49.242.104 port 50382 on 62.116.165.82 port 22
Sep  4 04:41:54 server sshd[12451]: reveeclipse mapping checking getaddrinfo for mx-ll-49.49.242-104.dynamic.3bb.in.th [49.49.242.104] failed - POSSIBLE BREAK-IN ATTEMPT!
Sep  4 04:41:54 server sshd[12451]: Invalid user noc from 49.49.242.104 port 50382
Sep  4 04:41:54 server sshd[12451]: Connection closed by 49.49.242.104 port 50382 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.49.242.104
2019-09-04 19:03:55
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.49.242.236
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21386
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.49.242.236.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025040100 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 02 00:36:55 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
236.242.49.49.in-addr.arpa domain name pointer mx-ll-49.49.242-236.dynamic.3bb.co.th.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
236.242.49.49.in-addr.arpa	name = mx-ll-49.49.242-236.dynamic.3bb.co.th.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
139.59.25.82 attack
Oct  5 19:03:48 host sshd[10598]: User r.r from 139.59.25.82 not allowed because none of user's groups are listed in AllowGroups
Oct  5 19:03:48 host sshd[10598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.25.82  user=r.r
Oct  5 19:03:50 host sshd[10598]: Failed password for invalid user r.r from 139.59.25.82 port 46410 ssh2
Oct  5 19:03:51 host sshd[10598]: Received disconnect from 139.59.25.82 port 46410:11: Bye Bye [preauth]
Oct  5 19:03:51 host sshd[10598]: Disconnected from invalid user r.r 139.59.25.82 port 46410 [preauth]
Oct  5 19:18:43 host sshd[11134]: User r.r from 139.59.25.82 not allowed because none of user's groups are listed in AllowGroups
Oct  5 19:18:43 host sshd[11134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.25.82  user=r.r
Oct  5 19:18:45 host sshd[11134]: Failed password for invalid user r.r from 139.59.25.82 port 45422 ssh2
Oct  5 19:18:46 ho........
-------------------------------
2020-10-06 22:09:45
37.46.150.211 attackspam
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-10-06T11:57:05Z and 2020-10-06T12:00:22Z
2020-10-06 22:10:15
218.92.0.165 attack
2020-10-06T15:51:29.366526vps773228.ovh.net sshd[20423]: Failed password for root from 218.92.0.165 port 37023 ssh2
2020-10-06T15:51:32.341282vps773228.ovh.net sshd[20423]: Failed password for root from 218.92.0.165 port 37023 ssh2
2020-10-06T15:51:36.063137vps773228.ovh.net sshd[20423]: Failed password for root from 218.92.0.165 port 37023 ssh2
2020-10-06T15:51:39.666108vps773228.ovh.net sshd[20423]: Failed password for root from 218.92.0.165 port 37023 ssh2
2020-10-06T15:51:43.010629vps773228.ovh.net sshd[20423]: Failed password for root from 218.92.0.165 port 37023 ssh2
...
2020-10-06 21:56:06
45.154.197.10 attack
Lines containing failures of 45.154.197.10
Oct  5 07:37:37 shared05 sshd[15535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.154.197.10  user=r.r
Oct  5 07:37:40 shared05 sshd[15535]: Failed password for r.r from 45.154.197.10 port 41488 ssh2
Oct  5 07:37:40 shared05 sshd[15535]: Received disconnect from 45.154.197.10 port 41488:11: Bye Bye [preauth]
Oct  5 07:37:40 shared05 sshd[15535]: Disconnected from authenticating user r.r 45.154.197.10 port 41488 [preauth]
Oct  5 07:44:21 shared05 sshd[17782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.154.197.10  user=r.r
Oct  5 07:44:23 shared05 sshd[17782]: Failed password for r.r from 45.154.197.10 port 46954 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.154.197.10
2020-10-06 22:16:04
106.12.208.175 attackspam
"Remote Command Execution: Direct Unix Command Execution - Matched Data: echo found within ARGS:b4dboy: echo \x22xbshell\x22;"
2020-10-06 22:03:58
219.150.93.157 attack
Oct  5 22:57:32 shivevps sshd[6409]: Failed password for root from 219.150.93.157 port 39404 ssh2
Oct  5 23:02:03 shivevps sshd[6962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.150.93.157  user=root
Oct  5 23:02:05 shivevps sshd[6962]: Failed password for root from 219.150.93.157 port 42118 ssh2
...
2020-10-06 22:13:11
112.85.42.173 attack
Oct  6 16:01:10 vpn01 sshd[29639]: Failed password for root from 112.85.42.173 port 30560 ssh2
Oct  6 16:01:22 vpn01 sshd[29639]: Failed password for root from 112.85.42.173 port 30560 ssh2
Oct  6 16:01:22 vpn01 sshd[29639]: error: maximum authentication attempts exceeded for root from 112.85.42.173 port 30560 ssh2 [preauth]
...
2020-10-06 22:15:51
138.121.170.194 attack
2020-10-06T01:02[Censored Hostname] sshd[19018]: Failed password for root from 138.121.170.194 port 57792 ssh2
2020-10-06T01:06[Censored Hostname] sshd[19857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.121.170.194.dnsgigas.es  user=root
2020-10-06T01:06[Censored Hostname] sshd[19857]: Failed password for root from 138.121.170.194 port 60174 ssh2[...]
2020-10-06 22:13:39
203.126.142.98 attackspam
Web-based SQL injection attempt
2020-10-06 22:14:08
177.101.124.34 attack
Oct  6 04:17:37 xeon sshd[21293]: Failed password for root from 177.101.124.34 port 8579 ssh2
2020-10-06 22:02:51
195.29.102.37 attackspambots
Oct  6 09:21:50 mx sshd[17587]: Failed password for root from 195.29.102.37 port 49769 ssh2
2020-10-06 21:37:28
222.107.156.227 attack
Oct  6 09:28:52 PorscheCustomer sshd[16186]: Failed password for root from 222.107.156.227 port 61003 ssh2
Oct  6 09:31:42 PorscheCustomer sshd[16225]: Failed password for root from 222.107.156.227 port 24271 ssh2
...
2020-10-06 22:05:25
101.231.146.34 attack
Failed password for root from 101.231.146.34 port 44974 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.146.34  user=root
Failed password for root from 101.231.146.34 port 46416 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.146.34  user=root
Failed password for root from 101.231.146.34 port 47864 ssh2
2020-10-06 21:55:38
79.44.15.157 attack
Oct  6 09:50:26 game-panel sshd[473]: Failed password for root from 79.44.15.157 port 38206 ssh2
Oct  6 09:54:37 game-panel sshd[616]: Failed password for root from 79.44.15.157 port 45888 ssh2
2020-10-06 22:02:04
111.19.129.38 attack
RDPBrutePLe24
2020-10-06 21:55:17

最近上报的IP列表

58.58.27.201 52.15.89.240 240.221.134.216 85.6.234.48
73.234.114.26 49.49.242.234 123.245.20.137 254.77.126.232
185.217.194.192 132.20.27.121 181.139.75.200 199.89.163.1
47.55.128.98 16.73.111.43 208.93.226.229 252.190.75.177
154.194.109.161 75.164.56.146 221.30.42.208 172.70.195.11