49.49.244.52 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): Triple T Internet PCL

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	REQUESTED PAGE: /manager/html	2019-09-14 07:11:42

相同子网IP讨论:

IP	类型	评论内容	时间
49.49.244.64	attackspambots	1591388878 - 06/05/2020 22:27:58 Host: 49.49.244.64/49.49.244.64 Port: 445 TCP Blocked	2020-06-06 05:27:04
49.49.244.132	attackspam	Lines containing failures of 49.49.244.132 May 21 13:56:31 MAKserver05 sshd[9300]: Did not receive identification string from 49.49.244.132 port 62422 May 21 13:56:36 MAKserver05 sshd[9303]: Invalid user tech from 49.49.244.132 port 43174 May 21 13:56:37 MAKserver05 sshd[9303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.49.244.132 May 21 13:56:39 MAKserver05 sshd[9303]: Failed password for invalid user tech from 49.49.244.132 port 43174 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.49.244.132	2020-05-21 21:09:27
49.49.244.228	attackspam	Honeypot attack, port: 445, PTR: mx-ll-49.49.244-228.dynamic.3bb.co.th.	2020-02-11 08:48:14

类型

评论内容

时间

49.49.244.64

attackspambots

1591388878 - 06/05/2020 22:27:58 Host: 49.49.244.64/49.49.244.64 Port: 445 TCP Blocked

2020-06-06 05:27:04

49.49.244.132

attackspam

Lines containing failures of 49.49.244.132
May 21 13:56:31 MAKserver05 sshd[9300]: Did not receive identification string from 49.49.244.132 port 62422
May 21 13:56:36 MAKserver05 sshd[9303]: Invalid user tech from 49.49.244.132 port 43174
May 21 13:56:37 MAKserver05 sshd[9303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.49.244.132 
May 21 13:56:39 MAKserver05 sshd[9303]: Failed password for invalid user tech from 49.49.244.132 port 43174 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.49.244.132

2020-05-21 21:09:27

49.49.244.228

attackspam

Honeypot attack, port: 445, PTR: mx-ll-49.49.244-228.dynamic.3bb.co.th.

2020-02-11 08:48:14

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.49.244.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60806
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.49.244.52.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091302 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Sep 14 07:11:36 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

52.244.49.49.in-addr.arpa domain name pointer mx-ll-49.49.244-52.dynamic.3bb.co.th.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
52.244.49.49.in-addr.arpa	name = mx-ll-49.49.244-52.dynamic.3bb.co.th.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
193.242.212.35	attack	" "	2019-11-10 20:20:07
125.212.212.226	attackspam	Nov 10 12:51:03 xeon sshd[35527]: Failed password for root from 125.212.212.226 port 52618 ssh2	2019-11-10 20:00:52
49.232.42.135	attackspam	Nov 10 08:52:13 www5 sshd\[4516\]: Invalid user admin@huawei from 49.232.42.135 Nov 10 08:52:13 www5 sshd\[4516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.42.135 Nov 10 08:52:14 www5 sshd\[4516\]: Failed password for invalid user admin@huawei from 49.232.42.135 port 47470 ssh2 ...	2019-11-10 20:18:29
41.72.192.190	attackbots	Unauthorised access (Nov 10) SRC=41.72.192.190 LEN=52 TTL=117 ID=22411 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Nov 10) SRC=41.72.192.190 LEN=52 TTL=117 ID=11010 DF TCP DPT=445 WINDOW=8192 SYN	2019-11-10 20:09:40
92.223.208.242	attack	Port Scan: TCP/81	2019-11-10 20:26:54
165.227.41.202	attackspambots	Nov 10 09:12:02 legacy sshd[16323]: Failed password for root from 165.227.41.202 port 47000 ssh2 Nov 10 09:15:20 legacy sshd[16465]: Failed password for root from 165.227.41.202 port 55516 ssh2 ...	2019-11-10 19:54:48
103.107.94.2	attack	Unauthorized IMAP connection attempt	2019-11-10 20:19:43
167.114.55.84	attackspam	Nov 10 09:11:01 SilenceServices sshd[23814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.55.84 Nov 10 09:11:03 SilenceServices sshd[23814]: Failed password for invalid user adcuser from 167.114.55.84 port 56754 ssh2 Nov 10 09:14:51 SilenceServices sshd[24960]: Failed password for root from 167.114.55.84 port 38118 ssh2	2019-11-10 20:14:01
54.149.121.232	attackspam	11/10/2019-07:59:07.249201 54.149.121.232 Protocol: 6 SURICATA TLS invalid record/traffic	2019-11-10 19:57:50
218.92.0.133	attackspambots	Nov 10 10:33:55 pkdns2 sshd\[58564\]: Failed password for root from 218.92.0.133 port 30962 ssh2Nov 10 10:33:58 pkdns2 sshd\[58564\]: Failed password for root from 218.92.0.133 port 30962 ssh2Nov 10 10:34:00 pkdns2 sshd\[58564\]: Failed password for root from 218.92.0.133 port 30962 ssh2Nov 10 10:34:03 pkdns2 sshd\[58564\]: Failed password for root from 218.92.0.133 port 30962 ssh2Nov 10 10:34:06 pkdns2 sshd\[58564\]: Failed password for root from 218.92.0.133 port 30962 ssh2Nov 10 10:34:09 pkdns2 sshd\[58564\]: Failed password for root from 218.92.0.133 port 30962 ssh2 ...	2019-11-10 20:33:08
106.13.71.133	attack	Nov 10 09:07:55 vps01 sshd[15068]: Failed password for root from 106.13.71.133 port 33628 ssh2	2019-11-10 20:32:16
201.149.22.37	attackspambots	2019-11-10T01:20:46.218138ns547587 sshd\[29159\]: Invalid user crepin from 201.149.22.37 port 52424 2019-11-10T01:20:46.220034ns547587 sshd\[29159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.22.37 2019-11-10T01:20:47.696468ns547587 sshd\[29159\]: Failed password for invalid user crepin from 201.149.22.37 port 52424 ssh2 2019-11-10T01:24:08.942841ns547587 sshd\[2178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.22.37 user=root ...	2019-11-10 20:29:58
183.199.220.179	attackspam	Automatic report - Port Scan Attack	2019-11-10 20:07:01
81.28.100.109	attackspam	Nov 10 07:23:12 exim[7910]: 2019-11-10 07:23:12 1iTgcw-00023a-Dt H=boil.shrewdmhealth.com (boil.varzide.co) [81.28.100.109] F= rejected after DATA: This message scored 102.0 spam points.	2019-11-10 20:33:24
192.126.253.21	attackbotsspam	(From dave@gmbmarketing.com) Hi Does your business stand out online with GREAT Google reviews? "84% Of People Trust Online Reviews As Much As A Personal Recommendation" We provide custom 5 star Custom Google reviews for your business Just tell us what you want your reviews to say and we post them! Check out our examples and get in touch here http://rawcusmedia.com/googlereviews We have helped hundreds of business get a BIG advantage online with our reviews If you are already crushing your competiton with multiple great Google Reviews have a great day :)	2019-11-10 20:27:36

最近上报的IP列表

84.17.47.135	222.110.176.55	197.34.112.61	112.91.60.234
202.137.134.139	91.192.188.242	42.170.48.215	154.6.195.174
31.135.227.163	185.244.25.110	179.165.65.156	62.220.81.44
36.91.45.90	198.71.226.54	197.61.40.3	130.61.121.105
115.229.195.177	88.72.169.117	31.86.32.187	41.92.225.128