必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): Triple T Internet PCL

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackbotsspam
Sat, 20 Jul 2019 21:55:27 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 10:28:54
相同子网IP讨论:
IP 类型 评论内容 时间
49.49.245.225 attackspambots
WordPress brute force
2020-08-25 05:37:17
49.49.245.40 attack
Unauthorized connection attempt from IP address 49.49.245.40 on Port 445(SMB)
2020-08-22 03:34:33
49.49.245.93 attackspambots
Unauthorised access (May 24) SRC=49.49.245.93 LEN=52 TTL=114 ID=15200 DF TCP DPT=445 WINDOW=8192 SYN
2020-05-25 04:29:23
49.49.245.84 attackspam
Invalid user admin from 49.49.245.84 port 51591
2020-05-23 12:31:17
49.49.245.78 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-18 16:33:34
49.49.245.103 attackbots
Lines containing failures of 49.49.245.103
Jan 17 13:48:06 shared05 sshd[8729]: Invalid user ubnt from 49.49.245.103 port 30995
Jan 17 13:48:07 shared05 sshd[8729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.49.245.103
Jan 17 13:48:08 shared05 sshd[8729]: Failed password for invalid user ubnt from 49.49.245.103 port 30995 ssh2
Jan 17 13:48:09 shared05 sshd[8729]: Connection closed by invalid user ubnt 49.49.245.103 port 30995 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.49.245.103
2020-01-17 22:02:11
49.49.245.71 attackbots
Unauthorized connection attempt detected from IP address 49.49.245.71 to port 445
2020-01-02 20:50:45
49.49.245.155 attack
Dec  1 12:05:11 nginx sshd[74095]: Invalid user admin from 49.49.245.155
Dec  1 12:05:11 nginx sshd[74095]: Connection closed by 49.49.245.155 port 59906 [preauth]
2019-12-01 20:56:41
49.49.245.132 attackbots
445/tcp
[2019-11-06]1pkt
2019-11-06 14:19:45
49.49.245.238 attackbotsspam
php WP PHPmyadamin ABUSE blocked for 12h
2019-07-02 12:41:22
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.49.245.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56938
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.49.245.5.			IN	A

;; AUTHORITY SECTION:
.			1773	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072001 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jul 21 10:28:42 CST 2019
;; MSG SIZE  rcvd: 115
HOST信息:
5.245.49.49.in-addr.arpa domain name pointer mx-ll-49.49.245-5.dynamic.3bb.in.th.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
5.245.49.49.in-addr.arpa	name = mx-ll-49.49.245-5.dynamic.3bb.in.th.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
82.147.202.146 attackspambots
Icarus honeypot on github
2020-09-13 16:59:06
103.237.57.250 attackspambots
Sep 12 18:43:45 mailman postfix/smtpd[3571]: warning: unknown[103.237.57.250]: SASL PLAIN authentication failed: authentication failure
2020-09-13 17:21:33
181.114.208.50 attackbotsspam
Sep 12 18:01:37 mail.srvfarm.net postfix/smtpd[531353]: warning: unknown[181.114.208.50]: SASL PLAIN authentication failed: 
Sep 12 18:01:38 mail.srvfarm.net postfix/smtpd[531353]: lost connection after AUTH from unknown[181.114.208.50]
Sep 12 18:03:57 mail.srvfarm.net postfix/smtps/smtpd[530836]: warning: unknown[181.114.208.50]: SASL PLAIN authentication failed: 
Sep 12 18:03:58 mail.srvfarm.net postfix/smtps/smtpd[530836]: lost connection after AUTH from unknown[181.114.208.50]
Sep 12 18:07:48 mail.srvfarm.net postfix/smtps/smtpd[530836]: warning: unknown[181.114.208.50]: SASL PLAIN authentication failed:
2020-09-13 17:31:35
196.0.111.26 attackspambots
failed_logins
2020-09-13 17:26:39
31.184.177.6 attackspambots
IP blocked
2020-09-13 17:15:03
159.65.33.243 attackbotsspam
firewall-block, port(s): 27782/tcp
2020-09-13 16:54:00
140.238.253.177 attackspambots
(sshd) Failed SSH login from 140.238.253.177 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 13 04:20:03 optimus sshd[12319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.238.253.177  user=root
Sep 13 04:20:05 optimus sshd[12319]: Failed password for root from 140.238.253.177 port 4749 ssh2
Sep 13 04:27:02 optimus sshd[14598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.238.253.177  user=root
Sep 13 04:27:03 optimus sshd[14598]: Failed password for root from 140.238.253.177 port 35805 ssh2
Sep 13 04:31:39 optimus sshd[16277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.238.253.177  user=root
2020-09-13 17:17:24
191.53.238.69 attack
Sep 12 17:57:08 mail.srvfarm.net postfix/smtpd[532238]: warning: unknown[191.53.238.69]: SASL PLAIN authentication failed: 
Sep 12 17:57:09 mail.srvfarm.net postfix/smtpd[532238]: lost connection after AUTH from unknown[191.53.238.69]
Sep 12 18:01:48 mail.srvfarm.net postfix/smtps/smtpd[531487]: warning: unknown[191.53.238.69]: SASL PLAIN authentication failed: 
Sep 12 18:01:49 mail.srvfarm.net postfix/smtps/smtpd[531487]: lost connection after AUTH from unknown[191.53.238.69]
Sep 12 18:07:00 mail.srvfarm.net postfix/smtpd[533998]: warning: unknown[191.53.238.69]: SASL PLAIN authentication failed:
2020-09-13 17:28:05
5.188.206.194 attackbots
Sep 13 11:02:10 mail.srvfarm.net postfix/smtpd[1049989]: warning: unknown[5.188.206.194]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 13 11:02:10 mail.srvfarm.net postfix/smtpd[1049989]: lost connection after AUTH from unknown[5.188.206.194]
Sep 13 11:02:19 mail.srvfarm.net postfix/smtpd[1049941]: lost connection after AUTH from unknown[5.188.206.194]
Sep 13 11:02:29 mail.srvfarm.net postfix/smtpd[1063718]: warning: unknown[5.188.206.194]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 13 11:02:30 mail.srvfarm.net postfix/smtpd[1063718]: lost connection after AUTH from unknown[5.188.206.194]
2020-09-13 17:10:06
41.225.24.18 attack
1599929574 - 09/12/2020 18:52:54 Host: 41.225.24.18/41.225.24.18 Port: 445 TCP Blocked
2020-09-13 17:00:45
191.53.52.20 attackbots
Sep 13 03:26:00 mail.srvfarm.net postfix/smtpd[891607]: warning: unknown[191.53.52.20]: SASL PLAIN authentication failed: 
Sep 13 03:26:01 mail.srvfarm.net postfix/smtpd[891607]: lost connection after AUTH from unknown[191.53.52.20]
Sep 13 03:26:26 mail.srvfarm.net postfix/smtps/smtpd[893602]: warning: unknown[191.53.52.20]: SASL PLAIN authentication failed: 
Sep 13 03:26:26 mail.srvfarm.net postfix/smtps/smtpd[893602]: lost connection after AUTH from unknown[191.53.52.20]
Sep 13 03:30:20 mail.srvfarm.net postfix/smtpd[891609]: warning: unknown[191.53.52.20]: SASL PLAIN authentication failed:
2020-09-13 17:28:34
162.142.125.36 attackbotsspam
Unauthorized connection attempt from IP address 162.142.125.36 on Port 143(IMAP)
2020-09-13 17:16:53
177.190.76.254 attackbotsspam
Sep 12 18:48:14 mail.srvfarm.net postfix/smtps/smtpd[549459]: warning: unknown[177.190.76.254]: SASL PLAIN authentication failed: 
Sep 12 18:48:15 mail.srvfarm.net postfix/smtps/smtpd[549459]: lost connection after AUTH from unknown[177.190.76.254]
Sep 12 18:48:49 mail.srvfarm.net postfix/smtps/smtpd[552144]: warning: unknown[177.190.76.254]: SASL PLAIN authentication failed: 
Sep 12 18:48:50 mail.srvfarm.net postfix/smtps/smtpd[552144]: lost connection after AUTH from unknown[177.190.76.254]
Sep 12 18:50:44 mail.srvfarm.net postfix/smtps/smtpd[551662]: warning: unknown[177.190.76.254]: SASL PLAIN authentication failed:
2020-09-13 17:20:43
188.92.213.115 attack
Sep 13 09:29:03 mail.srvfarm.net postfix/smtps/smtpd[1007950]: warning: unknown[188.92.213.115]: SASL PLAIN authentication failed: 
Sep 13 09:29:03 mail.srvfarm.net postfix/smtps/smtpd[1007950]: lost connection after AUTH from unknown[188.92.213.115]
Sep 13 09:31:18 mail.srvfarm.net postfix/smtps/smtpd[1023469]: warning: unknown[188.92.213.115]: SASL PLAIN authentication failed: 
Sep 13 09:31:18 mail.srvfarm.net postfix/smtps/smtpd[1023469]: lost connection after AUTH from unknown[188.92.213.115]
Sep 13 09:38:29 mail.srvfarm.net postfix/smtpd[1022145]: warning: unknown[188.92.213.115]: SASL PLAIN authentication failed:
2020-09-13 17:20:15
66.70.160.187 attackbotsspam
66.70.160.187 - - [13/Sep/2020:08:50:33 +0200] "GET /wp-login.php HTTP/1.1" 200 8558 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
66.70.160.187 - - [13/Sep/2020:08:50:35 +0200] "POST /wp-login.php HTTP/1.1" 200 8809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
66.70.160.187 - - [13/Sep/2020:08:50:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-13 17:24:30

最近上报的IP列表

218.161.113.50 125.167.130.117 124.123.75.41 5.54.91.195
200.96.78.102 180.251.236.169 80.38.218.134 59.91.193.242
37.111.130.189 178.221.234.169 176.100.191.79 119.252.170.138
113.22.176.82 190.79.97.227 154.126.166.85 125.163.119.34
113.161.167.11 39.45.235.140 221.162.255.86 209.163.163.80