Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
109.239.49.168 attackspambots
suspicious action Thu, 12 Mar 2020 09:31:07 -0300
2020-03-12 22:15:11
109.239.49.168 attack
detected by Fail2Ban
2019-07-29 11:53:17
109.239.49.168 attack
Jul 28 05:10:41 [munged] sshd[20360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.239.49.168  user=root
Jul 28 05:10:43 [munged] sshd[20360]: Failed password for root from 109.239.49.168 port 58842 ssh2
2019-07-28 19:20:14
109.239.49.168 attack
Automatic report - Banned IP Access
2019-07-26 06:02:39
109.239.49.168 attack
Jul 25 01:04:11 xtremcommunity sshd\[30271\]: Invalid user sk from 109.239.49.168 port 42286
Jul 25 01:04:11 xtremcommunity sshd\[30271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.239.49.168
Jul 25 01:04:13 xtremcommunity sshd\[30271\]: Failed password for invalid user sk from 109.239.49.168 port 42286 ssh2
Jul 25 01:09:02 xtremcommunity sshd\[30311\]: Invalid user testftp from 109.239.49.168 port 60782
Jul 25 01:09:02 xtremcommunity sshd\[30311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.239.49.168
...
2019-07-25 13:11:19
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.239.49.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61284
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;109.239.49.42.			IN	A

;; AUTHORITY SECTION:
.			483	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 20:05:10 CST 2022
;; MSG SIZE  rcvd: 106
Host info
42.49.239.109.in-addr.arpa domain name pointer www.dkgev.de.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
42.49.239.109.in-addr.arpa	name = www.dkgev.de.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
125.124.38.96 attack
Dec  3 20:58:21 gw1 sshd[31370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.38.96
Dec  3 20:58:22 gw1 sshd[31370]: Failed password for invalid user miura from 125.124.38.96 port 34944 ssh2
...
2019-12-04 01:01:36
222.186.175.167 attack
Triggered by Fail2Ban at Ares web server
2019-12-04 01:07:01
185.38.3.138 attackspam
Dec  3 15:59:45 pornomens sshd\[12935\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.38.3.138  user=root
Dec  3 15:59:47 pornomens sshd\[12935\]: Failed password for root from 185.38.3.138 port 44254 ssh2
Dec  3 16:09:13 pornomens sshd\[13051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.38.3.138  user=root
...
2019-12-04 01:00:01
207.236.200.70 attackspambots
Dec  3 13:17:54 ws12vmsma01 sshd[64729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.236.200.70 
Dec  3 13:17:54 ws12vmsma01 sshd[64729]: Invalid user guaspari from 207.236.200.70
Dec  3 13:17:56 ws12vmsma01 sshd[64729]: Failed password for invalid user guaspari from 207.236.200.70 port 35940 ssh2
...
2019-12-04 01:23:17
81.22.45.253 attack
12/03/2019-17:50:40.916548 81.22.45.253 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-12-04 01:03:57
193.56.28.233 attackspam
proto=tcp  .  spt=51168  .  dpt=25  .     (Found on   Alienvault Dec 03)     (103)
2019-12-04 00:59:00
148.102.120.215 attackbots
phpMyAdmin connection attempt
2019-12-04 01:20:17
132.248.204.81 attackbotsspam
Dec  3 22:35:42 vibhu-HP-Z238-Microtower-Workstation sshd\[7490\]: Invalid user guitar from 132.248.204.81
Dec  3 22:35:42 vibhu-HP-Z238-Microtower-Workstation sshd\[7490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.248.204.81
Dec  3 22:35:44 vibhu-HP-Z238-Microtower-Workstation sshd\[7490\]: Failed password for invalid user guitar from 132.248.204.81 port 52254 ssh2
Dec  3 22:42:51 vibhu-HP-Z238-Microtower-Workstation sshd\[8235\]: Invalid user jamaica from 132.248.204.81
Dec  3 22:42:51 vibhu-HP-Z238-Microtower-Workstation sshd\[8235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.248.204.81
...
2019-12-04 01:30:26
103.3.46.97 attackspam
xmlrpc attack
2019-12-04 00:53:47
106.12.176.188 attackbots
Dec  3 14:41:54 raspberrypi sshd\[12440\]: Failed password for root from 106.12.176.188 port 46662 ssh2Dec  3 14:59:32 raspberrypi sshd\[12646\]: Failed password for root from 106.12.176.188 port 44844 ssh2Dec  3 15:07:00 raspberrypi sshd\[12710\]: Invalid user rpm from 106.12.176.188
...
2019-12-04 01:29:35
125.124.70.22 attackspam
Dec  3 18:16:07 server sshd\[4517\]: Invalid user jeffy from 125.124.70.22
Dec  3 18:16:07 server sshd\[4517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.70.22 
Dec  3 18:16:09 server sshd\[4517\]: Failed password for invalid user jeffy from 125.124.70.22 port 37232 ssh2
Dec  3 18:24:54 server sshd\[6521\]: Invalid user rpm from 125.124.70.22
Dec  3 18:24:54 server sshd\[6521\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.70.22 
...
2019-12-04 01:29:22
183.107.62.150 attackspam
Dec  3 18:24:38 server sshd\[6476\]: Invalid user ian from 183.107.62.150
Dec  3 18:24:38 server sshd\[6476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.107.62.150 
Dec  3 18:24:40 server sshd\[6476\]: Failed password for invalid user ian from 183.107.62.150 port 48138 ssh2
Dec  3 18:36:58 server sshd\[10130\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.107.62.150  user=root
Dec  3 18:37:01 server sshd\[10130\]: Failed password for root from 183.107.62.150 port 46250 ssh2
...
2019-12-04 01:28:17
40.78.133.79 attack
Repeated brute force against a port
2019-12-04 01:18:22
62.234.66.50 attackbots
Dec  3 17:58:11 vps691689 sshd[11742]: Failed password for root from 62.234.66.50 port 45779 ssh2
Dec  3 18:04:21 vps691689 sshd[11957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.66.50
...
2019-12-04 01:14:36
58.213.198.77 attackspambots
Dec  3 17:39:09 SilenceServices sshd[23302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.198.77
Dec  3 17:39:11 SilenceServices sshd[23302]: Failed password for invalid user triol from 58.213.198.77 port 36188 ssh2
Dec  3 17:48:00 SilenceServices sshd[25746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.198.77
2019-12-04 00:50:44

Recently Reported IPs

109.239.48.68 109.239.49.225 213.113.77.163 109.239.61.92
109.239.58.104 109.239.61.197 109.242.167.156 109.239.63.167
109.244.130.99 109.239.58.13 109.24.52.81 109.244.193.206
104.207.228.135 109.248.15.6 109.245.191.188 109.248.175.65
109.248.237.36 109.248.237.123 109.248.237.92 109.248.6.71