116.149.240.49

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.149.240.174	attackbotsspam	Unauthorized connection attempt detected from IP address 116.149.240.174 to port 23 [T]	2020-05-09 02:23:59
116.149.240.94	attackspambots	Unauthorized connection attempt detected from IP address 116.149.240.94 to port 23 [T]	2020-05-06 07:41:00
116.149.240.209	attackbots	Automatic report - Port Scan Attack	2020-04-06 02:06:45
116.149.240.54	attackspambots	Unauthorized connection attempt detected from IP address 116.149.240.54 to port 23 [T]	2020-03-24 20:13:54
116.149.240.153	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-03-11 07:29:43

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.149.240.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42370
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.149.240.49.			IN	A

;; AUTHORITY SECTION:
.			208	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 21:32:23 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 49.240.149.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 49.240.149.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.88.112.114	attack	Sep 8 07:20:06 vmd17057 sshd\[7868\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Sep 8 07:20:08 vmd17057 sshd\[7868\]: Failed password for root from 49.88.112.114 port 32912 ssh2 Sep 8 07:20:11 vmd17057 sshd\[7868\]: Failed password for root from 49.88.112.114 port 32912 ssh2 ...	2019-09-08 15:38:08
106.12.93.12	attackbots	Sep 7 23:50:04 MK-Soft-VM7 sshd\[14310\]: Invalid user minecraft from 106.12.93.12 port 38710 Sep 7 23:50:04 MK-Soft-VM7 sshd\[14310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.93.12 Sep 7 23:50:07 MK-Soft-VM7 sshd\[14310\]: Failed password for invalid user minecraft from 106.12.93.12 port 38710 ssh2 ...	2019-09-08 14:56:06
178.33.67.12	attackspambots	Sep 8 06:51:34 plex sshd[9364]: Invalid user minecraft from 178.33.67.12 port 44232	2019-09-08 15:35:09
188.212.103.115	attackbots	Sep 7 10:04:56 foo sshd[17693]: Did not receive identification string from 188.212.103.115 Sep 7 11:24:48 foo sshd[19077]: Did not receive identification string from 188.212.103.115 Sep 7 11:55:11 foo sshd[19544]: Did not receive identification string from 188.212.103.115 Sep 7 14:11:09 foo sshd[21888]: Did not receive identification string from 188.212.103.115 Sep 7 14:13:20 foo sshd[21926]: reveeclipse mapping checking getaddrinfo for s3-115.gazduirejocuri.ro [188.212.103.115] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 7 14:13:20 foo sshd[21926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.212.103.115 user=r.r Sep 7 14:13:23 foo sshd[21926]: Failed password for r.r from 188.212.103.115 port 58167 ssh2 Sep 7 14:13:23 foo sshd[21926]: Received disconnect from 188.212.103.115: 11: Bye Bye [preauth] Sep 7 14:16:39 foo sshd[21998]: reveeclipse mapping checking getaddrinfo for s3-115.gazduirejocuri.ro [188.212.103.115] ........ -------------------------------	2019-09-08 15:33:59
176.53.160.45	attack	Sep 7 23:54:54 xtremcommunity sshd\[67857\]: Invalid user 12 from 176.53.160.45 port 51430 Sep 7 23:54:54 xtremcommunity sshd\[67857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.53.160.45 Sep 7 23:54:56 xtremcommunity sshd\[67857\]: Failed password for invalid user 12 from 176.53.160.45 port 51430 ssh2 Sep 7 23:59:11 xtremcommunity sshd\[67982\]: Invalid user test123 from 176.53.160.45 port 39398 Sep 7 23:59:11 xtremcommunity sshd\[67982\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.53.160.45 ...	2019-09-08 15:22:37
185.33.114.5	attackbotsspam	Sep 7 23:41:06 smtp postfix/smtpd[28412]: NOQUEUE: reject: RCPT from unknown[185.33.114.5]: 554 5.7.1 Service unavailable; Client host [185.33.114.5] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?185.33.114.5; from= to= proto=ESMTP helo= ...	2019-09-08 15:24:25
79.137.77.131	attackbotsspam	Sep 8 06:59:21 tuotantolaitos sshd[30718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.77.131 Sep 8 06:59:23 tuotantolaitos sshd[30718]: Failed password for invalid user password from 79.137.77.131 port 39528 ssh2 ...	2019-09-08 15:05:26
192.227.252.17	attack	Sep 7 13:10:56 sachi sshd\[3216\]: Invalid user postgres from 192.227.252.17 Sep 7 13:10:56 sachi sshd\[3216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.17 Sep 7 13:10:59 sachi sshd\[3216\]: Failed password for invalid user postgres from 192.227.252.17 port 50634 ssh2 Sep 7 13:16:26 sachi sshd\[3695\]: Invalid user test from 192.227.252.17 Sep 7 13:16:26 sachi sshd\[3695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.17	2019-09-08 15:11:43
92.53.119.43	attackbots	Malicious phishing, ISP Timeweb Ltd; repetitive redirects; blacklists; aggregate spam volume up to 5/day Unsolicited bulk spam - dominol.club, Timeweb Ltd - 92.53.119.43 Spam link batel-dollar.ddnsking.com = 5.23.54.120 (previously 176.57.208.216) Timeweb Ltd - blacklisted – REPETITIVE BLACKLISTED IP - URLSCAN.IO REDIRECT LIST: - Effective URL: https://todayinsidernews.net = 192.241.177.202 DigitalOcean - www.circlestraight.com = 185.117.118.51, Creanova - mgsse.swiftlink.company = 107.174.17.90, 118.184.32.7 Shanghai Anchnet Network - ddnsking.com = 8.23.224.108, Vitalwerks Internet Solutions - code.jquery.com = 205.185.208.52 Highwinds Network Group, Inc. Sender domain domino.club = Timeweb Ltd 46.229.213.52, 46.229.212.250, 5.23.55.227, 162.255.119.8, 46.229.213.106, 46.229.213.65, 46.229.212.240, 46.229.213.130, 46.229.213.5, 46.229.212.228, 46.229.213.69, 46.229.213.118	2019-09-08 15:37:37
85.144.226.170	attack	Sep 7 23:41:13 dedicated sshd[30398]: Invalid user 1234567 from 85.144.226.170 port 54514	2019-09-08 15:17:35
206.189.58.251	attack	[portscan] tcp/22 [SSH] *(RWIN=65535)(09081006)	2019-09-08 15:47:02
45.55.47.128	attackbotsspam	Wordpress Admin Login attack	2019-09-08 15:19:21
196.29.228.113	attackspam	2019-09-07 20:02:04 H=(knet-196-29-228-113.elifegh.net) [196.29.228.113]:55797 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-07 20:02:05 H=(knet-196-29-228-113.elifegh.net) [196.29.228.113]:55797 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-07 20:02:05 H=(knet-196-29-228-113.elifegh.net) [196.29.228.113]:55797 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-09-08 15:09:17
27.0.141.4	attack	Sep 7 16:13:53 aiointranet sshd\[29427\]: Invalid user password123 from 27.0.141.4 Sep 7 16:13:53 aiointranet sshd\[29427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.0.141.4 Sep 7 16:13:54 aiointranet sshd\[29427\]: Failed password for invalid user password123 from 27.0.141.4 port 51484 ssh2 Sep 7 16:18:36 aiointranet sshd\[29846\]: Invalid user 14789630 from 27.0.141.4 Sep 7 16:18:36 aiointranet sshd\[29846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.0.141.4	2019-09-08 15:31:38
70.54.203.67	attackbots	Sep 8 06:46:46 taivassalofi sshd[48902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.54.203.67 Sep 8 06:46:48 taivassalofi sshd[48902]: Failed password for invalid user 1234 from 70.54.203.67 port 54427 ssh2 ...	2019-09-08 15:03:20

Recently Reported IPs

91.122.199.233	39.88.193.72	95.182.104.21	114.96.0.179
24.227.247.186	45.239.93.183	221.163.23.81	142.11.241.104
123.4.67.255	14.191.43.56	113.176.176.137	213.37.74.147
175.115.212.115	104.248.168.145	88.193.135.10	84.228.164.204
114.134.188.34	5.131.243.11	60.246.12.115	180.149.235.218