Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Lucena

Region: Calabarzon

Country: Philippines

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
49.145.68.83 attackspambots
php WP PHPmyadamin ABUSE blocked for 12h
2020-08-02 15:13:16
49.145.65.243 attackspam
Unauthorized connection attempt from IP address 49.145.65.243 on Port 445(SMB)
2020-07-10 16:27:24
49.145.65.27 attackbots
Unauthorized connection attempt from IP address 49.145.65.27 on Port 445(SMB)
2020-01-31 21:09:02
49.145.6.116 attackbots
Attempt to attack host OS, exploiting network vulnerabilities, on 25-01-2020 04:55:14.
2020-01-25 14:36:27
49.145.64.197 attackbots
1579149913 - 01/16/2020 05:45:13 Host: 49.145.64.197/49.145.64.197 Port: 445 TCP Blocked
2020-01-16 19:50:08
49.145.60.96 attackbots
Unauthorized connection attempt from IP address 49.145.60.96 on Port 445(SMB)
2020-01-04 02:53:31
49.145.64.88 attack
1576996129 - 12/22/2019 07:28:49 Host: 49.145.64.88/49.145.64.88 Port: 445 TCP Blocked
2019-12-22 16:32:15
49.145.62.156 attackspam
Unauthorized connection attempt detected from IP address 49.145.62.156 to port 445
2019-12-11 21:31:04
49.145.6.19 attackbotsspam
Sun, 21 Jul 2019 07:35:19 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-22 01:21:18
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.145.6.96
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47448
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.145.6.96.			IN	A

;; AUTHORITY SECTION:
.			493	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023071600 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 16 23:57:53 CST 2023
;; MSG SIZE  rcvd: 104
Host info
96.6.145.49.in-addr.arpa domain name pointer dsl.49.145.6.96.pldt.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
96.6.145.49.in-addr.arpa	name = dsl.49.145.6.96.pldt.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
46.38.144.17 attack
Oct 15 06:03:07 vmanager6029 postfix/smtpd\[30352\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 15 06:04:23 vmanager6029 postfix/smtpd\[30391\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-10-15 12:10:58
27.116.60.106 attackbotsspam
Scanning and Vuln Attempts
2019-10-15 12:11:11
185.143.221.186 attackspam
10/15/2019-00:16:40.331826 185.143.221.186 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-10-15 12:23:43
185.90.117.4 attackbotsspam
10/14/2019-23:54:33.311561 185.90.117.4 Protocol: 6 ET SCAN Potential SSH Scan
2019-10-15 12:19:56
122.1.223.91 attackspambots
Bot ignores robot.txt restrictions
2019-10-15 12:12:43
170.106.7.216 attack
F2B jail: sshd. Time: 2019-10-15 05:54:49, Reported by: VKReport
2019-10-15 12:10:00
31.171.1.53 attackspambots
[munged]::443 31.171.1.53 - - [15/Oct/2019:01:22:32 +0200] "POST /[munged]: HTTP/1.1" 200 8332 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 31.171.1.53 - - [15/Oct/2019:01:22:35 +0200] "POST /[munged]: HTTP/1.1" 200 4484 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 31.171.1.53 - - [15/Oct/2019:01:22:39 +0200] "POST /[munged]: HTTP/1.1" 200 4484 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 31.171.1.53 - - [15/Oct/2019:01:22:41 +0200] "POST /[munged]: HTTP/1.1" 200 4484 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 31.171.1.53 - - [15/Oct/2019:01:22:43 +0200] "POST /[munged]: HTTP/1.1" 200 4484 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 31.171.1.53 - - [15/Oct/2019:01:22:45 +0200] "POST
2019-10-15 07:53:41
59.25.197.162 attackbotsspam
2019-10-15T03:54:30.130089abusebot-5.cloudsearch.cf sshd\[31839\]: Invalid user hp from 59.25.197.162 port 46778
2019-10-15 12:22:51
211.114.176.34 attackbotsspam
Oct 15 05:23:18 icinga sshd[33348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.114.176.34 
Oct 15 05:23:20 icinga sshd[33348]: Failed password for invalid user hp from 211.114.176.34 port 60574 ssh2
Oct 15 05:59:24 icinga sshd[56943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.114.176.34 
...
2019-10-15 12:32:54
157.230.216.203 attack
Fail2Ban Ban Triggered
2019-10-15 12:17:18
158.69.25.36 attack
Oct 15 06:22:29 MK-Soft-Root2 sshd[13904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.25.36 
Oct 15 06:22:32 MK-Soft-Root2 sshd[13904]: Failed password for invalid user ftpuser from 158.69.25.36 port 57008 ssh2
...
2019-10-15 12:32:22
185.176.27.246 attackbots
10/15/2019-00:13:11.553880 185.176.27.246 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-10-15 12:21:28
182.219.172.224 attackspambots
Oct 15 05:41:29 server sshd[41809]: Failed password for invalid user dl from 182.219.172.224 port 38888 ssh2
Oct 15 05:49:41 server sshd[43898]: Failed password for invalid user admins from 182.219.172.224 port 42252 ssh2
Oct 15 05:54:14 server sshd[44902]: Failed password for invalid user ctakes from 182.219.172.224 port 53938 ssh2
2019-10-15 12:31:25
85.12.245.153 attack
Unauthorized SMTP/IMAP/POP3 connection attempt
2019-10-15 07:54:52
79.159.182.244 attackspambots
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/79.159.182.244/ 
 ES - 1H : (21)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : ES 
 NAME ASN : ASN3352 
 
 IP : 79.159.182.244 
 
 CIDR : 79.159.0.0/16 
 
 PREFIX COUNT : 662 
 
 UNIQUE IP COUNT : 10540800 
 
 
 WYKRYTE ATAKI Z ASN3352 :  
  1H - 1 
  3H - 1 
  6H - 4 
 12H - 4 
 24H - 7 
 
 DateTime : 2019-10-15 05:54:38 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-15 12:13:48

Recently Reported IPs

49.145.5.96 49.145.7.96 49.145.8.96 49.145.9.96
174.138.24.218 124.6.181.36 139.59.60.138 68.183.75.21
124.1.181.36 124.7.181.36 124.6.1.36 1.6.181.36
124.6.181.1 49.150.90.0 49.150.1.0 49.150.2.0
49.150.5.0 49.150.6.0 49.150.7.0 49.150.8.0