49.149.111.148

Basic Info

City: unknown

Region: unknown

Country: Philippines

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
49.149.111.254	attack	Unauthorized connection attempt from IP address 49.149.111.254 on Port 445(SMB)	2020-08-18 02:45:27
49.149.111.129	attackspam	Unauthorized connection attempt from IP address 49.149.111.129 on Port 445(SMB)	2020-03-05 19:43:08
49.149.111.243	attackbotsspam	1582865433 - 02/28/2020 05:50:33 Host: 49.149.111.243/49.149.111.243 Port: 445 TCP Blocked	2020-02-28 19:15:03
49.149.111.65	attack	Unauthorized connection attempt from IP address 49.149.111.65 on Port 445(SMB)	2020-01-04 03:06:16
49.149.111.131	attackbots	1576766287 - 12/19/2019 15:38:07 Host: 49.149.111.131/49.149.111.131 Port: 445 TCP Blocked	2019-12-20 00:10:17
49.149.111.43	attack	Unauthorized connection attempt from IP address 49.149.111.43 on Port 445(SMB)	2019-12-01 04:11:38

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.149.111.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4553
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.149.111.148.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 08:46:35 CST 2022
;; MSG SIZE  rcvd: 107

Host info

148.111.149.49.in-addr.arpa domain name pointer dsl.49.149.111.148.pldt.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
148.111.149.49.in-addr.arpa	name = dsl.49.149.111.148.pldt.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
102.182.216.90	attackbotsspam	Unauthorized connection attempt from IP address 102.182.216.90 on Port 445(SMB)	2020-09-04 16:56:46
112.85.42.87	attackspam	Sep 4 09:01:11 ip-172-31-42-142 sshd\[19544\]: Failed password for root from 112.85.42.87 port 48024 ssh2\ Sep 4 09:02:14 ip-172-31-42-142 sshd\[19546\]: Failed password for root from 112.85.42.87 port 42458 ssh2\ Sep 4 09:03:59 ip-172-31-42-142 sshd\[19554\]: Failed password for root from 112.85.42.87 port 64280 ssh2\ Sep 4 09:04:01 ip-172-31-42-142 sshd\[19554\]: Failed password for root from 112.85.42.87 port 64280 ssh2\ Sep 4 09:04:03 ip-172-31-42-142 sshd\[19554\]: Failed password for root from 112.85.42.87 port 64280 ssh2\	2020-09-04 17:09:23
120.52.146.211	attackspam	Sep 4 10:15:36 server sshd[35975]: Failed password for invalid user developer from 120.52.146.211 port 60778 ssh2 Sep 4 10:19:56 server sshd[37901]: Failed password for invalid user tmy from 120.52.146.211 port 60520 ssh2 Sep 4 10:24:21 server sshd[40172]: Failed password for root from 120.52.146.211 port 60256 ssh2	2020-09-04 16:52:19
117.102.119.34	attackspambots	Unauthorized connection attempt from IP address 117.102.119.34 on Port 445(SMB)	2020-09-04 17:13:52
157.44.169.117	attack	Unauthorized connection attempt from IP address 157.44.169.117 on Port 445(SMB)	2020-09-04 17:05:51
182.111.246.77	attack	spam (f2b h2)	2020-09-04 16:50:30
90.170.249.175	attack	Sep 3 18:45:42 mellenthin postfix/smtpd[20478]: NOQUEUE: reject: RCPT from unknown[90.170.249.175]: 554 5.7.1 Service unavailable; Client host [90.170.249.175] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/90.170.249.175; from= to= proto=ESMTP helo=<[90.170.249.175]>	2020-09-04 17:12:15
102.41.152.146	attack	Sep 2 06:04:58 h2022099 sshd[29665]: reveeclipse mapping checking getaddrinfo for host-102.41.152.146.tedata.net [102.41.152.146] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 2 06:04:58 h2022099 sshd[29665]: Invalid user odoo from 102.41.152.146 Sep 2 06:04:58 h2022099 sshd[29665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.41.152.146 Sep 2 06:05:00 h2022099 sshd[29665]: Failed password for invalid user odoo from 102.41.152.146 port 51632 ssh2 Sep 2 06:05:00 h2022099 sshd[29665]: Received disconnect from 102.41.152.146: 11: Bye Bye [preauth] Sep 2 06:09:08 h2022099 sshd[30239]: reveeclipse mapping checking getaddrinfo for host-102.41.152.146.tedata.net [102.41.152.146] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 2 06:09:08 h2022099 sshd[30239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.41.152.146 user=r.r Sep 2 06:09:10 h2022099 sshd[30239]: Failed password for r.r from 1........ -------------------------------	2020-09-04 17:03:22
179.106.2.29	attackspambots	Automatic report - Banned IP Access	2020-09-04 17:07:55
110.36.238.146	attackspambots	Attempted connection to port 445.	2020-09-04 16:45:49
61.177.172.168	attack	$f2bV_matches	2020-09-04 16:49:13
157.48.142.238	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-04 17:05:26
82.62.153.15	attackbots	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-04T01:24:11Z and 2020-09-04T01:31:11Z	2020-09-04 17:03:55
183.82.114.15	attackbots	Unauthorized connection attempt from IP address 183.82.114.15 on Port 445(SMB)	2020-09-04 17:10:10
49.88.112.76	attack	Sep 4 15:22:03 webhost01 sshd[529]: Failed password for root from 49.88.112.76 port 10426 ssh2 ...	2020-09-04 16:38:33

Recently Reported IPs

185.59.244.61	196.70.151.35	182.180.53.186	151.238.14.142
112.49.184.61	143.244.137.219	112.216.62.86	43.241.194.5
172.255.125.167	117.95.202.142	27.2.241.160	106.55.41.98
117.207.236.178	89.191.229.31	117.169.232.105	182.56.243.66
160.177.6.114	104.233.253.97	178.219.168.173	109.194.250.210