49.149.3.48 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Philippines

Internet Service Provider: DSL

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	49.149.3.48 - - [18/Oct/2019:07:42:41 -0400] "GET /?page=products&action=..%2f..%2f..%2fetc%2fpasswd%00&manufacturerID=61&productID=4701-RIM&linkID=16812 HTTP/1.1" 200 17532 "https://exitdevice.com/?page=products&action=..%2f..%2f..%2fetc%2fpasswd%00&manufacturerID=61&productID=4701-RIM&linkID=16812" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ...	2019-10-18 21:43:33

Type

Details

Datetime

attackspam

49.149.3.48 - - [18/Oct/2019:07:42:41 -0400] "GET /?page=products&action=..%2f..%2f..%2fetc%2fpasswd%00&manufacturerID=61&productID=4701-RIM&linkID=16812 HTTP/1.1" 200 17532 "https://exitdevice.com/?page=products&action=..%2f..%2f..%2fetc%2fpasswd%00&manufacturerID=61&productID=4701-RIM&linkID=16812" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0"
...

2019-10-18 21:43:33

Comments on same subnet:

IP	Type	Details	Datetime
49.149.3.205	attack	Unauthorized connection attempt from IP address 49.149.3.205 on Port 445(SMB)	2020-08-12 19:17:32
49.149.33.70	attackbots	Unauthorized connection attempt detected from IP address 49.149.33.70 to port 445 [T]	2020-08-10 19:47:20
49.149.39.236	attackspambots	Unauthorized connection attempt from IP address 49.149.39.236 on Port 445(SMB)	2019-11-05 02:06:14
49.149.30.104	attackbots	Unauthorized connection attempt from IP address 49.149.30.104 on Port 445(SMB)	2019-09-20 12:26:44
49.149.33.104	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-18 09:40:18,107 INFO [amun_request_handler] PortScan Detected on Port: 445 (49.149.33.104)	2019-07-18 20:14:39
49.149.35.57	attackbots	IP: 49.149.35.57 ASN: AS9299 Philippine Long Distance Telephone Company Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 28/06/2019 11:21:59 PM UTC	2019-06-29 09:43:31

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.149.3.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14863
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.149.3.48.			IN	A

;; AUTHORITY SECTION:
.			468	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101800 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 18 21:43:24 CST 2019
;; MSG SIZE  rcvd: 115

Host info

48.3.149.49.in-addr.arpa domain name pointer dsl.49.149.3.48.pldt.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
48.3.149.49.in-addr.arpa	name = dsl.49.149.3.48.pldt.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.68.122.147	attackspam	2020-06-10T21:25:22.087941shield sshd\[24561\]: Invalid user jimodeshalou from 51.68.122.147 port 35088 2020-06-10T21:25:22.091579shield sshd\[24561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vps-96baf7b1.vps.ovh.net 2020-06-10T21:25:24.229888shield sshd\[24561\]: Failed password for invalid user jimodeshalou from 51.68.122.147 port 35088 ssh2 2020-06-10T21:27:15.068018shield sshd\[25387\]: Invalid user 1 from 51.68.122.147 port 38728 2020-06-10T21:27:15.071884shield sshd\[25387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vps-96baf7b1.vps.ovh.net	2020-06-11 05:28:31
81.42.204.189	attackbots	2020-06-10T23:48:08.285858afi-git.jinr.ru sshd[30770]: Invalid user webadmin from 81.42.204.189 port 23858 2020-06-10T23:48:08.289028afi-git.jinr.ru sshd[30770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.red-81-42-204.staticip.rima-tde.net 2020-06-10T23:48:08.285858afi-git.jinr.ru sshd[30770]: Invalid user webadmin from 81.42.204.189 port 23858 2020-06-10T23:48:10.063966afi-git.jinr.ru sshd[30770]: Failed password for invalid user webadmin from 81.42.204.189 port 23858 ssh2 2020-06-10T23:51:18.205832afi-git.jinr.ru sshd[31894]: Invalid user I2b2workdata2 from 81.42.204.189 port 38281 ...	2020-06-11 05:41:44
141.98.81.207	attack	Jun 10 21:44:03 scw-6657dc sshd[9503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.207 Jun 10 21:44:03 scw-6657dc sshd[9503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.207 Jun 10 21:44:05 scw-6657dc sshd[9503]: Failed password for invalid user admin from 141.98.81.207 port 9975 ssh2 ...	2020-06-11 05:54:03
119.198.85.191	attackspam	Jun 11 02:23:31 itv-usvr-01 sshd[19815]: Invalid user admin from 119.198.85.191 Jun 11 02:23:31 itv-usvr-01 sshd[19815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.198.85.191 Jun 11 02:23:31 itv-usvr-01 sshd[19815]: Invalid user admin from 119.198.85.191 Jun 11 02:23:33 itv-usvr-01 sshd[19815]: Failed password for invalid user admin from 119.198.85.191 port 45340 ssh2 Jun 11 02:29:28 itv-usvr-01 sshd[20023]: Invalid user admin from 119.198.85.191	2020-06-11 05:39:34
168.62.174.233	attackspambots	Jun 10 23:22:35 mail sshd[6069]: Failed password for invalid user vps from 168.62.174.233 port 49974 ssh2 Jun 10 23:34:28 mail sshd[7660]: Failed password for root from 168.62.174.233 port 58208 ssh2 ...	2020-06-11 05:37:57
89.248.172.123	attackspam	Jun 10 23:30:57 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.172.123, lip=172.104.140.148, session= Jun 10 23:32:06 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.172.123, lip=172.104.140.148, session=<8o47k8GnHklZ+Kx7> Jun 10 23:32:42 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.172.123, lip=172.104.140.148, session= Jun 10 23:33:16 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.172.123, lip=172.104.140.148, session= Jun 10 23:34:26 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.172.123, lip=172.104.140.148, ses ...	2020-06-11 05:34:54
39.129.7.86	attack	Jun 10 23:31:56 plex sshd[29734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.129.7.86 user=root Jun 10 23:31:58 plex sshd[29734]: Failed password for root from 39.129.7.86 port 46402 ssh2	2020-06-11 05:40:16
141.98.81.208	attack	Jun 10 21:44:06 scw-6657dc sshd[9505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.208 Jun 10 21:44:06 scw-6657dc sshd[9505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.208 Jun 10 21:44:08 scw-6657dc sshd[9505]: Failed password for invalid user Administrator from 141.98.81.208 port 32459 ssh2 ...	2020-06-11 05:52:39
106.13.107.13	attack	Jun 10 23:02:36 OPSO sshd\[19393\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.107.13 user=root Jun 10 23:02:38 OPSO sshd\[19393\]: Failed password for root from 106.13.107.13 port 49486 ssh2 Jun 10 23:03:44 OPSO sshd\[19454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.107.13 user=root Jun 10 23:03:46 OPSO sshd\[19454\]: Failed password for root from 106.13.107.13 port 36178 ssh2 Jun 10 23:04:50 OPSO sshd\[19766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.107.13 user=apache	2020-06-11 05:22:01
185.202.1.209	attackbots	RDP (aggressivity: low)	2020-06-11 05:36:42
2.233.125.227	attack	Jun 10 19:57:52 onepixel sshd[258125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.233.125.227 Jun 10 19:57:52 onepixel sshd[258125]: Invalid user katie from 2.233.125.227 port 40820 Jun 10 19:57:55 onepixel sshd[258125]: Failed password for invalid user katie from 2.233.125.227 port 40820 ssh2 Jun 10 20:01:27 onepixel sshd[258624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.233.125.227 user=root Jun 10 20:01:29 onepixel sshd[258624]: Failed password for root from 2.233.125.227 port 44132 ssh2	2020-06-11 05:38:54
77.157.175.106	attack	SSH invalid-user multiple login try	2020-06-11 05:48:31
177.136.215.206	attackbotsspam	port scan and connect, tcp 23 (telnet)	2020-06-11 05:52:59
120.71.145.181	attackbots	Jun 10 23:03:51 [host] sshd[25580]: pam_unix(sshd: Jun 10 23:03:53 [host] sshd[25580]: Failed passwor Jun 10 23:05:52 [host] sshd[25638]: Invalid user v	2020-06-11 05:40:45
209.105.243.145	attackspam	Jun 10 22:21:29 journals sshd\[111172\]: Invalid user kommedal from 209.105.243.145 Jun 10 22:21:29 journals sshd\[111172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.105.243.145 Jun 10 22:21:32 journals sshd\[111172\]: Failed password for invalid user kommedal from 209.105.243.145 port 57574 ssh2 Jun 10 22:24:53 journals sshd\[111621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.105.243.145 user=root Jun 10 22:24:55 journals sshd\[111621\]: Failed password for root from 209.105.243.145 port 58470 ssh2 ...	2020-06-11 05:53:51

Recently Reported IPs

197.220.255.44	91.186.234.240	58.208.51.179	138.185.161.51
118.91.255.14	203.123.41.202	187.60.221.92	125.33.89.181
187.208.9.7	61.142.103.115	153.223.143.241	119.118.1.78
69.94.131.94	36.90.24.217	195.223.59.201	213.59.144.39
122.13.16.133	121.231.118.140	247.233.29.15	103.217.177.15