Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: Triple T Internet PCL

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbotsspam
1588766314 - 05/06/2020 13:58:34 Host: 49.49.212.242/49.49.212.242 Port: 445 TCP Blocked
2020-05-07 01:31:22
Comments on same subnet:
IP Type Details Datetime
49.49.212.222 attack
Autoban   49.49.212.222 AUTH/CONNECT
2019-12-13 05:30:58
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.49.212.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60827
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.49.212.242.			IN	A

;; AUTHORITY SECTION:
.			588	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050601 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 07 01:31:18 CST 2020
;; MSG SIZE  rcvd: 117
Host info
242.212.49.49.in-addr.arpa domain name pointer mx-ll-49.49.212-242.dynamic.3bb.co.th.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
242.212.49.49.in-addr.arpa	name = mx-ll-49.49.212-242.dynamic.3bb.co.th.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
167.99.233.205 attack
2019-12-12T12:55:28.765310ns547587 sshd\[7422\]: Invalid user videa from 167.99.233.205 port 39540
2019-12-12T12:55:28.770986ns547587 sshd\[7422\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.233.205
2019-12-12T12:55:30.681836ns547587 sshd\[7422\]: Failed password for invalid user videa from 167.99.233.205 port 39540 ssh2
2019-12-12T13:00:40.913534ns547587 sshd\[15660\]: Invalid user richa from 167.99.233.205 port 47146
...
2019-12-13 05:51:28
218.92.0.172 attack
Dec 12 22:55:58 vps691689 sshd[20554]: Failed password for root from 218.92.0.172 port 56387 ssh2
Dec 12 22:56:01 vps691689 sshd[20554]: Failed password for root from 218.92.0.172 port 56387 ssh2
Dec 12 22:56:04 vps691689 sshd[20554]: Failed password for root from 218.92.0.172 port 56387 ssh2
...
2019-12-13 05:57:48
46.13.154.141 attackspam
Autoban   46.13.154.141 AUTH/CONNECT
2019-12-13 06:00:15
47.61.26.112 attack
Autoban   47.61.26.112 AUTH/CONNECT
2019-12-13 05:39:44
112.220.85.26 attack
Dec 12 22:18:20 Ubuntu-1404-trusty-64-minimal sshd\[22119\]: Invalid user gravial from 112.220.85.26
Dec 12 22:18:20 Ubuntu-1404-trusty-64-minimal sshd\[22119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.220.85.26
Dec 12 22:18:22 Ubuntu-1404-trusty-64-minimal sshd\[22119\]: Failed password for invalid user gravial from 112.220.85.26 port 44606 ssh2
Dec 12 22:28:15 Ubuntu-1404-trusty-64-minimal sshd\[1977\]: Invalid user kaylenna from 112.220.85.26
Dec 12 22:28:15 Ubuntu-1404-trusty-64-minimal sshd\[1977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.220.85.26
2019-12-13 05:53:55
159.65.137.23 attackbots
Dec 12 16:39:48 h2177944 sshd\[21046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.137.23  user=sync
Dec 12 16:39:49 h2177944 sshd\[21046\]: Failed password for sync from 159.65.137.23 port 50238 ssh2
Dec 12 16:47:08 h2177944 sshd\[21289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.137.23  user=root
Dec 12 16:47:10 h2177944 sshd\[21289\]: Failed password for root from 159.65.137.23 port 40876 ssh2
...
2019-12-13 06:00:49
46.40.56.88 attackspambots
Autoban   46.40.56.88 AUTH/CONNECT
2019-12-13 05:41:40
185.202.61.123 attack
Invalid user breault from 185.202.61.123 port 39938
2019-12-13 06:02:54
106.13.216.239 attack
Dec 12 16:48:26 sd-53420 sshd\[24622\]: User root from 106.13.216.239 not allowed because none of user's groups are listed in AllowGroups
Dec 12 16:48:26 sd-53420 sshd\[24622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.216.239  user=root
Dec 12 16:48:28 sd-53420 sshd\[24622\]: Failed password for invalid user root from 106.13.216.239 port 59280 ssh2
Dec 12 16:54:40 sd-53420 sshd\[25097\]: Invalid user sasabuchi from 106.13.216.239
Dec 12 16:54:40 sd-53420 sshd\[25097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.216.239
...
2019-12-13 06:05:58
45.95.35.37 attack
Autoban   45.95.35.37 AUTH/CONNECT
2019-12-13 06:06:45
106.12.209.38 attackbots
Dec 12 12:43:47 server sshd\[23062\]: Failed password for invalid user banglos from 106.12.209.38 port 44100 ssh2
Dec 13 00:12:15 server sshd\[669\]: Invalid user berni from 106.12.209.38
Dec 13 00:12:15 server sshd\[669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.209.38 
Dec 13 00:12:17 server sshd\[669\]: Failed password for invalid user berni from 106.12.209.38 port 48450 ssh2
Dec 13 00:34:20 server sshd\[7035\]: Invalid user ssh from 106.12.209.38
...
2019-12-13 06:15:57
143.208.181.34 attackspambots
Dec 12 05:11:06 eddieflores sshd\[11997\]: Invalid user esfandia123 from 143.208.181.34
Dec 12 05:11:06 eddieflores sshd\[11997\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.208.181.34
Dec 12 05:11:08 eddieflores sshd\[11997\]: Failed password for invalid user esfandia123 from 143.208.181.34 port 41132 ssh2
Dec 12 05:17:52 eddieflores sshd\[12581\]: Invalid user ZEIDC123!@\# from 143.208.181.34
Dec 12 05:17:52 eddieflores sshd\[12581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.208.181.34
2019-12-13 05:51:56
14.186.151.11 attackbots
2,47-10/02 [bc00/m01] PostRequest-Spammer scoring: vaduz
2019-12-13 06:09:36
185.175.93.105 attack
firewall-block, port(s): 1961/tcp, 1963/tcp, 1973/tcp, 1974/tcp, 1978/tcp, 1986/tcp, 1997/tcp
2019-12-13 06:10:02
46.151.157.115 attackspambots
Autoban   46.151.157.115 AUTH/CONNECT
2019-12-13 05:59:33

Recently Reported IPs

185.143.223.252 198.135.169.139 1.93.144.120 172.65.239.120
162.251.236.2 160.108.131.197 162.254.193.6 113.88.166.14
197.136.132.95 5.101.151.82 222.186.151.246 172.105.52.86
125.134.217.62 171.137.244.64 147.180.7.163 112.135.197.209
92.2.193.219 85.209.0.37 62.210.105.231 49.204.73.186