Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.49.68.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42120
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.49.68.5.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025013000 1800 900 604800 86400

;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 15:56:54 CST 2025
;; MSG SIZE  rcvd: 103
Host info
5.68.49.49.in-addr.arpa domain name pointer mx-ll-49.49.68-5.dynamic.3bb.co.th.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
5.68.49.49.in-addr.arpa	name = mx-ll-49.49.68-5.dynamic.3bb.co.th.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
185.234.219.65 attack
2019-08-08 07:17:38 dovecot_login authenticator failed for (95.216.208.141) [185.234.219.65]: 535 Incorrect authentication data (set_id=user1)
...
2019-08-08 13:11:53
27.255.77.5 attackspambots
2019-08-07 21:22:16 dovecot_login authenticator failed for (LdOEh4) [27.255.77.5]:65343 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=willie@lerctr.org)
2019-08-07 21:22:33 dovecot_login authenticator failed for (Hf2dkQ5HK) [27.255.77.5]:62094 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=willie@lerctr.org)
2019-08-07 21:22:54 dovecot_login authenticator failed for (D3AHrk) [27.255.77.5]:64033 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=willie@lerctr.org)
...
2019-08-08 13:26:57
206.189.206.155 attackspambots
[ssh] SSH attack
2019-08-08 12:41:39
218.9.54.243 attackbots
Aug  8 04:22:56 [munged] sshd[6441]: Invalid user javier from 218.9.54.243 port 12700
Aug  8 04:22:56 [munged] sshd[6441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.9.54.243
2019-08-08 13:23:00
120.151.29.128 attackspambots
120.151.29.128 - - \[08/Aug/2019:04:20:13 +0000\] "POST /xmlrpc.php HTTP/1.1" 301 603 "-" "Mozilla/5.0 \(X11\; Linux i686\; rv:2.0.1\) Gecko/20100101 Firefox/4.0.1"
120.151.29.128 - - \[08/Aug/2019:04:21:13 +0000\] "POST /xmlrpc.php HTTP/1.1" 301 603 "-" "Mozilla/5.0 \(X11\; Linux i686\; rv:2.0.1\) Gecko/20100101 Firefox/4.0.1"
120.151.29.128 - - \[08/Aug/2019:04:22:14 +0000\] "POST /xmlrpc.php HTTP/1.1" 301 603 "-" "Mozilla/5.0 \(X11\; Linux i686\; rv:2.0.1\) Gecko/20100101 Firefox/4.0.1"
120.151.29.128 - - \[08/Aug/2019:04:23:16 +0000\] "POST /xmlrpc.php HTTP/1.1" 301 603 "-" "Mozilla/5.0 \(X11\; Linux i686\; rv:2.0.1\) Gecko/20100101 Firefox/4.0.1"
120.151.29.128 - - \[08/Aug/2019:04:24:16 +0000\] "POST /xmlrpc.php HTTP/1.1" 301 603 "-" "Mozilla/5.0 \(X11\; Linux i686\; rv:2.0.1\) Gecko/20100101 Firefox/4.0.1"
2019-08-08 12:52:58
81.218.196.175 attackspambots
Automatic report - Port Scan Attack
2019-08-08 12:57:31
140.143.222.95 attackspam
Aug  8 05:36:43 cp sshd[27660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.222.95
2019-08-08 12:37:20
106.111.210.114 attack
Brute force SMTP login attempts.
2019-08-08 13:15:36
94.176.77.55 attack
(Aug  8)  LEN=40 TTL=244 ID=2773 DF TCP DPT=23 WINDOW=14600 SYN 
 (Aug  8)  LEN=40 TTL=244 ID=4105 DF TCP DPT=23 WINDOW=14600 SYN 
 (Aug  8)  LEN=40 TTL=244 ID=36036 DF TCP DPT=23 WINDOW=14600 SYN 
 (Aug  8)  LEN=40 TTL=244 ID=52230 DF TCP DPT=23 WINDOW=14600 SYN 
 (Aug  7)  LEN=40 TTL=244 ID=26021 DF TCP DPT=23 WINDOW=14600 SYN 
 (Aug  7)  LEN=40 TTL=244 ID=1252 DF TCP DPT=23 WINDOW=14600 SYN 
 (Aug  7)  LEN=40 TTL=244 ID=3227 DF TCP DPT=23 WINDOW=14600 SYN 
 (Aug  7)  LEN=40 TTL=244 ID=47500 DF TCP DPT=23 WINDOW=14600 SYN 
 (Aug  7)  LEN=40 TTL=244 ID=7095 DF TCP DPT=23 WINDOW=14600 SYN 
 (Aug  7)  LEN=40 TTL=244 ID=12696 DF TCP DPT=23 WINDOW=14600 SYN 
 (Aug  7)  LEN=40 TTL=244 ID=62907 DF TCP DPT=23 WINDOW=14600 SYN 
 (Aug  7)  LEN=40 TTL=244 ID=34731 DF TCP DPT=23 WINDOW=14600 SYN 
 (Aug  7)  LEN=40 TTL=244 ID=26257 DF TCP DPT=23 WINDOW=14600 SYN 
 (Aug  7)  LEN=40 TTL=244 ID=37104 DF TCP DPT=23 WINDOW=14600 SYN 
 (Aug  6)  LEN=40 TTL=244 ID=369 DF TCP DPT=23 WINDOW=14600 SYN 
 (...
2019-08-08 12:53:35
210.209.172.226 attackbotsspam
Aug  8 04:24:36 mail kernel: \[2492315.062623\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=210.209.172.226 DST=91.205.173.180 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=2874 DF PROTO=TCP SPT=45861 DPT=5555 WINDOW=14600 RES=0x00 SYN URGP=0 
Aug  8 04:24:37 mail kernel: \[2492316.056254\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=210.209.172.226 DST=91.205.173.180 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=2875 DF PROTO=TCP SPT=45861 DPT=5555 WINDOW=14600 RES=0x00 SYN URGP=0 
Aug  8 04:24:39 mail kernel: \[2492318.056084\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=210.209.172.226 DST=91.205.173.180 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=2876 DF PROTO=TCP SPT=45861 DPT=5555 WINDOW=14600 RES=0x00 SYN URGP=0
2019-08-08 12:33:48
185.227.68.78 attackspam
Aug  8 06:18:55 vpn01 sshd\[11824\]: Invalid user user from 185.227.68.78
Aug  8 06:18:55 vpn01 sshd\[11824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.227.68.78
Aug  8 06:18:56 vpn01 sshd\[11824\]: Failed password for invalid user user from 185.227.68.78 port 37843 ssh2
2019-08-08 12:55:10
129.144.180.156 attackspambots
Triggered by Fail2Ban at Vostok web server
2019-08-08 12:38:00
45.78.5.60 attackspam
Aug  8 06:13:19 localhost sshd\[29779\]: Invalid user admin2 from 45.78.5.60 port 45724
Aug  8 06:13:19 localhost sshd\[29779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.78.5.60
Aug  8 06:13:21 localhost sshd\[29779\]: Failed password for invalid user admin2 from 45.78.5.60 port 45724 ssh2
2019-08-08 12:34:28
212.41.20.10 attack
[portscan] Port scan
2019-08-08 12:54:47
77.247.109.30 attackspambots
*Port Scan* detected from 77.247.109.30 (NL/Netherlands/-). 4 hits in the last 295 seconds
2019-08-08 12:51:22

Recently Reported IPs

74.63.170.200 29.102.83.48 91.132.94.55 50.244.201.239
203.142.106.17 255.167.90.131 141.39.122.218 155.160.188.11
231.239.66.243 182.200.158.57 202.217.220.145 127.163.217.100
186.162.167.11 39.245.142.147 95.134.237.101 170.127.35.135
198.16.141.209 234.46.251.45 70.7.210.145 229.12.119.237