Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
49.7.20.28 attack
Automatic report - Banned IP Access
2020-09-04 00:48:59
49.7.20.28 attack
Port Scan: TCP/443
2020-09-03 16:13:27
49.7.20.28 attack
Port Scan: TCP/443
2020-09-03 08:21:48
49.7.20.86 attackbotsspam
Dangerous
2020-08-18 05:09:48
49.7.20.28 attackbots
404 NOT FOUND
2020-08-14 12:45:26
49.7.20.28 attack
Malicious brute force vulnerability hacking attacks
2020-06-24 21:19:56
49.7.20.28 attackbots
IP: 49.7.20.28
Ports affected
    http protocol over TLS/SSL (443) 
    World Wide Web HTTP (80) 
Abuse Confidence rating 35%
Found in DNSBL('s)
ASN Details
   AS23724 IDC China Telecommunications Corporation
   China (CN)
   CIDR 49.7.0.0/16
Log Date: 7/03/2020 5:59:58 AM UTC
2020-03-07 15:39:15
49.7.20.96 attackspambots
IP: 49.7.20.96
Ports affected
    World Wide Web HTTP (80) 
Found in DNSBL('s)
ASN Details
   AS23724 IDC China Telecommunications Corporation
   China (CN)
   CIDR 49.7.0.0/16
Log Date: 28/02/2020 4:42:31 PM UTC
2020-02-29 01:36:31
49.7.20.161 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 54330e29e9a3e819 | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: jschallenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 04:57:49
49.7.20.7 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5430747a7e05eb25 | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: jschallenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 04:06:55
49.7.20.22 attackbotsspam
The IP has triggered Cloudflare WAF. CF-Ray: 54340382ba31e7f9 | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: jschallenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 00:15:26
49.7.20.177 attack
The IP has triggered Cloudflare WAF. CF-Ray: 540fb9f34fb3e50e | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 03:22:51
49.7.20.173 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 540f7019ae38e82d | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 00:26:18
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.7.20.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45728
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.7.20.72.			IN	A

;; AUTHORITY SECTION:
.			597	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 04:12:16 CST 2022
;; MSG SIZE  rcvd: 103
Host info
72.20.7.49.in-addr.arpa domain name pointer sogouspider-49-7-20-72.crawl.sogou.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
72.20.7.49.in-addr.arpa	name = sogouspider-49-7-20-72.crawl.sogou.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
220.248.101.54 attackspam
Jul  9 04:19:32 IngegnereFirenze sshd[2200]: Failed password for invalid user admin from 220.248.101.54 port 7141 ssh2
...
2020-07-09 15:04:56
51.91.123.119 attack
Jul  9 06:38:30 onepixel sshd[1068503]: Invalid user dalucio from 51.91.123.119 port 43264
Jul  9 06:38:30 onepixel sshd[1068503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.123.119 
Jul  9 06:38:30 onepixel sshd[1068503]: Invalid user dalucio from 51.91.123.119 port 43264
Jul  9 06:38:31 onepixel sshd[1068503]: Failed password for invalid user dalucio from 51.91.123.119 port 43264 ssh2
Jul  9 06:42:00 onepixel sshd[1070660]: Invalid user grazia from 51.91.123.119 port 38942
2020-07-09 14:50:35
142.93.137.144 attackbots
Jul  9 06:42:13 meumeu sshd[200539]: Invalid user bedelia from 142.93.137.144 port 42268
Jul  9 06:42:13 meumeu sshd[200539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.137.144 
Jul  9 06:42:13 meumeu sshd[200539]: Invalid user bedelia from 142.93.137.144 port 42268
Jul  9 06:42:14 meumeu sshd[200539]: Failed password for invalid user bedelia from 142.93.137.144 port 42268 ssh2
Jul  9 06:45:09 meumeu sshd[200604]: Invalid user kunxu from 142.93.137.144 port 39210
Jul  9 06:45:09 meumeu sshd[200604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.137.144 
Jul  9 06:45:09 meumeu sshd[200604]: Invalid user kunxu from 142.93.137.144 port 39210
Jul  9 06:45:11 meumeu sshd[200604]: Failed password for invalid user kunxu from 142.93.137.144 port 39210 ssh2
Jul  9 06:48:08 meumeu sshd[200667]: Invalid user ikanri from 142.93.137.144 port 36152
...
2020-07-09 15:03:31
111.231.94.138 attackbotsspam
Jul  9 03:06:23 firewall sshd[26353]: Invalid user debian from 111.231.94.138
Jul  9 03:06:25 firewall sshd[26353]: Failed password for invalid user debian from 111.231.94.138 port 41486 ssh2
Jul  9 03:10:23 firewall sshd[26416]: Invalid user lizongyi from 111.231.94.138
...
2020-07-09 14:35:31
59.89.59.226 attackspam
07/08/2020-23:55:47.554582 59.89.59.226 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-07-09 14:40:30
78.19.66.74 attack
Honeypot attack, port: 139, PTR: sky-78-19-66-74.bas512.cwt.btireland.net.
2020-07-09 14:48:12
181.57.168.174 attackbots
Jul  9 03:55:44 *** sshd[3165]: Invalid user cftest from 181.57.168.174
2020-07-09 14:40:59
116.255.139.236 attackspambots
2020-07-08T20:55:32.582475-07:00 suse-nuc sshd[7400]: Invalid user lisen from 116.255.139.236 port 51674
...
2020-07-09 14:53:52
41.32.51.178 attackspam
Honeypot attack, port: 81, PTR: host-41.32.51.178-static.tedata.net.
2020-07-09 14:36:37
136.49.109.217 attack
Jul 09 01:16:25 askasleikir sshd[43579]: Failed password for invalid user yoshida from 136.49.109.217 port 58510 ssh2
2020-07-09 15:15:54
114.41.96.39 attackbotsspam
Honeypot attack, port: 445, PTR: 114-41-96-39.dynamic-ip.hinet.net.
2020-07-09 14:57:02
77.82.90.234 attackbotsspam
Failed password for invalid user sergey from 77.82.90.234 port 34136 ssh2
2020-07-09 14:58:34
113.190.246.42 attackbotsspam
Dovecot Invalid User Login Attempt.
2020-07-09 14:49:32
191.53.104.247 attack
(LocalIPAttack) Local IP Attack From  191.53.104.247 (BR/Brazil/191-53-104-247.vga-wr.mastercabo.com.br): 1 in the last 3600 secs
2020-07-09 14:49:06
222.186.180.8 attackbots
2020-07-09T06:31:46.831224vps1033 sshd[16084]: Failed password for root from 222.186.180.8 port 22134 ssh2
2020-07-09T06:31:50.496267vps1033 sshd[16084]: Failed password for root from 222.186.180.8 port 22134 ssh2
2020-07-09T06:31:53.237282vps1033 sshd[16084]: Failed password for root from 222.186.180.8 port 22134 ssh2
2020-07-09T06:31:56.388683vps1033 sshd[16084]: Failed password for root from 222.186.180.8 port 22134 ssh2
2020-07-09T06:31:59.284519vps1033 sshd[16084]: Failed password for root from 222.186.180.8 port 22134 ssh2
...
2020-07-09 14:35:48

Recently Reported IPs

93.67.0.30 177.73.98.209 138.197.70.71 14.248.218.242
121.5.156.183 216.129.183.129 178.158.10.240 177.11.167.79
187.189.27.57 124.6.32.158 42.55.190.149 121.168.94.134
178.47.137.93 117.251.16.23 45.174.148.78 42.235.105.124
209.141.186.146 178.94.9.122 58.212.68.61 123.193.149.90