Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
49.7.20.28 attack
Automatic report - Banned IP Access
2020-09-04 00:48:59
49.7.20.28 attack
Port Scan: TCP/443
2020-09-03 16:13:27
49.7.20.28 attack
Port Scan: TCP/443
2020-09-03 08:21:48
49.7.20.86 attackbotsspam
Dangerous
2020-08-18 05:09:48
49.7.20.28 attackbots
404 NOT FOUND
2020-08-14 12:45:26
49.7.20.28 attack
Malicious brute force vulnerability hacking attacks
2020-06-24 21:19:56
49.7.20.28 attackbots
IP: 49.7.20.28
Ports affected
    http protocol over TLS/SSL (443) 
    World Wide Web HTTP (80) 
Abuse Confidence rating 35%
Found in DNSBL('s)
ASN Details
   AS23724 IDC China Telecommunications Corporation
   China (CN)
   CIDR 49.7.0.0/16
Log Date: 7/03/2020 5:59:58 AM UTC
2020-03-07 15:39:15
49.7.20.96 attackspambots
IP: 49.7.20.96
Ports affected
    World Wide Web HTTP (80) 
Found in DNSBL('s)
ASN Details
   AS23724 IDC China Telecommunications Corporation
   China (CN)
   CIDR 49.7.0.0/16
Log Date: 28/02/2020 4:42:31 PM UTC
2020-02-29 01:36:31
49.7.20.161 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 54330e29e9a3e819 | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: jschallenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 04:57:49
49.7.20.7 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5430747a7e05eb25 | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: jschallenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 04:06:55
49.7.20.22 attackbotsspam
The IP has triggered Cloudflare WAF. CF-Ray: 54340382ba31e7f9 | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: jschallenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 00:15:26
49.7.20.177 attack
The IP has triggered Cloudflare WAF. CF-Ray: 540fb9f34fb3e50e | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 03:22:51
49.7.20.173 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 540f7019ae38e82d | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 00:26:18
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.7.20.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37018
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.7.20.91.			IN	A

;; AUTHORITY SECTION:
.			141	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062600 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 26 21:02:39 CST 2022
;; MSG SIZE  rcvd: 103
Host info
91.20.7.49.in-addr.arpa domain name pointer sogouspider-49-7-20-91.crawl.sogou.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
91.20.7.49.in-addr.arpa	name = sogouspider-49-7-20-91.crawl.sogou.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
109.102.31.87 attackspam
 TCP (SYN) 109.102.31.87:30358 -> port 8080, len 40
2020-10-04 12:21:53
157.230.220.179 attackspambots
Oct  4 04:27:42 gospond sshd[6564]: Invalid user stefan from 157.230.220.179 port 58824
...
2020-10-04 12:19:43
103.79.154.82 attackspambots
1601757678 - 10/04/2020 03:41:18 Host: 103.79.154.82/103.79.154.82 Port: 23 TCP Blocked
...
2020-10-04 12:42:10
213.32.78.219 attackbots
2020-10-04T02:41:36.125307mail.standpoint.com.ua sshd[25458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.78.219
2020-10-04T02:41:36.121974mail.standpoint.com.ua sshd[25458]: Invalid user dk from 213.32.78.219 port 51908
2020-10-04T02:41:38.151405mail.standpoint.com.ua sshd[25458]: Failed password for invalid user dk from 213.32.78.219 port 51908 ssh2
2020-10-04T02:44:56.448345mail.standpoint.com.ua sshd[25863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.78.219  user=root
2020-10-04T02:44:58.930879mail.standpoint.com.ua sshd[25863]: Failed password for root from 213.32.78.219 port 58006 ssh2
...
2020-10-04 12:25:15
117.69.154.57 attackbotsspam
Oct  4 00:55:03 srv01 postfix/smtpd\[13707\]: warning: unknown\[117.69.154.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  4 00:58:30 srv01 postfix/smtpd\[21341\]: warning: unknown\[117.69.154.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  4 01:01:56 srv01 postfix/smtpd\[30998\]: warning: unknown\[117.69.154.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  4 01:02:08 srv01 postfix/smtpd\[30998\]: warning: unknown\[117.69.154.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  4 01:02:25 srv01 postfix/smtpd\[30998\]: warning: unknown\[117.69.154.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-10-04 12:20:47
218.92.0.173 attack
Oct  4 06:31:49 ucs sshd\[25750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173  user=root
Oct  4 06:31:51 ucs sshd\[25693\]: error: PAM: User not known to the underlying authentication module for root from 218.92.0.173
Oct  4 06:31:52 ucs sshd\[25858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173  user=root
...
2020-10-04 12:39:03
78.128.113.121 attackbotsspam
Oct  4 06:12:57 galaxy event: galaxy/lswi: smtp: marcus.lindemann@wi.uni-potsdam.de [78.128.113.121] authentication failure using internet password
Oct  4 06:12:59 galaxy event: galaxy/lswi: smtp: marcus.lindemann [78.128.113.121] authentication failure using internet password
Oct  4 06:13:06 galaxy event: galaxy/lswi: smtp: marcus.lindemann@wi.uni-potsdam.de [78.128.113.121] authentication failure using internet password
Oct  4 06:13:08 galaxy event: galaxy/lswi: smtp: marcus.lindemann [78.128.113.121] authentication failure using internet password
Oct  4 06:13:51 galaxy event: galaxy/lswi: smtp: lswi@wi.uni-potsdam.de [78.128.113.121] authentication failure using internet password
...
2020-10-04 12:14:55
218.92.0.158 attack
Oct  4 06:18:50 pve1 sshd[23353]: Failed password for root from 218.92.0.158 port 25315 ssh2
Oct  4 06:18:55 pve1 sshd[23353]: Failed password for root from 218.92.0.158 port 25315 ssh2
...
2020-10-04 12:28:38
196.77.12.70 attackspam
Lines containing failures of 196.77.12.70
Oct  3 22:29:16 mellenthin sshd[14703]: Did not receive identification string from 196.77.12.70 port 60332
Oct  3 22:29:36 mellenthin sshd[14704]: Invalid user nagesh from 196.77.12.70 port 60680
Oct  3 22:29:38 mellenthin sshd[14704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.77.12.70
Oct  3 22:29:40 mellenthin sshd[14704]: Failed password for invalid user nagesh from 196.77.12.70 port 60680 ssh2
Oct  3 22:29:40 mellenthin sshd[14704]: Connection closed by invalid user nagesh 196.77.12.70 port 60680 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=196.77.12.70
2020-10-04 12:31:20
168.243.230.149 attack
20/10/3@16:41:29: FAIL: Alarm-Network address from=168.243.230.149
...
2020-10-04 12:30:48
116.105.64.168 attack
Oct  3 14:15:17 ingram sshd[5919]: Did not receive identification string from 116.105.64.168
Oct  3 14:15:20 ingram sshd[5921]: Invalid user service from 116.105.64.168
Oct  3 14:15:20 ingram sshd[5921]: Failed none for invalid user service from 116.105.64.168 port 64262 ssh2
Oct  3 14:15:21 ingram sshd[5921]: Failed password for invalid user service from 116.105.64.168 port 64262 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=116.105.64.168
2020-10-04 12:43:19
61.177.172.54 attackspam
[MK-VM3] SSH login failed
2020-10-04 12:22:16
69.55.54.65 attackspambots
Oct  4 00:38:30 s1 sshd\[31702\]: Invalid user ftpuser from 69.55.54.65 port 42486
Oct  4 00:38:30 s1 sshd\[31702\]: Failed password for invalid user ftpuser from 69.55.54.65 port 42486 ssh2
Oct  4 00:43:26 s1 sshd\[5492\]: Invalid user kiran from 69.55.54.65 port 50424
Oct  4 00:43:26 s1 sshd\[5492\]: Failed password for invalid user kiran from 69.55.54.65 port 50424 ssh2
Oct  4 00:48:23 s1 sshd\[11300\]: Invalid user a from 69.55.54.65 port 58360
Oct  4 00:48:23 s1 sshd\[11300\]: Failed password for invalid user a from 69.55.54.65 port 58360 ssh2
...
2020-10-04 12:18:17
218.18.161.186 attack
$f2bV_matches
2020-10-04 12:20:16
117.247.238.10 attack
SSH Invalid Login
2020-10-04 12:25:57

Recently Reported IPs

180.76.147.57 61.216.45.35 169.229.157.72 169.229.219.34
180.76.31.222 180.76.32.86 180.76.32.129 169.229.162.59
8.9.182.211 169.229.185.232 169.229.149.148 169.229.210.6
180.76.33.161 169.229.163.204 169.229.164.220 180.76.33.212
180.76.34.93 180.76.35.55 169.229.212.21 112.47.16.172