49.7.3.242 - IPInfo

Basic Info

City: Beijing

Region: Beijing

Country: China

Internet Service Provider: China Telecom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
49.7.3.81	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5433abd7292ae516 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; MI 6X Build/PKQ1.180904.001) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Quark/3.6.2.122 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 06:53:54
49.7.3.208	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5430d4b738c5eb7d \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 7.1.1; zh-CN; OS103 Build/NGI77B) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.5.9.1039 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:59:06
49.7.3.74	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5436212eab41eaec \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; ONEPLUS A5010 Build/PKQ1.180716.001) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Quark/3.6.2.122 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 02:48:34
49.7.3.243	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5430d4b39d1eeb61 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 7.1.1; zh-CN; OS103 Build/NGI77B) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.5.9.1039 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 02:26:52
49.7.3.237	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 5414f9f9cc95eb49 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; ONEPLUS A5000 Build/PKQ1.180716.001) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.7.6.1056 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:58:40
49.7.3.101	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 540f761cdafceb3d \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 7.0; zh-CN; KNT-AL10 Build/HUAWEIKNT-AL10) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.5.5.1035 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:33:51
49.7.3.68	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5415c0341f3be512 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-Hans-CN; BKL-AL20 Build/HUAWEIBKL-AL20) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Quark/3.6.2.122 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:28:28
49.7.3.254	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 5416fed82871d382 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.108 Safari/537.36 UCBrowser/12.6.0.1040 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:06:59
49.7.3.245	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 541714233910ebcd \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 8.0.0; zh-CN; MIX 2 Build/OPR1.170623.027) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.7.6.1056 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 01:15:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.7.3.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18481
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.7.3.242.			IN	A

;; AUTHORITY SECTION:
.			534	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020110202 1800 900 604800 86400

;; Query time: 300 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 03 13:22:51 CST 2020
;; MSG SIZE  rcvd: 114

Host info

Host 242.3.7.49.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 100.100.2.138, trying next server
;; Got SERVFAIL reply from 100.100.2.136, trying next server
Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 242.3.7.49.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
177.87.108.93	attackspam	Brute force attempt	2020-02-06 16:47:44
112.85.42.72	attack	2020-02-06T03:54:35.482194xentho-1 sshd[30123]: Failed password for root from 112.85.42.72 port 36196 ssh2 2020-02-06T03:54:33.360547xentho-1 sshd[30123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.72 user=root 2020-02-06T03:54:35.482194xentho-1 sshd[30123]: Failed password for root from 112.85.42.72 port 36196 ssh2 2020-02-06T03:54:38.376075xentho-1 sshd[30123]: Failed password for root from 112.85.42.72 port 36196 ssh2 2020-02-06T03:54:33.360547xentho-1 sshd[30123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.72 user=root 2020-02-06T03:54:35.482194xentho-1 sshd[30123]: Failed password for root from 112.85.42.72 port 36196 ssh2 2020-02-06T03:54:38.376075xentho-1 sshd[30123]: Failed password for root from 112.85.42.72 port 36196 ssh2 2020-02-06T03:54:40.202329xentho-1 sshd[30123]: Failed password for root from 112.85.42.72 port 36196 ssh2 2020-02-06T03:55:48.950016xentho-1 ssh ...	2020-02-06 16:57:06
86.19.209.97	attackbots	$f2bV_matches	2020-02-06 16:34:16
152.249.233.9	attackspam	web Attack on Website at 2020-02-05.	2020-02-06 16:52:59
138.219.19.2	attackspam	web Attack on Website at 2020-02-05.	2020-02-06 17:06:32
185.51.202.237	attackbots	Honeypot attack, port: 445, PTR: 185.51.202.237.shahrad.net.	2020-02-06 16:47:29
14.231.65.1	attackbotsspam	SSH login attempts with user root at 2020-02-05.	2020-02-06 17:00:43
134.209.24.1	attack	SSH login attempts with user root at 2020-02-05.	2020-02-06 17:09:40
181.54.204.102	attack	Feb 6 05:54:49 grey postfix/smtpd\[6617\]: NOQUEUE: reject: RCPT from unknown\[181.54.204.102\]: 554 5.7.1 Service unavailable\; Client host \[181.54.204.102\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?181.54.204.102\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-06 16:29:13
139.162.122.1	attackspam	SSH login attempts with user root at 2020-02-05.	2020-02-06 17:03:04
167.114.210.1	attackspambots	SSH login attempts with user root at 2020-02-05.	2020-02-06 16:43:38
179.43.169.1	attackspam	web Attack on Website at 2020-02-05.	2020-02-06 16:23:04
160.19.226.1	attackspam	web Attack on Website at 2020-02-05.	2020-02-06 16:50:13
139.162.79.8	attack	web Attack on Website at 2020-02-05.	2020-02-06 17:03:23
14.99.25.3	attackbots	SSH login attempts with user root at 2020-02-05.	2020-02-06 16:59:07

Recently Reported IPs

111.90.50.207	111.90.50.203	203.39.219.236	136.232.185.238
52.138.62.134	125.166.108.137	175.142.187.144	211.57.45.38
86.174.89.167	23.97.70.176	209.127.178.62	201.73.0.79
5.180.62.48	18.180.79.14	122.252.239.39	123.201.67.82
188.146.113.224	24.194.206.160	89.203.83.84	46.6.12.164