49.7.3.74 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Telecom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	The IP has triggered Cloudflare WAF. CF-Ray: 5436212eab41eaec \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; ONEPLUS A5010 Build/PKQ1.180716.001) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Quark/3.6.2.122 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 02:48:34

Type

Details

Datetime

attack

The IP has triggered Cloudflare WAF. CF-Ray: 5436212eab41eaec | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: jschallenge | Country: CN | CF_IPClass: unknown | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; ONEPLUS A5010 Build/PKQ1.180716.001) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Quark/3.6.2.122 Mobile Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 02:48:34

Comments on same subnet:

IP	Type	Details	Datetime
49.7.3.81	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5433abd7292ae516 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; MI 6X Build/PKQ1.180904.001) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Quark/3.6.2.122 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 06:53:54
49.7.3.208	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5430d4b738c5eb7d \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 7.1.1; zh-CN; OS103 Build/NGI77B) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.5.9.1039 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:59:06
49.7.3.243	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5430d4b39d1eeb61 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 7.1.1; zh-CN; OS103 Build/NGI77B) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.5.9.1039 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 02:26:52
49.7.3.237	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 5414f9f9cc95eb49 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; ONEPLUS A5000 Build/PKQ1.180716.001) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.7.6.1056 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:58:40
49.7.3.101	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 540f761cdafceb3d \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 7.0; zh-CN; KNT-AL10 Build/HUAWEIKNT-AL10) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.5.5.1035 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:33:51
49.7.3.68	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5415c0341f3be512 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-Hans-CN; BKL-AL20 Build/HUAWEIBKL-AL20) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Quark/3.6.2.122 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:28:28
49.7.3.254	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 5416fed82871d382 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.108 Safari/537.36 UCBrowser/12.6.0.1040 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:06:59
49.7.3.245	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 541714233910ebcd \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 8.0.0; zh-CN; MIX 2 Build/OPR1.170623.027) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.7.6.1056 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 01:15:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.7.3.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51995
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.7.3.74.			IN	A

;; AUTHORITY SECTION:
.			422	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121101 1800 900 604800 86400

;; Query time: 96 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 12 02:48:28 CST 2019
;; MSG SIZE  rcvd: 113

Host info

Host 74.3.7.49.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 100.100.2.136, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 74.3.7.49.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
175.6.35.52	attackbots	2020-06-22T03:49:14.961829shield sshd\[30451\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.35.52 user=root 2020-06-22T03:49:17.018316shield sshd\[30451\]: Failed password for root from 175.6.35.52 port 35798 ssh2 2020-06-22T03:52:31.749572shield sshd\[30741\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.35.52 user=root 2020-06-22T03:52:33.182874shield sshd\[30741\]: Failed password for root from 175.6.35.52 port 51832 ssh2 2020-06-22T03:55:47.621664shield sshd\[30966\]: Invalid user ts3user from 175.6.35.52 port 39628	2020-06-22 12:07:10
88.233.164.235	attack	Unauthorized connection attempt detected from IP address 88.233.164.235 to port 80	2020-06-22 08:27:27
205.185.124.12	attackspam	Unauthorized connection attempt detected from IP address 205.185.124.12 to port 22	2020-06-22 08:18:21
45.6.231.172	attackspam	Unauthorized connection attempt detected from IP address 45.6.231.172 to port 80	2020-06-22 08:15:05
108.26.26.3	attack	Unauthorized connection attempt detected from IP address 108.26.26.3 to port 23	2020-06-22 08:25:04
187.102.160.218	attackbots	Automatic report - Port Scan Attack	2020-06-22 08:20:49
112.85.42.104	attackspam	$f2bV_matches	2020-06-22 08:09:18
177.67.15.205	attackspambots	Unauthorized connection attempt detected from IP address 177.67.15.205 to port 88	2020-06-22 08:22:56
189.146.134.143	attack	Unauthorized connection attempt detected from IP address 189.146.134.143 to port 81	2020-06-22 08:19:23
85.100.43.83	attackspam	Unauthorized connection attempt detected from IP address 85.100.43.83 to port 8080	2020-06-22 08:27:56
113.193.243.35	attackbots	Jun 22 05:55:48 haigwepa sshd[29634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.193.243.35 Jun 22 05:55:50 haigwepa sshd[29634]: Failed password for invalid user sftp_user from 113.193.243.35 port 51600 ssh2 ...	2020-06-22 12:05:05
114.93.111.75	attack	Unauthorized connection attempt detected from IP address 114.93.111.75 to port 81	2020-06-22 08:08:36
77.79.28.141	attack	TCP (SYN) 77.79.28.141:52056 -> port 23, len 40	2020-06-22 08:29:51
82.54.128.249	attackbotsspam	Unauthorized connection attempt detected from IP address 82.54.128.249 to port 8080	2020-06-22 08:28:25
81.45.130.59	attack	Unauthorized connection attempt detected from IP address 81.45.130.59 to port 3389	2020-06-22 08:13:01

Recently Reported IPs

71.209.141.14	209.236.105.143	64.114.43.239	220.200.154.192
117.45.116.151	220.181.124.117	89.162.141.239	68.199.240.238
92.93.70.55	185.79.92.81	134.105.186.46	69.5.182.176
120.220.119.6	183.195.51.124	249.47.72.161	165.248.112.100
183.184.27.243	85.225.255.3	123.211.55.91	65.2.132.21