49.7.4.51 - IPInfo

Basic Info

City: Beijing

Region: Beijing

Country: China

Internet Service Provider: China Telecom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
49.7.4.35	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5435dbc1a8aee4fa \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 10; zh-CN; PCLM10 Build/QKQ1.190825.002) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Quark/3.6.2.122 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 07:18:27
49.7.4.136	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 5436372e9f21e4fa \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; vivo Z1 Build/PKQ1.180819.001) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.6.6.1046 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 06:08:10
49.7.4.189	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 543636cbb8d977b2 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; vivo Z1 Build/PKQ1.180819.001) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.6.6.1046 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 06:07:39
49.7.4.134	attack	The IP has triggered Cloudflare WAF. CF-Ray: 543850f4095aeb75 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_1_3 like Mac OS X; zh-CN) AppleWebKit/537.51.1 (KHTML, like Gecko) Mobile/17A878 UCBrowser/12.7.1.1240 Mobile AliApp(TUnionSDK/0.1.20.3) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 05:48:00
49.7.4.154	attack	The IP has triggered Cloudflare WAF. CF-Ray: 543379425d06e50a \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_3_2 like Mac OS X; en-us) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8H7 Safari/6533.18.5 UCBrowser/12.2.8.1008 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 05:22:10
49.7.4.162	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5433794fcdf5eb99 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_3_2 like Mac OS X; en-us) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8H7 Safari/6533.18.5 UCBrowser/12.2.8.1008 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 05:21:52
49.7.4.17	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 5432e94f2c79eb45 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 8.1.0; zh-CN; 16th Plus Build/OPM1.171019.026) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Quark/3.6.2.122 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:58:34
49.7.4.98	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5431524afcb3e80d \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; GLK-AL00 Build/HUAWEIGLK-AL00) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.7.1.1051 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:58:21
49.7.4.125	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 54315244eedcd386 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; GLK-AL00 Build/HUAWEIGLK-AL00) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.7.1.1051 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 03:40:07
49.7.4.17	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 5416ccf66b55e50e \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 9; zh-CN; Redmi K20 Pro Build/PKQ1.181121.001) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Quark/3.6.2.122 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 04:46:02
49.7.4.36	attack	The IP has triggered Cloudflare WAF. CF-Ray: 541259482eb4eb49 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 6.0.1; zh-CN; OPPO R9sk Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.7.6.1056 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:06:32
49.7.4.87	attackbots	The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)	2019-11-19 04:59:00
49.7.43.8	attack	Blocked for port scanning. Time: Tue Oct 15. 19:44:47 2019 +0200 IP: 49.7.43.8 (CN/China/-) Sample of block hits: Oct 15 19:43:42 vserv kernel: [44763591.510049] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=49.7.43.8 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=13671 DF PROTO=TCP SPT=30539 DPT=25084 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 15 19:43:43 vserv kernel: [44763592.512217] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=49.7.43.8 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=13672 DF PROTO=TCP SPT=30539 DPT=25084 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 15 19:43:45 vserv kernel: [44763594.517298] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=49.7.43.8 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=13673 DF PROTO=TCP SPT=30539 DPT=25084 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 15 19:43:49 vserv kernel: [44763598.525602] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=49.7.43.8 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=13674 DF PROTO=TCP SPT=30539 DPT=25084 WINDOW=29200	2019-10-16 08:55:30

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.7.4.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58031
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.7.4.51.			IN	A

;; AUTHORITY SECTION:
.			560	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024052401 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 25 11:40:06 CST 2024
;; MSG SIZE  rcvd: 102

Host info

b'Host 51.4.7.49.in-addr.arpa not found: 2(SERVFAIL)
'

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 51.4.7.49.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
80.82.78.20	attackbotsspam	firewall-block, port(s): 39919/tcp, 44881/tcp, 60604/tcp, 60606/tcp	2020-01-11 18:43:27
112.21.188.250	attackbotsspam	Unauthorized connection attempt detected from IP address 112.21.188.250 to port 22	2020-01-11 18:52:17
213.157.50.108	attackbots	unauthorized connection attempt	2020-01-11 18:42:21
142.93.39.29	attackspam	$f2bV_matches	2020-01-11 18:29:21
54.91.14.232	attack	404 NOT FOUND	2020-01-11 18:24:04
83.97.20.49	attackbots	Portscan or hack attempt detected by psad/fwsnort	2020-01-11 18:26:14
188.142.209.49	attackspam	Invalid user admin from 188.142.209.49 port 49406	2020-01-11 18:27:04
114.119.155.69	attackspambots	badbot	2020-01-11 18:53:19
184.82.169.22	attackbots	1578718196 - 01/11/2020 05:49:56 Host: 184.82.169.22/184.82.169.22 Port: 445 TCP Blocked	2020-01-11 18:32:25
41.93.32.88	attackspam	$f2bV_matches	2020-01-11 18:57:49
198.71.236.86	attackspambots	Automatic report - XMLRPC Attack	2020-01-11 18:33:27
177.152.170.226	attack	Jan 11 05:49:19 grey postfix/smtpd\[9288\]: NOQUEUE: reject: RCPT from unknown\[177.152.170.226\]: 554 5.7.1 Service unavailable\; Client host \[177.152.170.226\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=177.152.170.226\; from=\ to=\ proto=ESMTP helo=\<\[177.152.170.226\]\> ...	2020-01-11 18:49:47
188.131.212.32	attackbots	$f2bV_matches	2020-01-11 18:30:32
58.71.59.93	attack	Jan 11 08:54:26 unicornsoft sshd\[21309\]: User root from 58.71.59.93 not allowed because not listed in AllowUsers Jan 11 08:54:26 unicornsoft sshd\[21309\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.71.59.93 user=root Jan 11 08:54:29 unicornsoft sshd\[21309\]: Failed password for invalid user root from 58.71.59.93 port 37727 ssh2	2020-01-11 18:23:25
92.118.37.61	attackbotsspam	01/11/2020-05:16:54.935590 92.118.37.61 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-01-11 18:51:22

Recently Reported IPs

62.220.116.121	49.7.4.112	102.80.241.60	115.216.7.8
57.196.74.96	103.218.27.158	17.54.250.105	23.225.121.212
23.225.121.68	236.73.4.38	98.55.94.172	23.225.121.193
178.235.150.51	93.36.139.138	63.98.228.59	174.149.195.173
35.127.143.130	202.165.86.18	118.146.26.114	78.200.66.68