Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
49.81.28.57 attackbots
Email rejected due to spam filtering
2020-04-23 21:46:52
49.81.226.119 attack
Email rejected due to spam filtering
2020-04-18 02:40:25
49.81.23.238 attack
port scan and connect, tcp 22 (ssh)
2020-04-12 03:43:07
49.81.218.15 attack
Mar 23 16:37:32 mxgate1 postfix/postscreen[24998]: CONNECT from [49.81.218.15]:1119 to [176.31.12.44]:25
Mar 23 16:37:32 mxgate1 postfix/dnsblog[25001]: addr 49.81.218.15 listed by domain zen.spamhaus.org as 127.0.0.11
Mar 23 16:37:32 mxgate1 postfix/dnsblog[25001]: addr 49.81.218.15 listed by domain zen.spamhaus.org as 127.0.0.4
Mar 23 16:37:32 mxgate1 postfix/dnsblog[25001]: addr 49.81.218.15 listed by domain zen.spamhaus.org as 127.0.0.3
Mar 23 16:37:32 mxgate1 postfix/dnsblog[24999]: addr 49.81.218.15 listed by domain cbl.abuseat.org as 127.0.0.2
Mar 23 16:37:32 mxgate1 postfix/dnsblog[25024]: addr 49.81.218.15 listed by domain b.barracudacentral.org as 127.0.0.2
Mar 23 16:37:38 mxgate1 postfix/postscreen[24998]: DNSBL rank 4 for [49.81.218.15]:1119
Mar x@x
Mar 23 16:37:39 mxgate1 postfix/postscreen[24998]: DISCONNECT [49.81.218.15]:1119


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.81.218.15
2020-03-24 06:32:16
49.81.249.112 attackbots
suspicious action Sun, 08 Mar 2020 18:31:39 -0300
2020-03-09 07:48:09
49.81.217.10 attack
Feb 29 23:48:14 grey postfix/smtpd\[9706\]: NOQUEUE: reject: RCPT from unknown\[49.81.217.10\]: 554 5.7.1 Service unavailable\; Client host \[49.81.217.10\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.217.10\]\; from=\ to=\ proto=ESMTP helo=\
...
2020-03-01 08:59:42
49.81.218.209 attackbots
Feb 27 06:46:36 grey postfix/smtpd\[17293\]: NOQUEUE: reject: RCPT from unknown\[49.81.218.209\]: 554 5.7.1 Service unavailable\; Client host \[49.81.218.209\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.218.209\]\; from=\ to=\ proto=ESMTP helo=\
...
2020-02-27 16:21:42
49.81.27.91 attack
Brute force blocker - service: proftpd1 - aantal: 133 - Thu Jul 26 17:00:16 2018
2020-02-24 22:36:33
49.81.201.84 attack
Brute force blocker - service: proftpd1 - aantal: 63 - Sat Jul 28 07:50:15 2018
2020-02-24 22:25:02
49.81.225.41 attackbotsspam
Email rejected due to spam filtering
2020-02-19 08:22:07
49.81.224.149 attackbots
Email rejected due to spam filtering
2020-02-13 06:47:27
49.81.217.239 attackbotsspam
Jan 31 22:33:52 grey postfix/smtpd\[17037\]: NOQUEUE: reject: RCPT from unknown\[49.81.217.239\]: 554 5.7.1 Service unavailable\; Client host \[49.81.217.239\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.217.239\]\; from=\ to=\ proto=SMTP helo=\
...
2020-02-01 07:30:19
49.81.250.18 attack
Unauthorized connection attempt detected from IP address 49.81.250.18 to port 23 [T]
2020-01-16 00:31:33
49.81.230.115 attack
Brute force SMTP login attempts.
2019-12-01 01:40:58
49.81.203.186 attack
Brute force SMTP login attempts.
2019-11-22 18:36:28
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.81.2.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55543
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.81.2.54.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012100 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 21 20:55:35 CST 2025
;; MSG SIZE  rcvd: 103
Host info
Host 54.2.81.49.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 54.2.81.49.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
41.89.162.197 attack
Jun  2 05:42:26 roki-contabo sshd\[8636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.89.162.197  user=root
Jun  2 05:42:28 roki-contabo sshd\[8636\]: Failed password for root from 41.89.162.197 port 48468 ssh2
Jun  2 05:48:20 roki-contabo sshd\[8722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.89.162.197  user=root
Jun  2 05:48:22 roki-contabo sshd\[8722\]: Failed password for root from 41.89.162.197 port 38878 ssh2
Jun  2 05:52:49 roki-contabo sshd\[8791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.89.162.197  user=root
...
2020-06-02 14:34:25
101.26.254.162 attack
Unauthorized SSH login attempts
2020-06-02 14:40:50
116.107.21.154 attackbotsspam
2020-06-0205:48:431jfxut-00014j-9N\<=info@whatsup2013.chH=\(localhost\)[186.179.178.167]:51112P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2971id=2cdb831f143fea193ac432616abe872b08e213ce4c@whatsup2013.chT="toerfanashkhane"forerfanashkhane@gmail.comsuperhip1765@gmail.comalecsegovia2@gmail.com2020-06-0205:47:531jfxu3-0000yq-Uw\<=info@whatsup2013.chH=\(localhost\)[114.237.136.189]:53512P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2966id=2d8396c5cee5303c1b5ee8bb4f88020e3d62513a@whatsup2013.chT="tojamesgray58321"forjamesgray58321@gmail.comzebs850@gmail.comeddie3some@yahoo.com2020-06-0205:51:571jfxxv-0001Fl-L9\<=info@whatsup2013.chH=\(localhost\)[14.164.136.95]:49706P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3002id=878c99cac1ea3f331451e7b440870d0132de9dcd@whatsup2013.chT="tojnm4185"forjnm4185@gmail.comfernandocabrales@gamail.comwaynef029@gmail.com2020-06-0205:52:341jfxyZ-
2020-06-02 14:38:09
45.76.159.148 attackbots
Unauthorized connection attempt from IP address 45.76.159.148 on port 3389
2020-06-02 14:39:29
91.185.186.213 attackbots
Jun  2 05:46:13 server sshd[11433]: Failed password for root from 91.185.186.213 port 35286 ssh2
Jun  2 05:49:47 server sshd[14057]: Failed password for root from 91.185.186.213 port 40004 ssh2
Jun  2 05:53:15 server sshd[16730]: Failed password for root from 91.185.186.213 port 44726 ssh2
2020-06-02 14:17:17
49.233.220.227 attack
Tried sshing with brute force.
2020-06-02 14:24:16
14.164.136.95 attackspambots
2020-06-0205:48:431jfxut-00014j-9N\<=info@whatsup2013.chH=\(localhost\)[186.179.178.167]:51112P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2971id=2cdb831f143fea193ac432616abe872b08e213ce4c@whatsup2013.chT="toerfanashkhane"forerfanashkhane@gmail.comsuperhip1765@gmail.comalecsegovia2@gmail.com2020-06-0205:47:531jfxu3-0000yq-Uw\<=info@whatsup2013.chH=\(localhost\)[114.237.136.189]:53512P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2966id=2d8396c5cee5303c1b5ee8bb4f88020e3d62513a@whatsup2013.chT="tojamesgray58321"forjamesgray58321@gmail.comzebs850@gmail.comeddie3some@yahoo.com2020-06-0205:51:571jfxxv-0001Fl-L9\<=info@whatsup2013.chH=\(localhost\)[14.164.136.95]:49706P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3002id=878c99cac1ea3f331451e7b440870d0132de9dcd@whatsup2013.chT="tojnm4185"forjnm4185@gmail.comfernandocabrales@gamail.comwaynef029@gmail.com2020-06-0205:52:341jfxyZ-
2020-06-02 14:41:40
51.83.33.88 attack
Invalid user user from 51.83.33.88 port 34226
2020-06-02 14:21:20
103.68.68.23 attackbotsspam
Jun  2 08:19:02 piServer sshd[3380]: Failed password for root from 103.68.68.23 port 53396 ssh2
Jun  2 08:23:27 piServer sshd[3890]: Failed password for root from 103.68.68.23 port 59078 ssh2
...
2020-06-02 14:31:45
159.192.246.72 attackbots
20/6/1@23:53:19: FAIL: Alarm-Network address from=159.192.246.72
20/6/1@23:53:19: FAIL: Alarm-Network address from=159.192.246.72
...
2020-06-02 14:14:16
1.124.106.32 attack
Automatic report - XMLRPC Attack
2020-06-02 14:08:46
222.186.175.217 attackbots
Jun  2 08:22:15 minden010 sshd[27416]: Failed password for root from 222.186.175.217 port 49880 ssh2
Jun  2 08:22:18 minden010 sshd[27416]: Failed password for root from 222.186.175.217 port 49880 ssh2
Jun  2 08:22:21 minden010 sshd[27416]: Failed password for root from 222.186.175.217 port 49880 ssh2
Jun  2 08:22:24 minden010 sshd[27416]: Failed password for root from 222.186.175.217 port 49880 ssh2
...
2020-06-02 14:32:41
106.52.109.185 attackspambots
Jun  2 06:51:28 jane sshd[18573]: Failed password for root from 106.52.109.185 port 37386 ssh2
...
2020-06-02 14:23:30
52.231.193.117 attack
(smtpauth) Failed SMTP AUTH login from 52.231.193.117 (KR/South Korea/-): 5 in the last 3600 secs
2020-06-02 14:11:42
103.149.24.208 attack
SSH/22 MH Probe, BF, Hack -
2020-06-02 14:36:46

Recently Reported IPs

118.63.75.54 104.120.121.247 136.252.223.101 103.247.82.34
246.67.51.162 91.141.144.247 49.93.215.86 77.157.143.56
108.183.11.130 151.12.58.144 162.173.247.125 42.173.114.100
192.175.4.225 96.177.140.247 104.55.19.108 40.158.252.27
132.169.19.106 109.215.156.227 98.33.146.36 17.123.187.254