49.81.2.54 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
49.81.28.57	attackbots	Email rejected due to spam filtering	2020-04-23 21:46:52
49.81.226.119	attack	Email rejected due to spam filtering	2020-04-18 02:40:25
49.81.23.238	attack	port scan and connect, tcp 22 (ssh)	2020-04-12 03:43:07
49.81.218.15	attack	Mar 23 16:37:32 mxgate1 postfix/postscreen[24998]: CONNECT from [49.81.218.15]:1119 to [176.31.12.44]:25 Mar 23 16:37:32 mxgate1 postfix/dnsblog[25001]: addr 49.81.218.15 listed by domain zen.spamhaus.org as 127.0.0.11 Mar 23 16:37:32 mxgate1 postfix/dnsblog[25001]: addr 49.81.218.15 listed by domain zen.spamhaus.org as 127.0.0.4 Mar 23 16:37:32 mxgate1 postfix/dnsblog[25001]: addr 49.81.218.15 listed by domain zen.spamhaus.org as 127.0.0.3 Mar 23 16:37:32 mxgate1 postfix/dnsblog[24999]: addr 49.81.218.15 listed by domain cbl.abuseat.org as 127.0.0.2 Mar 23 16:37:32 mxgate1 postfix/dnsblog[25024]: addr 49.81.218.15 listed by domain b.barracudacentral.org as 127.0.0.2 Mar 23 16:37:38 mxgate1 postfix/postscreen[24998]: DNSBL rank 4 for [49.81.218.15]:1119 Mar x@x Mar 23 16:37:39 mxgate1 postfix/postscreen[24998]: DISCONNECT [49.81.218.15]:1119 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.81.218.15	2020-03-24 06:32:16
49.81.249.112	attackbots	suspicious action Sun, 08 Mar 2020 18:31:39 -0300	2020-03-09 07:48:09
49.81.217.10	attack	Feb 29 23:48:14 grey postfix/smtpd\[9706\]: NOQUEUE: reject: RCPT from unknown\[49.81.217.10\]: 554 5.7.1 Service unavailable\; Client host \[49.81.217.10\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.217.10\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-03-01 08:59:42
49.81.218.209	attackbots	Feb 27 06:46:36 grey postfix/smtpd\[17293\]: NOQUEUE: reject: RCPT from unknown\[49.81.218.209\]: 554 5.7.1 Service unavailable\; Client host \[49.81.218.209\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.218.209\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-27 16:21:42
49.81.27.91	attack	Brute force blocker - service: proftpd1 - aantal: 133 - Thu Jul 26 17:00:16 2018	2020-02-24 22:36:33
49.81.201.84	attack	Brute force blocker - service: proftpd1 - aantal: 63 - Sat Jul 28 07:50:15 2018	2020-02-24 22:25:02
49.81.225.41	attackbotsspam	Email rejected due to spam filtering	2020-02-19 08:22:07
49.81.224.149	attackbots	Email rejected due to spam filtering	2020-02-13 06:47:27
49.81.217.239	attackbotsspam	Jan 31 22:33:52 grey postfix/smtpd\[17037\]: NOQUEUE: reject: RCPT from unknown\[49.81.217.239\]: 554 5.7.1 Service unavailable\; Client host \[49.81.217.239\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.217.239\]\; from=\ to=\ proto=SMTP helo=\ ...	2020-02-01 07:30:19
49.81.250.18	attack	Unauthorized connection attempt detected from IP address 49.81.250.18 to port 23 [T]	2020-01-16 00:31:33
49.81.230.115	attack	Brute force SMTP login attempts.	2019-12-01 01:40:58
49.81.203.186	attack	Brute force SMTP login attempts.	2019-11-22 18:36:28

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.81.2.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55543
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.81.2.54.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012100 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 21 20:55:35 CST 2025
;; MSG SIZE  rcvd: 103

Host info

Host 54.2.81.49.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 54.2.81.49.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
35.176.119.158	attack	Time: Fri Jan 31 18:24:40 2020 -0300 IP: 35.176.119.158 (GB/United Kingdom/ec2-35-176-119-158.eu-west-2.compute.amazonaws.com) Failures: 5 (mod_security) Interval: 3600 seconds Blocked: Permanent Block	2020-02-01 11:01:32
52.79.150.118	attackspambots	Time: Fri Jan 31 18:23:19 2020 -0300 IP: 52.79.150.118 (KR/South Korea/ec2-52-79-150-118.ap-northeast-2.compute.amazonaws.com) Failures: 5 (mod_security) Interval: 3600 seconds Blocked: Permanent Block	2020-02-01 11:00:19
81.22.45.83	attackbotsspam	SNORT TCP Port: 3389 Classtype misc-attack - ET DROP Dshield Block Listed Source group 1 - - Destination xx.xx.4.1 Port: 3389 - - Source 81.22.45.83 Port: 56127 (Listed on zen-spamhaus) (16)	2020-02-01 10:59:44
103.143.173.25	attackspam	Brute-force general attack.	2020-02-01 13:26:23
190.152.154.5	attackbotsspam	Unauthorized connection attempt detected from IP address 190.152.154.5 to port 2220 [J]	2020-02-01 13:22:47
88.132.66.26	attack	Unauthorized connection attempt detected from IP address 88.132.66.26 to port 2220 [J]	2020-02-01 13:20:51
94.25.177.240	attack	Unauthorized connection attempt from IP address 94.25.177.240 on Port 445(SMB)	2020-02-01 11:03:38
103.214.229.236	attack	port scan and connect, tcp 1433 (ms-sql-s)	2020-02-01 10:54:01
185.32.222.16	attackspam	Automatic report - Banned IP Access	2020-02-01 10:47:32
106.52.107.81	attack	Unauthorized connection attempt detected from IP address 106.52.107.81 to port 80 [J]	2020-02-01 10:50:19
13.211.40.250	attackbots	B: File scanning	2020-02-01 13:24:10
84.33.120.126	attackspam	firewall-block, port(s): 80/tcp	2020-02-01 10:56:07
89.248.168.217	attack	02/01/2020-05:58:15.855101 89.248.168.217 Protocol: 17 ET DROP Dshield Block Listed Source group 1	2020-02-01 13:26:43
80.66.81.86	attack	2020-02-01 06:11:22 dovecot_login authenticator failed for \(host86.at-sib.ru.\) \[80.66.81.86\]: 535 Incorrect authentication data \(set_id=c@no-server.de\) 2020-02-01 06:11:32 dovecot_login authenticator failed for \(host86.at-sib.ru.\) \[80.66.81.86\]: 535 Incorrect authentication data \(set_id=c\) 2020-02-01 06:17:07 dovecot_login authenticator failed for \(host86.at-sib.ru.\) \[80.66.81.86\]: 535 Incorrect authentication data \(set_id=adm1n@no-server.de\) 2020-02-01 06:17:17 dovecot_login authenticator failed for \(host86.at-sib.ru.\) \[80.66.81.86\]: 535 Incorrect authentication data 2020-02-01 06:17:28 dovecot_login authenticator failed for \(host86.at-sib.ru.\) \[80.66.81.86\]: 535 Incorrect authentication data ...	2020-02-01 13:27:40
46.166.142.103	attackspambots	[2020-01-31 23:57:42] NOTICE[1148][C-00004963] chan_sip.c: Call from '' (46.166.142.103:53760) to extension '2411011441224928780' rejected because extension not found in context 'public'. [2020-01-31 23:57:42] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-31T23:57:42.797-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="2411011441224928780",SessionID="0x7fd82cfcf5b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.142.103/53760",ACLName="no_extension_match" [2020-01-31 23:58:41] NOTICE[1148][C-00004965] chan_sip.c: Call from '' (46.166.142.103:59665) to extension '2421011441224928780' rejected because extension not found in context 'public'. [2020-01-31 23:58:41] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-31T23:58:41.513-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="2421011441224928780",SessionID="0x7fd82cd25138",LocalAddress="IPV4/UDP/192.168.244.6/5060",Remot ...	2020-02-01 13:08:41

Recently Reported IPs

118.63.75.54	104.120.121.247	136.252.223.101	103.247.82.34
246.67.51.162	91.141.144.247	49.93.215.86	77.157.143.56
108.183.11.130	151.12.58.144	162.173.247.125	42.173.114.100
192.175.4.225	96.177.140.247	104.55.19.108	40.158.252.27
132.169.19.106	109.215.156.227	98.33.146.36	17.123.187.254