49.81.2.54 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
49.81.28.57	attackbots	Email rejected due to spam filtering	2020-04-23 21:46:52
49.81.226.119	attack	Email rejected due to spam filtering	2020-04-18 02:40:25
49.81.23.238	attack	port scan and connect, tcp 22 (ssh)	2020-04-12 03:43:07
49.81.218.15	attack	Mar 23 16:37:32 mxgate1 postfix/postscreen[24998]: CONNECT from [49.81.218.15]:1119 to [176.31.12.44]:25 Mar 23 16:37:32 mxgate1 postfix/dnsblog[25001]: addr 49.81.218.15 listed by domain zen.spamhaus.org as 127.0.0.11 Mar 23 16:37:32 mxgate1 postfix/dnsblog[25001]: addr 49.81.218.15 listed by domain zen.spamhaus.org as 127.0.0.4 Mar 23 16:37:32 mxgate1 postfix/dnsblog[25001]: addr 49.81.218.15 listed by domain zen.spamhaus.org as 127.0.0.3 Mar 23 16:37:32 mxgate1 postfix/dnsblog[24999]: addr 49.81.218.15 listed by domain cbl.abuseat.org as 127.0.0.2 Mar 23 16:37:32 mxgate1 postfix/dnsblog[25024]: addr 49.81.218.15 listed by domain b.barracudacentral.org as 127.0.0.2 Mar 23 16:37:38 mxgate1 postfix/postscreen[24998]: DNSBL rank 4 for [49.81.218.15]:1119 Mar x@x Mar 23 16:37:39 mxgate1 postfix/postscreen[24998]: DISCONNECT [49.81.218.15]:1119 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.81.218.15	2020-03-24 06:32:16
49.81.249.112	attackbots	suspicious action Sun, 08 Mar 2020 18:31:39 -0300	2020-03-09 07:48:09
49.81.217.10	attack	Feb 29 23:48:14 grey postfix/smtpd\[9706\]: NOQUEUE: reject: RCPT from unknown\[49.81.217.10\]: 554 5.7.1 Service unavailable\; Client host \[49.81.217.10\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.217.10\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-03-01 08:59:42
49.81.218.209	attackbots	Feb 27 06:46:36 grey postfix/smtpd\[17293\]: NOQUEUE: reject: RCPT from unknown\[49.81.218.209\]: 554 5.7.1 Service unavailable\; Client host \[49.81.218.209\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.218.209\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-27 16:21:42
49.81.27.91	attack	Brute force blocker - service: proftpd1 - aantal: 133 - Thu Jul 26 17:00:16 2018	2020-02-24 22:36:33
49.81.201.84	attack	Brute force blocker - service: proftpd1 - aantal: 63 - Sat Jul 28 07:50:15 2018	2020-02-24 22:25:02
49.81.225.41	attackbotsspam	Email rejected due to spam filtering	2020-02-19 08:22:07
49.81.224.149	attackbots	Email rejected due to spam filtering	2020-02-13 06:47:27
49.81.217.239	attackbotsspam	Jan 31 22:33:52 grey postfix/smtpd\[17037\]: NOQUEUE: reject: RCPT from unknown\[49.81.217.239\]: 554 5.7.1 Service unavailable\; Client host \[49.81.217.239\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.217.239\]\; from=\ to=\ proto=SMTP helo=\ ...	2020-02-01 07:30:19
49.81.250.18	attack	Unauthorized connection attempt detected from IP address 49.81.250.18 to port 23 [T]	2020-01-16 00:31:33
49.81.230.115	attack	Brute force SMTP login attempts.	2019-12-01 01:40:58
49.81.203.186	attack	Brute force SMTP login attempts.	2019-11-22 18:36:28

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.81.2.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55543
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.81.2.54.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012100 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 21 20:55:35 CST 2025
;; MSG SIZE  rcvd: 103

Host info

Host 54.2.81.49.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 54.2.81.49.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.234.18.158	attackbotsspam	Invalid user jiawen from 49.234.18.158 port 39000	2020-08-02 17:42:40
106.54.241.104	attackspam	Invalid user peizhengmeng from 106.54.241.104 port 48871	2020-08-02 17:57:32
171.244.51.114	attackspambots	SSH Brute-force	2020-08-02 18:06:12
82.118.236.186	attack	Aug 2 11:25:43 vpn01 sshd[31194]: Failed password for root from 82.118.236.186 port 41360 ssh2 ...	2020-08-02 18:03:38
89.216.47.154	attackbotsspam	Aug 1 22:42:46 web1 sshd\[23689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.47.154 user=root Aug 1 22:42:48 web1 sshd\[23689\]: Failed password for root from 89.216.47.154 port 45440 ssh2 Aug 1 22:47:18 web1 sshd\[24071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.47.154 user=root Aug 1 22:47:20 web1 sshd\[24071\]: Failed password for root from 89.216.47.154 port 51923 ssh2 Aug 1 22:51:50 web1 sshd\[24377\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.47.154 user=root	2020-08-02 17:52:08
87.251.74.25	attack	Aug 2 12:04:10 debian-2gb-nbg1-2 kernel: \[18621126.518728\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=87.251.74.25 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=55100 PROTO=TCP SPT=42018 DPT=1545 WINDOW=1024 RES=0x00 SYN URGP=0	2020-08-02 18:12:28
113.104.224.134	attack	Failed password for root from 113.104.224.134 port 16915 ssh2	2020-08-02 17:38:29
95.236.89.79	attackspam	Aug 2 07:43:43 cdc sshd[8646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.236.89.79 user=pi Aug 2 07:43:45 cdc sshd[8646]: Failed password for invalid user pi from 95.236.89.79 port 48824 ssh2	2020-08-02 17:40:29
49.234.52.176	attack	Invalid user mengzhen from 49.234.52.176 port 37458	2020-08-02 18:13:31
92.255.164.166	attackspambots	Dovecot Invalid User Login Attempt.	2020-08-02 18:10:33
89.248.168.220	attackbots	08/02/2020-05:55:27.858155 89.248.168.220 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-08-02 18:04:35
93.47.191.170	attackbotsspam	Automatic report - Banned IP Access	2020-08-02 18:16:31
195.146.59.157	attack	Aug 2 11:17:08 eventyay sshd[429]: Failed password for root from 195.146.59.157 port 52218 ssh2 Aug 2 11:21:08 eventyay sshd[615]: Failed password for root from 195.146.59.157 port 43374 ssh2 ...	2020-08-02 18:19:04
140.82.30.233	attack	Aug 2 11:42:06 db sshd[16543]: User root from 140.82.30.233 not allowed because none of user's groups are listed in AllowGroups ...	2020-08-02 17:44:21
2.42.196.30	attackspam	port scan and connect, tcp 23 (telnet)	2020-08-02 17:48:34

Recently Reported IPs

118.63.75.54	104.120.121.247	136.252.223.101	103.247.82.34
246.67.51.162	91.141.144.247	49.93.215.86	77.157.143.56
108.183.11.130	151.12.58.144	162.173.247.125	42.173.114.100
192.175.4.225	96.177.140.247	104.55.19.108	40.158.252.27
132.169.19.106	109.215.156.227	98.33.146.36	17.123.187.254