Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
49.81.28.57 attackbots
Email rejected due to spam filtering
2020-04-23 21:46:52
49.81.226.119 attack
Email rejected due to spam filtering
2020-04-18 02:40:25
49.81.23.238 attack
port scan and connect, tcp 22 (ssh)
2020-04-12 03:43:07
49.81.218.15 attack
Mar 23 16:37:32 mxgate1 postfix/postscreen[24998]: CONNECT from [49.81.218.15]:1119 to [176.31.12.44]:25
Mar 23 16:37:32 mxgate1 postfix/dnsblog[25001]: addr 49.81.218.15 listed by domain zen.spamhaus.org as 127.0.0.11
Mar 23 16:37:32 mxgate1 postfix/dnsblog[25001]: addr 49.81.218.15 listed by domain zen.spamhaus.org as 127.0.0.4
Mar 23 16:37:32 mxgate1 postfix/dnsblog[25001]: addr 49.81.218.15 listed by domain zen.spamhaus.org as 127.0.0.3
Mar 23 16:37:32 mxgate1 postfix/dnsblog[24999]: addr 49.81.218.15 listed by domain cbl.abuseat.org as 127.0.0.2
Mar 23 16:37:32 mxgate1 postfix/dnsblog[25024]: addr 49.81.218.15 listed by domain b.barracudacentral.org as 127.0.0.2
Mar 23 16:37:38 mxgate1 postfix/postscreen[24998]: DNSBL rank 4 for [49.81.218.15]:1119
Mar x@x
Mar 23 16:37:39 mxgate1 postfix/postscreen[24998]: DISCONNECT [49.81.218.15]:1119


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.81.218.15
2020-03-24 06:32:16
49.81.249.112 attackbots
suspicious action Sun, 08 Mar 2020 18:31:39 -0300
2020-03-09 07:48:09
49.81.217.10 attack
Feb 29 23:48:14 grey postfix/smtpd\[9706\]: NOQUEUE: reject: RCPT from unknown\[49.81.217.10\]: 554 5.7.1 Service unavailable\; Client host \[49.81.217.10\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.217.10\]\; from=\ to=\ proto=ESMTP helo=\
...
2020-03-01 08:59:42
49.81.218.209 attackbots
Feb 27 06:46:36 grey postfix/smtpd\[17293\]: NOQUEUE: reject: RCPT from unknown\[49.81.218.209\]: 554 5.7.1 Service unavailable\; Client host \[49.81.218.209\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.218.209\]\; from=\ to=\ proto=ESMTP helo=\
...
2020-02-27 16:21:42
49.81.27.91 attack
Brute force blocker - service: proftpd1 - aantal: 133 - Thu Jul 26 17:00:16 2018
2020-02-24 22:36:33
49.81.201.84 attack
Brute force blocker - service: proftpd1 - aantal: 63 - Sat Jul 28 07:50:15 2018
2020-02-24 22:25:02
49.81.225.41 attackbotsspam
Email rejected due to spam filtering
2020-02-19 08:22:07
49.81.224.149 attackbots
Email rejected due to spam filtering
2020-02-13 06:47:27
49.81.217.239 attackbotsspam
Jan 31 22:33:52 grey postfix/smtpd\[17037\]: NOQUEUE: reject: RCPT from unknown\[49.81.217.239\]: 554 5.7.1 Service unavailable\; Client host \[49.81.217.239\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.217.239\]\; from=\ to=\ proto=SMTP helo=\
...
2020-02-01 07:30:19
49.81.250.18 attack
Unauthorized connection attempt detected from IP address 49.81.250.18 to port 23 [T]
2020-01-16 00:31:33
49.81.230.115 attack
Brute force SMTP login attempts.
2019-12-01 01:40:58
49.81.203.186 attack
Brute force SMTP login attempts.
2019-11-22 18:36:28
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.81.2.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55543
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.81.2.54.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012100 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 21 20:55:35 CST 2025
;; MSG SIZE  rcvd: 103
Host info
Host 54.2.81.49.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 54.2.81.49.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
49.234.18.158 attackbotsspam
Invalid user jiawen from 49.234.18.158 port 39000
2020-08-02 17:42:40
106.54.241.104 attackspam
Invalid user peizhengmeng from 106.54.241.104 port 48871
2020-08-02 17:57:32
171.244.51.114 attackspambots
SSH Brute-force
2020-08-02 18:06:12
82.118.236.186 attack
Aug  2 11:25:43 vpn01 sshd[31194]: Failed password for root from 82.118.236.186 port 41360 ssh2
...
2020-08-02 18:03:38
89.216.47.154 attackbotsspam
Aug  1 22:42:46 web1 sshd\[23689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.47.154  user=root
Aug  1 22:42:48 web1 sshd\[23689\]: Failed password for root from 89.216.47.154 port 45440 ssh2
Aug  1 22:47:18 web1 sshd\[24071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.47.154  user=root
Aug  1 22:47:20 web1 sshd\[24071\]: Failed password for root from 89.216.47.154 port 51923 ssh2
Aug  1 22:51:50 web1 sshd\[24377\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.47.154  user=root
2020-08-02 17:52:08
87.251.74.25 attack
Aug  2 12:04:10 debian-2gb-nbg1-2 kernel: \[18621126.518728\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=87.251.74.25 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=55100 PROTO=TCP SPT=42018 DPT=1545 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-02 18:12:28
113.104.224.134 attack
Failed password for root from 113.104.224.134 port 16915 ssh2
2020-08-02 17:38:29
95.236.89.79 attackspam
Aug  2 07:43:43 cdc sshd[8646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.236.89.79  user=pi
Aug  2 07:43:45 cdc sshd[8646]: Failed password for invalid user pi from 95.236.89.79 port 48824 ssh2
2020-08-02 17:40:29
49.234.52.176 attack
Invalid user mengzhen from 49.234.52.176 port 37458
2020-08-02 18:13:31
92.255.164.166 attackspambots
Dovecot Invalid User Login Attempt.
2020-08-02 18:10:33
89.248.168.220 attackbots
08/02/2020-05:55:27.858155 89.248.168.220 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2020-08-02 18:04:35
93.47.191.170 attackbotsspam
Automatic report - Banned IP Access
2020-08-02 18:16:31
195.146.59.157 attack
Aug  2 11:17:08 eventyay sshd[429]: Failed password for root from 195.146.59.157 port 52218 ssh2
Aug  2 11:21:08 eventyay sshd[615]: Failed password for root from 195.146.59.157 port 43374 ssh2
...
2020-08-02 18:19:04
140.82.30.233 attack
Aug  2 11:42:06 db sshd[16543]: User root from 140.82.30.233 not allowed because none of user's groups are listed in AllowGroups
...
2020-08-02 17:44:21
2.42.196.30 attackspam
port scan and connect, tcp 23 (telnet)
2020-08-02 17:48:34

Recently Reported IPs

118.63.75.54 104.120.121.247 136.252.223.101 103.247.82.34
246.67.51.162 91.141.144.247 49.93.215.86 77.157.143.56
108.183.11.130 151.12.58.144 162.173.247.125 42.173.114.100
192.175.4.225 96.177.140.247 104.55.19.108 40.158.252.27
132.169.19.106 109.215.156.227 98.33.146.36 17.123.187.254