Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
1.20.149.146 attackbots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-05-02 01:28:49
1.20.149.201 attack
Unauthorised access (Nov  4) SRC=1.20.149.201 LEN=52 TTL=116 ID=7627 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-04 16:53:01
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.149.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33500
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.149.19.			IN	A

;; AUTHORITY SECTION:
.			307	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 139 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 19:57:54 CST 2022
;; MSG SIZE  rcvd: 104
Host info
Host 19.149.20.1.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 19.149.20.1.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
202.191.132.153 attack
Nov 10 07:29:34 mc1 kernel: \[4653660.405318\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=202.191.132.153 DST=159.69.205.51 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=19696 DF PROTO=TCP SPT=38540 DPT=7001 WINDOW=14600 RES=0x00 SYN URGP=0 
Nov 10 07:29:35 mc1 kernel: \[4653661.407713\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=202.191.132.153 DST=159.69.205.51 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=19697 DF PROTO=TCP SPT=38540 DPT=7001 WINDOW=14600 RES=0x00 SYN URGP=0 
Nov 10 07:29:35 mc1 kernel: \[4653661.418019\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=202.191.132.153 DST=159.69.205.51 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=59830 DF PROTO=TCP SPT=58804 DPT=8080 WINDOW=14600 RES=0x00 SYN URGP=0 
...
2019-11-10 17:03:59
202.73.9.76 attack
2019-11-10T09:08:14.000038shield sshd\[9336\]: Invalid user user12345 from 202.73.9.76 port 41775
2019-11-10T09:08:14.004643shield sshd\[9336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=smartspace.wenet.my
2019-11-10T09:08:15.901102shield sshd\[9336\]: Failed password for invalid user user12345 from 202.73.9.76 port 41775 ssh2
2019-11-10T09:12:15.945090shield sshd\[9840\]: Invalid user catalin123 from 202.73.9.76 port 56523
2019-11-10T09:12:15.949304shield sshd\[9840\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=smartspace.wenet.my
2019-11-10 17:25:37
96.39.64.150 attackbots
Automatic report - Banned IP Access
2019-11-10 16:56:47
106.12.100.184 attackspam
2019-11-10 08:29:45,953 fail2ban.actions: WARNING [ssh] Ban 106.12.100.184
2019-11-10 16:55:35
66.249.65.127 attack
Automatic report - Banned IP Access
2019-11-10 17:27:34
88.214.26.102 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-10 17:04:19
157.245.118.236 attackspam
Nov  7 23:06:47 HOST sshd[8335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.118.236  user=r.r
Nov  7 23:06:49 HOST sshd[8335]: Failed password for r.r from 157.245.118.236 port 47630 ssh2
Nov  7 23:06:49 HOST sshd[8335]: Received disconnect from 157.245.118.236: 11: Bye Bye [preauth]
Nov  7 23:17:18 HOST sshd[8652]: Failed password for invalid user radmin from 157.245.118.236 port 54214 ssh2
Nov  7 23:17:18 HOST sshd[8652]: Received disconnect from 157.245.118.236: 11: Bye Bye [preauth]
Nov  7 23:21:43 HOST sshd[8750]: Failed password for invalid user ankhostname from 157.245.118.236 port 38976 ssh2
Nov  7 23:21:43 HOST sshd[8750]: Received disconnect from 157.245.118.236: 11: Bye Bye [preauth]
Nov  7 23:26:01 HOST sshd[8856]: Failed password for invalid user xw from 157.245.118.236 port 51968 ssh2
Nov  7 23:26:01 HOST sshd[8856]: Received disconnect from 157.245.118.236: 11: Bye Bye [preauth]


........
-----------------------------------------------
https
2019-11-10 17:19:04
168.232.197.11 attack
Nov 10 08:22:40 localhost sshd\[23438\]: Invalid user deploy from 168.232.197.11 port 45162
Nov 10 08:22:40 localhost sshd\[23438\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.197.11
Nov 10 08:22:42 localhost sshd\[23438\]: Failed password for invalid user deploy from 168.232.197.11 port 45162 ssh2
2019-11-10 17:11:43
32.209.196.140 attackspambots
Nov 10 09:34:17 vps01 sshd[16365]: Failed password for root from 32.209.196.140 port 48386 ssh2
2019-11-10 17:04:40
31.210.65.150 attack
Nov 10 08:19:26 web8 sshd\[12199\]: Invalid user khelms123 from 31.210.65.150
Nov 10 08:19:27 web8 sshd\[12199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.210.65.150
Nov 10 08:19:29 web8 sshd\[12199\]: Failed password for invalid user khelms123 from 31.210.65.150 port 47281 ssh2
Nov 10 08:23:48 web8 sshd\[15753\]: Invalid user huihui778899 from 31.210.65.150
Nov 10 08:23:48 web8 sshd\[15753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.210.65.150
2019-11-10 17:17:52
121.139.230.97 attackbotsspam
Nov 10 07:29:06  exim[7935]: 2019-11-10 07:29:06 1iTgia-00023z-LS H=([121.139.230.97]) [121.139.230.97] F= rejected after DATA: This message scored 11.6 spam points.
2019-11-10 16:50:04
78.37.31.216 attackbots
11/10/2019-08:27:38.683195 78.37.31.216 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2019-11-10 17:16:41
94.177.250.221 attackspambots
Nov 10 10:49:50 sauna sshd[106538]: Failed password for root from 94.177.250.221 port 56462 ssh2
Nov 10 10:53:41 sauna sshd[106591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.250.221
...
2019-11-10 17:12:05
217.182.77.186 attack
Nov 10 08:44:56 venus sshd\[25000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.77.186  user=root
Nov 10 08:44:58 venus sshd\[25000\]: Failed password for root from 217.182.77.186 port 59574 ssh2
Nov 10 08:48:25 venus sshd\[25056\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.77.186  user=root
...
2019-11-10 16:54:31
218.235.29.87 attackspam
Nov 10 09:15:18 vtv3 sshd\[31032\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.235.29.87  user=root
Nov 10 09:15:19 vtv3 sshd\[31032\]: Failed password for root from 218.235.29.87 port 51360 ssh2
Nov 10 09:19:27 vtv3 sshd\[911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.235.29.87  user=root
Nov 10 09:19:29 vtv3 sshd\[911\]: Failed password for root from 218.235.29.87 port 59880 ssh2
Nov 10 09:23:40 vtv3 sshd\[3577\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.235.29.87  user=root
Nov 10 09:37:28 vtv3 sshd\[12313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.235.29.87  user=root
Nov 10 09:37:30 vtv3 sshd\[12313\]: Failed password for root from 218.235.29.87 port 37530 ssh2
Nov 10 09:42:10 vtv3 sshd\[15260\]: Invalid user 1234 from 218.235.29.87 port 46064
Nov 10 09:42:10 vtv3 sshd\[15260\]: pam_unix\(ssh
2019-11-10 17:28:19

Recently Reported IPs

78.205.134.164 1.20.149.204 1.20.149.207 1.20.149.211
135.84.21.190 1.20.149.213 1.20.149.217 1.20.149.226
1.20.149.228 1.20.149.241 1.20.149.3 1.20.149.34
1.20.149.43 42.177.78.9 1.20.149.51 1.20.149.72
1.20.149.76 1.20.149.81 52.217.171.197 1.20.149.85