Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
1.20.149.146 attackbots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-05-02 01:28:49
1.20.149.201 attack
Unauthorised access (Nov  4) SRC=1.20.149.201 LEN=52 TTL=116 ID=7627 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-04 16:53:01
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.149.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46432
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.149.211.			IN	A

;; AUTHORITY SECTION:
.			516	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 82 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 19:58:05 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 211.149.20.1.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 211.149.20.1.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
185.153.198.249 attackbotsspam
Port scan
2019-11-20 20:43:51
113.213.77.49 attackbots
badbot
2019-11-20 20:57:38
101.109.83.140 attack
Nov 20 13:34:34 MK-Soft-Root2 sshd[16145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.109.83.140 
Nov 20 13:34:36 MK-Soft-Root2 sshd[16145]: Failed password for invalid user kursa from 101.109.83.140 port 58490 ssh2
...
2019-11-20 20:58:20
2002:42eb:a933::42eb:a933 attackbotsspam
ENG,WP GET /wp-login.php
2019-11-20 20:33:22
35.223.245.93 attack
Port Scan: TCP/443
2019-11-20 20:48:18
110.49.71.244 attackbots
Invalid user 4e3w2q from 110.49.71.244 port 44356
2019-11-20 20:27:40
117.67.126.255 attackspambots
badbot
2019-11-20 21:00:42
168.194.160.223 attack
Nov 20 02:15:22 linuxvps sshd\[15807\]: Invalid user guest from 168.194.160.223
Nov 20 02:15:22 linuxvps sshd\[15807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.194.160.223
Nov 20 02:15:24 linuxvps sshd\[15807\]: Failed password for invalid user guest from 168.194.160.223 port 49186 ssh2
Nov 20 02:22:46 linuxvps sshd\[20217\]: Invalid user odendaal from 168.194.160.223
Nov 20 02:22:46 linuxvps sshd\[20217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.194.160.223
2019-11-20 21:05:43
62.203.80.247 attack
Nov 20 12:57:38 rotator sshd\[11813\]: Invalid user mysql from 62.203.80.247Nov 20 12:57:40 rotator sshd\[11813\]: Failed password for invalid user mysql from 62.203.80.247 port 37350 ssh2Nov 20 13:02:06 rotator sshd\[12600\]: Invalid user yoyo from 62.203.80.247Nov 20 13:02:08 rotator sshd\[12600\]: Failed password for invalid user yoyo from 62.203.80.247 port 46294 ssh2Nov 20 13:05:43 rotator sshd\[13360\]: Invalid user delhagen from 62.203.80.247Nov 20 13:05:44 rotator sshd\[13360\]: Failed password for invalid user delhagen from 62.203.80.247 port 55232 ssh2
...
2019-11-20 20:31:34
90.125.2.31 attackbots
Nov 20 07:15:01 h2034429 sshd[21931]: Did not receive identification string from 90.125.2.31
Nov 20 07:19:54 h2034429 sshd[21965]: Did not receive identification string from 90.125.2.31


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=90.125.2.31
2019-11-20 20:26:58
58.22.207.224 attackspam
Portscan or hack attempt detected by psad/fwsnort
2019-11-20 20:58:49
203.207.57.116 attackspambots
2019-11-20 06:02:06 H=([203.207.57.116]) [203.207.57.116]:14723 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=203.207.57.116)
2019-11-20 06:02:06 unexpected disconnection while reading SMTP command from ([203.207.57.116]) [203.207.57.116]:14723 I=[10.100.18.22]:25 (error: Connection reset by peer)
2019-11-20 07:20:32 H=([203.207.57.116]) [203.207.57.116]:24380 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=203.207.57.116)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=203.207.57.116
2019-11-20 20:27:22
59.72.112.47 attackbots
2019-11-20T07:40:49.714658abusebot-5.cloudsearch.cf sshd\[6605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.72.112.47  user=root
2019-11-20 20:39:20
182.71.140.6 attackspambots
3389BruteforceFW21
2019-11-20 20:34:31
134.209.237.55 attackbotsspam
Nov 19 22:50:25 kapalua sshd\[15489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55  user=mysql
Nov 19 22:50:27 kapalua sshd\[15489\]: Failed password for mysql from 134.209.237.55 port 44552 ssh2
Nov 19 22:55:52 kapalua sshd\[15927\]: Invalid user sherwan from 134.209.237.55
Nov 19 22:55:52 kapalua sshd\[15927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55
Nov 19 22:55:54 kapalua sshd\[15927\]: Failed password for invalid user sherwan from 134.209.237.55 port 38864 ssh2
2019-11-20 20:46:30

Recently Reported IPs

1.20.149.207 135.84.21.190 1.20.149.213 1.20.149.217
1.20.149.226 1.20.149.228 1.20.149.241 1.20.149.3
1.20.149.34 1.20.149.43 42.177.78.9 1.20.149.51
1.20.149.72 1.20.149.76 1.20.149.81 52.217.171.197
1.20.149.85 1.20.149.97 1.20.149.98 1.20.150.104