Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
1.20.149.146 attackbots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-05-02 01:28:49
1.20.149.201 attack
Unauthorised access (Nov  4) SRC=1.20.149.201 LEN=52 TTL=116 ID=7627 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-04 16:53:01
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.149.81
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34707
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.149.81.			IN	A

;; AUTHORITY SECTION:
.			419	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 76 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 19:58:47 CST 2022
;; MSG SIZE  rcvd: 104
Host info
Host 81.149.20.1.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 81.149.20.1.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
106.251.118.119 attackbotsspam
Aug  6 11:51:00 lcl-usvr-01 sshd[26273]: Invalid user joy from 106.251.118.119
Aug  6 11:51:00 lcl-usvr-01 sshd[26273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.251.118.119 
Aug  6 11:51:00 lcl-usvr-01 sshd[26273]: Invalid user joy from 106.251.118.119
Aug  6 11:51:02 lcl-usvr-01 sshd[26273]: Failed password for invalid user joy from 106.251.118.119 port 35294 ssh2
Aug  6 12:00:30 lcl-usvr-01 sshd[31306]: Invalid user testuser from 106.251.118.119
2019-08-06 15:52:55
182.61.41.153 attack
Aug  6 11:41:35 lcl-usvr-02 sshd[2522]: Invalid user france from 182.61.41.153 port 44886
Aug  6 11:41:35 lcl-usvr-02 sshd[2522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.41.153
Aug  6 11:41:35 lcl-usvr-02 sshd[2522]: Invalid user france from 182.61.41.153 port 44886
Aug  6 11:41:37 lcl-usvr-02 sshd[2522]: Failed password for invalid user france from 182.61.41.153 port 44886 ssh2
Aug  6 11:47:59 lcl-usvr-02 sshd[4000]: Invalid user deploy from 182.61.41.153 port 36600
...
2019-08-06 15:43:19
41.33.108.116 attackspam
2019-08-06T08:40:17.471246lon01.zurich-datacenter.net sshd\[18768\]: Invalid user monitor from 41.33.108.116 port 46008
2019-08-06T08:40:17.479615lon01.zurich-datacenter.net sshd\[18768\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.33.108.116
2019-08-06T08:40:19.390637lon01.zurich-datacenter.net sshd\[18768\]: Failed password for invalid user monitor from 41.33.108.116 port 46008 ssh2
2019-08-06T08:45:47.192292lon01.zurich-datacenter.net sshd\[18863\]: Invalid user ftpimmo from 41.33.108.116 port 39319
2019-08-06T08:45:47.199317lon01.zurich-datacenter.net sshd\[18863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.33.108.116
...
2019-08-06 15:31:46
195.39.196.253 attackspam
0,61-02/33 [bc01/m128] concatform PostRequest-Spammer scoring: essen
2019-08-06 15:42:22
62.234.97.45 attack
Aug  6 08:01:34 www sshd\[53625\]: Invalid user teamspeak1 from 62.234.97.45
Aug  6 08:01:34 www sshd\[53625\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.97.45
Aug  6 08:01:35 www sshd\[53625\]: Failed password for invalid user teamspeak1 from 62.234.97.45 port 59935 ssh2
...
2019-08-06 14:57:18
77.247.109.30 attackbots
Scanning (more than 2 packets) random ports - tries to find possible vulnerable services
2019-08-06 15:21:34
183.105.217.170 attack
Aug  6 07:41:53 areeb-Workstation sshd\[20337\]: Invalid user vbox from 183.105.217.170
Aug  6 07:41:53 areeb-Workstation sshd\[20337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.105.217.170
Aug  6 07:41:55 areeb-Workstation sshd\[20337\]: Failed password for invalid user vbox from 183.105.217.170 port 51563 ssh2
...
2019-08-06 14:48:40
171.25.193.78 attackspam
Aug  6 07:09:11 ubuntu-2gb-nbg1-dc3-1 sshd[18420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.25.193.78
Aug  6 07:09:13 ubuntu-2gb-nbg1-dc3-1 sshd[18420]: Failed password for invalid user administrator from 171.25.193.78 port 18645 ssh2
...
2019-08-06 15:23:49
97.87.244.154 attackbotsspam
Aug  6 05:09:51 www_kotimaassa_fi sshd[19333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=97.87.244.154
Aug  6 05:09:53 www_kotimaassa_fi sshd[19333]: Failed password for invalid user ftpuser from 97.87.244.154 port 40848 ssh2
...
2019-08-06 14:55:41
5.23.79.3 attackbots
Aug  6 07:37:09 dev0-dcde-rnet sshd[26036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.23.79.3
Aug  6 07:37:11 dev0-dcde-rnet sshd[26036]: Failed password for invalid user pdey from 5.23.79.3 port 45351 ssh2
Aug  6 07:41:48 dev0-dcde-rnet sshd[26073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.23.79.3
2019-08-06 15:02:24
176.56.236.21 attackbotsspam
Aug  5 14:17:45 server6 sshd[12879]: Address 176.56.236.21 maps to alexjj.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Aug  5 14:17:45 server6 sshd[12879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.56.236.21  user=r.r
Aug  5 14:17:47 server6 sshd[12879]: Failed password for r.r from 176.56.236.21 port 34930 ssh2
Aug  5 14:17:47 server6 sshd[12879]: Received disconnect from 176.56.236.21: 11: Bye Bye [preauth]
Aug  5 14:28:03 server6 sshd[23463]: Address 176.56.236.21 maps to alexjj.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Aug  5 14:28:06 server6 sshd[23463]: Failed password for invalid user bronic from 176.56.236.21 port 56946 ssh2
Aug  5 14:28:06 server6 sshd[23463]: Received disconnect from 176.56.236.21: 11: Bye Bye [preauth]
Aug  5 14:32:42 server6 sshd[27760]: Address 176.56.236.21 maps to alexjj.com, but this does not map back to the address - POSSIB........
-------------------------------
2019-08-06 15:43:57
190.152.208.250 attack
WordPress wp-login brute force :: 190.152.208.250 0.608 BYPASS [06/Aug/2019:11:28:08  1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-08-06 15:51:54
185.176.27.30 attack
Port scan on 3 port(s): 3603 3878 4230
2019-08-06 15:49:35
51.15.51.2 attack
Aug  6 06:23:27 ip-172-31-62-245 sshd\[28434\]: Invalid user user1 from 51.15.51.2\
Aug  6 06:23:29 ip-172-31-62-245 sshd\[28434\]: Failed password for invalid user user1 from 51.15.51.2 port 57194 ssh2\
Aug  6 06:28:09 ip-172-31-62-245 sshd\[28498\]: Invalid user neil from 51.15.51.2\
Aug  6 06:28:10 ip-172-31-62-245 sshd\[28498\]: Failed password for invalid user neil from 51.15.51.2 port 52368 ssh2\
Aug  6 06:33:01 ip-172-31-62-245 sshd\[28521\]: Failed password for root from 51.15.51.2 port 47730 ssh2\
2019-08-06 15:41:41
106.13.138.162 attackspam
Aug  6 06:49:51 server sshd\[12285\]: Invalid user pid from 106.13.138.162 port 35130
Aug  6 06:49:51 server sshd\[12285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
Aug  6 06:49:53 server sshd\[12285\]: Failed password for invalid user pid from 106.13.138.162 port 35130 ssh2
Aug  6 06:54:55 server sshd\[26879\]: Invalid user mcserver from 106.13.138.162 port 50032
Aug  6 06:54:55 server sshd\[26879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
2019-08-06 15:44:49

Recently Reported IPs

1.20.149.76 52.217.171.197 1.20.149.85 1.20.149.97
1.20.149.98 1.20.150.104 1.20.150.138 1.20.150.150
1.20.150.158 1.20.150.38 1.20.150.41 1.20.150.46
1.20.150.49 1.20.150.5 1.20.150.85 1.20.150.95
1.20.151.12 1.20.151.63 1.20.152.175 1.20.152.193