Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Hefei

Region: Anhui

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Unauthorized connection attempt detected from IP address 116.149.240.94 to port 23 [T]
2020-05-06 07:41:00
Comments on same subnet:
IP Type Details Datetime
116.149.240.174 attackbotsspam
Unauthorized connection attempt detected from IP address 116.149.240.174 to port 23 [T]
2020-05-09 02:23:59
116.149.240.209 attackbots
Automatic report - Port Scan Attack
2020-04-06 02:06:45
116.149.240.54 attackspambots
Unauthorized connection attempt detected from IP address 116.149.240.54 to port 23 [T]
2020-03-24 20:13:54
116.149.240.153 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-03-11 07:29:43
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.149.240.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19553
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.149.240.94.			IN	A

;; AUTHORITY SECTION:
.			321	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050502 1800 900 604800 86400

;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 06 07:40:56 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 94.240.149.116.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 94.240.149.116.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
42.119.246.161 attackbots
Honeypot attack, port: 23, PTR: PTR record not found
2019-08-08 07:34:49
88.247.110.88 attackbots
Aug  7 20:57:07 lnxmail61 sshd[16906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.247.110.88
2019-08-08 07:24:03
139.59.190.69 attack
Aug  7 19:45:15 ip-172-31-62-245 sshd\[12909\]: Invalid user admin1 from 139.59.190.69\
Aug  7 19:45:17 ip-172-31-62-245 sshd\[12909\]: Failed password for invalid user admin1 from 139.59.190.69 port 37068 ssh2\
Aug  7 19:49:41 ip-172-31-62-245 sshd\[12932\]: Invalid user laura from 139.59.190.69\
Aug  7 19:49:44 ip-172-31-62-245 sshd\[12932\]: Failed password for invalid user laura from 139.59.190.69 port 33778 ssh2\
Aug  7 19:54:12 ip-172-31-62-245 sshd\[12942\]: Invalid user teamspeak3 from 139.59.190.69\
2019-08-08 06:54:17
190.64.141.18 attackbotsspam
2019-08-07T22:52:28.182442abusebot-2.cloudsearch.cf sshd\[15102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=r190-64-141-18.ir-static.anteldata.net.uy  user=root
2019-08-08 07:17:55
113.200.32.214 attackbotsspam
RDP Bruteforce
2019-08-08 07:09:19
167.99.38.73 attackspam
Aug  8 00:51:34 vmd17057 sshd\[14762\]: Invalid user nathalia from 167.99.38.73 port 50998
Aug  8 00:51:34 vmd17057 sshd\[14762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.38.73
Aug  8 00:51:36 vmd17057 sshd\[14762\]: Failed password for invalid user nathalia from 167.99.38.73 port 50998 ssh2
...
2019-08-08 06:57:07
165.227.92.185 attack
Aug  8 01:03:10 SilenceServices sshd[31775]: Failed password for root from 165.227.92.185 port 48694 ssh2
Aug  8 01:08:33 SilenceServices sshd[5706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.92.185
Aug  8 01:08:35 SilenceServices sshd[5706]: Failed password for invalid user douglas from 165.227.92.185 port 42028 ssh2
2019-08-08 07:15:39
181.174.102.66 attack
Honeypot attack, port: 445, PTR: PTR record not found
2019-08-08 07:40:34
61.177.172.158 attack
Aug  8 02:07:40 server sshd\[7059\]: User root from 61.177.172.158 not allowed because listed in DenyUsers
Aug  8 02:07:41 server sshd\[7059\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.158  user=root
Aug  8 02:07:43 server sshd\[7059\]: Failed password for invalid user root from 61.177.172.158 port 25124 ssh2
Aug  8 02:07:44 server sshd\[7059\]: Failed password for invalid user root from 61.177.172.158 port 25124 ssh2
Aug  8 02:07:47 server sshd\[7059\]: Failed password for invalid user root from 61.177.172.158 port 25124 ssh2
2019-08-08 07:21:21
206.189.119.22 attack
Aug  7 17:52:04 aat-srv002 sshd[20868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.119.22
Aug  7 17:52:06 aat-srv002 sshd[20868]: Failed password for invalid user koha from 206.189.119.22 port 35098 ssh2
Aug  7 17:56:00 aat-srv002 sshd[20983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.119.22
Aug  7 17:56:02 aat-srv002 sshd[20983]: Failed password for invalid user andrew from 206.189.119.22 port 56642 ssh2
...
2019-08-08 07:13:55
176.31.172.40 attackbotsspam
2019-08-08T03:26:42.098479enmeeting.mahidol.ac.th sshd\[11842\]: Invalid user enrique from 176.31.172.40 port 46886
2019-08-08T03:26:42.112967enmeeting.mahidol.ac.th sshd\[11842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.ip-176-31-172.eu
2019-08-08T03:26:44.586668enmeeting.mahidol.ac.th sshd\[11842\]: Failed password for invalid user enrique from 176.31.172.40 port 46886 ssh2
...
2019-08-08 07:38:53
37.26.99.97 attackbots
scan z
2019-08-08 07:04:15
185.142.236.34 attack
Port scan on 4 port(s): 88 4782 44818 50100
2019-08-08 07:26:50
103.232.120.109 attack
Aug  7 18:45:44 TORMINT sshd\[18691\]: Invalid user test2 from 103.232.120.109
Aug  7 18:45:44 TORMINT sshd\[18691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.232.120.109
Aug  7 18:45:45 TORMINT sshd\[18691\]: Failed password for invalid user test2 from 103.232.120.109 port 41496 ssh2
...
2019-08-08 07:07:58
117.93.115.150 attackbotsspam
Aug  7 23:24:46   DDOS Attack: SRC=117.93.115.150 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=51  DF PROTO=TCP SPT=2832 DPT=80 WINDOW=0 RES=0x00 RST URGP=0
2019-08-08 07:44:26

Recently Reported IPs

221.235.25.194 114.241.245.52 115.213.115.198 52.209.178.149
105.170.46.126 114.232.15.220 100.250.146.198 182.116.140.1
59.23.255.173 91.48.222.32 163.118.97.160 152.36.83.220
113.251.219.99 121.143.109.68 52.142.116.218 113.230.10.87
189.2.88.4 218.61.13.239 113.218.131.150 183.32.113.227