Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
149.20.241.14 attack
Automatic report - Banned IP Access
2019-10-28 13:14:41
149.20.241.14 attack
(From noreply@gplforest1833.online) Hello There,

Are you utilizing Wordpress/Woocommerce or perhaps do you plan to use it sometime soon ? We offer over 2500 premium plugins but also themes entirely free to get : http://ripply.xyz/Oe3pu

Thanks,

Austin
2019-10-18 17:11:18
149.20.241.14 attack
(From noreply@gplforest4531.news) Hello,

Are you currently working with Wordpress/Woocommerce or perhaps do you think to use it eventually ? We provide much more than 2500 premium plugins but also themes 100 percent free to get : http://shortu.xyz/9woW1

Thank You,

Sonia
2019-10-12 20:43:42
149.20.241.14 attackspam
(From noreply@gplforest8963.site) Hi There,

Are you presently working with Wordpress/Woocommerce or perhaps do you intend to use it as time goes by ? We provide much more than 2500 premium plugins and additionally themes totally free to download : http://unfic.xyz/wKF0x

Regards,

Kareem
2019-10-08 14:31:38
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.20.24.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49280
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;149.20.24.44.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012401 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 25 03:41:47 CST 2025
;; MSG SIZE  rcvd: 105
Host info
Host 44.24.20.149.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 44.24.20.149.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
49.232.55.161 attackbotsspam
Sep  7 12:55:43 Host-KEWR-E sshd[227570]: User root from 49.232.55.161 not allowed because not listed in AllowUsers
...
2020-09-08 04:42:29
23.129.64.180 attack
Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-09-08 04:33:45
91.144.162.118 attackbots
Sep  7 18:47:20 ovpn sshd\[14882\]: Invalid user ps3 from 91.144.162.118
Sep  7 18:47:20 ovpn sshd\[14882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.144.162.118
Sep  7 18:47:21 ovpn sshd\[14882\]: Failed password for invalid user ps3 from 91.144.162.118 port 40444 ssh2
Sep  7 19:03:50 ovpn sshd\[19011\]: Invalid user lreyes from 91.144.162.118
Sep  7 19:03:50 ovpn sshd\[19011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.144.162.118
2020-09-08 04:47:08
201.17.28.14 attackspambots
Unauthorized connection attempt from IP address 201.17.28.14 on Port 445(SMB)
2020-09-08 04:14:01
106.12.252.212 attackbots
Icarus honeypot on github
2020-09-08 04:42:15
222.186.180.147 attack
2020-09-07T22:43:08.764730centos sshd[12538]: Failed password for root from 222.186.180.147 port 62350 ssh2
2020-09-07T22:43:12.220054centos sshd[12538]: Failed password for root from 222.186.180.147 port 62350 ssh2
2020-09-07T22:43:15.547342centos sshd[12538]: Failed password for root from 222.186.180.147 port 62350 ssh2
...
2020-09-08 04:48:13
103.78.122.171 attackspam
Attempted connection to port 56422.
2020-09-08 04:20:04
46.161.120.217 attack
Honeypot attack, port: 445, PTR: adsl-46-161-120217.crnagora.net.
2020-09-08 04:22:25
49.235.132.88 attackspam
2020-09-08T00:59:01.572538hostname sshd[124459]: Failed password for root from 49.235.132.88 port 35816 ssh2
2020-09-08T01:03:48.808750hostname sshd[128580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.132.88  user=root
2020-09-08T01:03:50.464314hostname sshd[128580]: Failed password for root from 49.235.132.88 port 59098 ssh2
...
2020-09-08 04:47:50
92.81.222.217 attackbotsspam
Sep  7 20:04:21 fhem-rasp sshd[25082]: Failed password for root from 92.81.222.217 port 36048 ssh2
Sep  7 20:04:23 fhem-rasp sshd[25082]: Disconnected from authenticating user root 92.81.222.217 port 36048 [preauth]
...
2020-09-08 04:20:31
104.248.160.58 attack
Sep  7 15:56:24 firewall sshd[24628]: Failed password for root from 104.248.160.58 port 48356 ssh2
Sep  7 15:59:35 firewall sshd[24779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.160.58  user=root
Sep  7 15:59:37 firewall sshd[24779]: Failed password for root from 104.248.160.58 port 53782 ssh2
...
2020-09-08 04:28:12
85.193.110.103 attackbots
Tried our host z.
2020-09-08 04:21:56
150.117.208.74 attackbotsspam
Attempted connection to port 23.
2020-09-08 04:16:16
112.85.42.200 attackbotsspam
Sep  7 22:29:46 vps1 sshd[7239]: Failed none for invalid user root from 112.85.42.200 port 36155 ssh2
Sep  7 22:29:46 vps1 sshd[7239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.200  user=root
Sep  7 22:29:48 vps1 sshd[7239]: Failed password for invalid user root from 112.85.42.200 port 36155 ssh2
Sep  7 22:29:53 vps1 sshd[7239]: Failed password for invalid user root from 112.85.42.200 port 36155 ssh2
Sep  7 22:29:57 vps1 sshd[7239]: Failed password for invalid user root from 112.85.42.200 port 36155 ssh2
Sep  7 22:30:01 vps1 sshd[7239]: Failed password for invalid user root from 112.85.42.200 port 36155 ssh2
Sep  7 22:30:06 vps1 sshd[7239]: Failed password for invalid user root from 112.85.42.200 port 36155 ssh2
Sep  7 22:30:06 vps1 sshd[7239]: error: maximum authentication attempts exceeded for invalid user root from 112.85.42.200 port 36155 ssh2 [preauth]
...
2020-09-08 04:46:21
112.85.42.172 attackbots
Sep  7 22:20:48 markkoudstaal sshd[6188]: Failed password for root from 112.85.42.172 port 52971 ssh2
Sep  7 22:20:51 markkoudstaal sshd[6188]: Failed password for root from 112.85.42.172 port 52971 ssh2
Sep  7 22:20:54 markkoudstaal sshd[6188]: Failed password for root from 112.85.42.172 port 52971 ssh2
Sep  7 22:20:58 markkoudstaal sshd[6188]: Failed password for root from 112.85.42.172 port 52971 ssh2
...
2020-09-08 04:37:17

Recently Reported IPs

43.244.220.38 196.231.217.40 128.237.119.51 240.168.139.125
65.51.118.38 100.64.210.231 78.46.252.168 194.103.34.241
114.19.128.201 226.55.157.224 242.70.52.163 157.34.61.43
42.7.201.53 252.165.100.151 178.80.39.8 245.182.52.252
154.249.81.143 28.77.208.201 154.210.42.158 36.46.164.18