Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: OVH Hosting Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Found on   Binary Defense     / proto=6  .  srcport=46520  .  dstport=1433  .     (3498)
2020-10-06 02:54:01
attackspambots
Found on   Binary Defense     / proto=6  .  srcport=46520  .  dstport=1433  .     (3498)
2020-10-05 18:43:51
attackbots
 TCP (SYN) 149.56.28.9:48285 -> port 3389, len 40
2020-08-16 00:12:52
attackbots
port
2020-05-09 08:22:31
attackbotsspam
Multiport scan : 14 ports scanned 3380 3382 3386 3387 3390 3392 3394 3397 3402 3403 3405 3406 3416 3417
2019-10-10 06:12:40
Comments on same subnet:
IP Type Details Datetime
149.56.28.100 attack
Port scan denied
2020-09-16 22:03:52
149.56.28.100 attackspambots
Port scan denied
2020-09-16 14:33:09
149.56.28.100 attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: ns531101.ip-149-56-28.net.
2020-09-16 06:23:13
149.56.28.100 attackbots
SmallBizIT.US 6 packets to tcp(3390,3391,3392,3394,3395,3399)
2020-07-23 15:52:35
149.56.28.2 attackbotsspam
firewall-block, port(s): 3399/tcp
2020-07-13 07:51:50
149.56.28.2 attack
 TCP (SYN) 149.56.28.2:55610 -> port 3394, len 44
2020-07-10 02:22:50
149.56.28.5 attackspam
Fail2Ban Ban Triggered
2020-05-27 02:43:51
149.56.28.100 attack
(PERMBLOCK) 149.56.28.100 (CA/Canada/ns531101.ip-149-56-28.net) has had more than 4 temp blocks in the last 86400 secs
2020-05-25 03:10:45
149.56.28.5 attackspam
Scanning my IP for 2 days now. One port a minute. Bouncing off a few other ip addresses. China, Indonesia, France, Singapore, Egypt, and a few other countries.
2020-05-11 14:35:15
149.56.28.100 attack
IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.
2020-04-17 23:55:55
149.56.28.100 attackspam
04/06/2020-02:05:34.609153 149.56.28.100 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-04-06 17:38:45
149.56.28.100 attack
03/30/2020-11:44:33.135401 149.56.28.100 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-03-31 01:44:58
149.56.28.100 attack
unauthorized connection attempt
2020-03-24 13:30:06
149.56.28.100 attack
02/13/2020-22:15:43.892024 149.56.28.100 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-02-14 09:00:23
149.56.28.2 attack
Feb  1 23:15:27 h2177944 kernel: \[3793477.530410\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=149.56.28.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=13851 PROTO=TCP SPT=53293 DPT=3335 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb  1 23:15:27 h2177944 kernel: \[3793477.530426\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=149.56.28.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=13851 PROTO=TCP SPT=53293 DPT=3335 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb  1 23:48:31 h2177944 kernel: \[3795461.353667\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=149.56.28.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=31156 PROTO=TCP SPT=53293 DPT=3342 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb  1 23:48:31 h2177944 kernel: \[3795461.353681\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=149.56.28.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=31156 PROTO=TCP SPT=53293 DPT=3342 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb  2 00:07:59 h2177944 kernel: \[3796628.609379\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=149.56.28.2 DST=85.214.117.9 LEN=40 TO
2020-02-02 08:18:16
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.56.28.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64510
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;149.56.28.9.			IN	A

;; AUTHORITY SECTION:
.			579	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100901 1800 900 604800 86400

;; Query time: 133 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 10 06:12:37 CST 2019
;; MSG SIZE  rcvd: 115
Host info
9.28.56.149.in-addr.arpa domain name pointer ns530764.ip-149-56-28.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
9.28.56.149.in-addr.arpa	name = ns530764.ip-149-56-28.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
222.133.178.242 attackbotsspam
Port Scan: UDP/34567
2019-09-20 21:10:33
113.8.126.12 attackspam
Port Scan: TCP/23
2019-09-20 21:49:17
177.206.41.211 attackbots
23/tcp 23/tcp
[2019-09-19/20]2pkt
2019-09-20 21:19:42
73.205.108.52 attackbots
Port Scan: TCP/23
2019-09-20 21:53:00
211.250.204.209 attackspambots
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/211.250.204.209/ 
 KR - 1H : (71)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : KR 
 NAME ASN : ASN4766 
 
 IP : 211.250.204.209 
 
 CIDR : 211.250.192.0/19 
 
 PREFIX COUNT : 8136 
 
 UNIQUE IP COUNT : 44725248 
 
 
 WYKRYTE ATAKI Z ASN4766 :  
  1H - 2 
  3H - 6 
  6H - 10 
 12H - 12 
 24H - 34 
 
 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery
2019-09-20 21:38:43
216.49.160.151 attack
Port Scan: TCP/445
2019-09-20 21:11:27
191.17.175.229 attackspam
Port Scan: TCP/8080
2019-09-20 21:16:35
202.162.164.10 attack
Port Scan: TCP/445
2019-09-20 21:14:07
98.126.148.94 attackbots
Port Scan: TCP/445
2019-09-20 21:27:35
157.55.39.236 attack
Automatic report - Banned IP Access
2019-09-20 21:44:12
113.102.215.141 attackbots
Port Scan: TCP/23
2019-09-20 21:26:31
172.100.250.46 attackbotsspam
Port Scan: UDP/903
2019-09-20 21:20:33
207.32.248.94 attackspam
Port Scan: UDP/904
2019-09-20 21:13:10
111.239.163.247 attackbots
Port Scan: TCP/443
2019-09-20 21:27:17
70.88.89.106 attack
Port Scan: UDP/124
2019-09-20 21:55:36

Recently Reported IPs

198.252.100.32 157.230.34.254 114.35.28.104 200.49.32.226
221.2.206.12 138.197.171.149 125.163.95.233 91.73.131.232
198.108.67.129 104.248.159.31 87.241.107.178 66.36.158.210
49.49.178.202 41.139.215.126 230.125.73.158 200.98.201.24
46.176.103.118 162.251.21.229 197.166.154.58 2001:41d0:602:15f::