Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.89.12.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42901
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;149.89.12.18.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012300 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 17:29:26 CST 2025
;; MSG SIZE  rcvd: 105
Host info
Host 18.12.89.149.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 18.12.89.149.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
85.128.142.150 attackbots
schuetzenmusikanten.de 85.128.142.150 \[12/Nov/2019:07:23:36 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4475 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/60.0.3112.113 Safari/537.36"
SCHUETZENMUSIKANTEN.DE 85.128.142.150 \[12/Nov/2019:07:23:37 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4475 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/60.0.3112.113 Safari/537.36"
2019-11-12 20:33:18
37.235.221.87 attackspambots
Honeypot attack, port: 445, PTR: 37-235-221-87.dynamic.customer.lanta.me.
2019-11-12 20:20:04
218.219.123.118 attackspam
Honeypot attack, port: 23, PTR: 218-219-123-118.ppp.bbiq.jp.
2019-11-12 20:53:03
42.228.124.236 attackbotsspam
Port scan
2019-11-12 20:23:08
115.159.92.54 attack
Nov 12 17:40:58 areeb-Workstation sshd[7035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.92.54
Nov 12 17:41:00 areeb-Workstation sshd[7035]: Failed password for invalid user roses from 115.159.92.54 port 50436 ssh2
...
2019-11-12 20:30:09
174.138.56.102 attackspambots
Automatic report - XMLRPC Attack
2019-11-12 20:53:23
111.20.126.210 attack
SSH authentication failure x 6 reported by Fail2Ban
...
2019-11-12 20:40:28
123.16.232.198 attackbots
Nov 12 07:18:06 nexus sshd[20073]: Invalid user admin from 123.16.232.198 port 49834
Nov 12 07:18:06 nexus sshd[20073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.16.232.198
Nov 12 07:18:08 nexus sshd[20073]: Failed password for invalid user admin from 123.16.232.198 port 49834 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=123.16.232.198
2019-11-12 20:23:46
149.172.43.172 attackspambots
Triggered by Fail2Ban at Ares web server
2019-11-12 20:41:13
140.143.208.132 attackspam
Nov 12 07:39:30 vps666546 sshd\[29379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.208.132  user=root
Nov 12 07:39:32 vps666546 sshd\[29379\]: Failed password for root from 140.143.208.132 port 35024 ssh2
Nov 12 07:44:50 vps666546 sshd\[29639\]: Invalid user homerus from 140.143.208.132 port 43236
Nov 12 07:44:50 vps666546 sshd\[29639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.208.132
Nov 12 07:44:52 vps666546 sshd\[29639\]: Failed password for invalid user homerus from 140.143.208.132 port 43236 ssh2
...
2019-11-12 20:25:13
2.55.113.52 attackbotsspam
23/tcp
[2019-11-12]1pkt
2019-11-12 20:55:01
1.212.148.68 attack
Honeypot attack, port: 23, PTR: PTR record not found
2019-11-12 20:47:37
46.148.39.157 attack
Nov 12 16:11:47 our-server-hostname postfix/smtpd[3629]: connect from unknown[46.148.39.157]
Nov x@x
Nov 12 16:12:03 our-server-hostname postfix/smtpd[3629]: lost connection after RCPT from unknown[46.148.39.157]
Nov 12 16:12:03 our-server-hostname postfix/smtpd[3629]: disconnect from unknown[46.148.39.157]
Nov 12 16:34:43 our-server-hostname postfix/smtpd[4076]: connect from unknown[46.148.39.157]
Nov 12 16:35:03 our-server-hostname postfix/smtpd[4076]: lost connection after CONNECT from unknown[46.148.39.157]
Nov 12 16:35:03 our-server-hostname postfix/smtpd[4076]: disconnect from unknown[46.148.39.157]
Nov 12 16:42:11 our-server-hostname postfix/smtpd[4076]: connect from unknown[46.148.39.157]
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=46.148.39.157
2019-11-12 20:19:25
218.92.0.203 attack
2019-11-12T12:12:46.141609abusebot-8.cloudsearch.cf sshd\[30891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.203  user=root
2019-11-12 20:22:09
203.229.246.118 attackbots
Nov 12 07:11:40 Tower sshd[20201]: Connection from 203.229.246.118 port 34574 on 192.168.10.220 port 22
Nov 12 07:12:05 Tower sshd[20201]: Invalid user qhsupport from 203.229.246.118 port 34574
Nov 12 07:12:05 Tower sshd[20201]: error: Could not get shadow information for NOUSER
Nov 12 07:12:05 Tower sshd[20201]: Failed password for invalid user qhsupport from 203.229.246.118 port 34574 ssh2
Nov 12 07:12:06 Tower sshd[20201]: Received disconnect from 203.229.246.118 port 34574:11: Normal Shutdown, Thank you for playing [preauth]
Nov 12 07:12:06 Tower sshd[20201]: Disconnected from invalid user qhsupport 203.229.246.118 port 34574 [preauth]
2019-11-12 20:39:27

Recently Reported IPs

184.210.227.204 88.79.156.135 68.115.111.15 232.111.70.102
77.139.84.195 37.62.160.89 128.23.76.77 149.69.49.57
18.136.165.150 55.72.60.145 51.241.16.78 163.32.154.33
40.242.5.234 138.150.50.104 240.225.82.245 50.251.110.254
7.16.126.175 26.216.41.117 186.92.210.30 169.126.43.145