Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Italy

Internet Service Provider: Wind Telecomunicazioni S.P.A

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Lines containing failures of 151.49.241.22
Dec 25 07:31:37 HOSTNAME sshd[7443]: Address 151.49.241.22 maps to adsl-ull-22-241.49-151.wind.hostname, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Dec 25 07:31:37 HOSTNAME sshd[7443]: Invalid user ching from 151.49.241.22 port 37236
Dec 25 07:31:37 HOSTNAME sshd[7443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.49.241.22
Dec 25 07:31:39 HOSTNAME sshd[7443]: Failed password for invalid user ching from 151.49.241.22 port 37236 ssh2
Dec 25 07:31:39 HOSTNAME sshd[7443]: Received disconnect from 151.49.241.22 port 37236:11: Bye Bye [preauth]
Dec 25 07:31:39 HOSTNAME sshd[7443]: Disconnected from 151.49.241.22 port 37236 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=151.49.241.22
2019-12-25 18:49:14
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 151.49.241.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24497
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;151.49.241.22.			IN	A

;; AUTHORITY SECTION:
.			285	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122500 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 25 18:49:11 CST 2019
;; MSG SIZE  rcvd: 117
Host info
22.241.49.151.in-addr.arpa domain name pointer adsl-ull-22-241.49-151.wind.it.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
22.241.49.151.in-addr.arpa	name = adsl-ull-22-241.49-151.wind.it.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
58.152.143.106 attackspam
Jul 27 14:11:34 master sshd[5326]: Failed password for root from 58.152.143.106 port 39717 ssh2
2020-07-27 22:12:04
35.200.145.32 attack
2020-07-27T11:51:13.540416shield sshd\[25803\]: Invalid user ftp-user from 35.200.145.32 port 34402
2020-07-27T11:51:13.555527shield sshd\[25803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=32.145.200.35.bc.googleusercontent.com
2020-07-27T11:51:15.564149shield sshd\[25803\]: Failed password for invalid user ftp-user from 35.200.145.32 port 34402 ssh2
2020-07-27T11:55:43.146129shield sshd\[26180\]: Invalid user troy from 35.200.145.32 port 37654
2020-07-27T11:55:43.154339shield sshd\[26180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=32.145.200.35.bc.googleusercontent.com
2020-07-27 21:53:52
94.102.50.166 attackbotsspam
scans 9 times in preceeding hours on the ports (in chronological order) 13023 13059 13090 13023 13032 13035 13082 13056 13019 resulting in total of 93 scans from 94.102.48.0/20 block.
2020-07-27 22:12:15
112.168.109.209 attack
Jul 27 14:04:21 master sshd[5214]: Failed password for invalid user admin from 112.168.109.209 port 52148 ssh2
Jul 27 14:16:44 master sshd[5394]: Failed password for root from 112.168.109.209 port 58391 ssh2
Jul 27 14:37:20 master sshd[5955]: Failed password for invalid user guest from 112.168.109.209 port 39651 ssh2
2020-07-27 22:33:06
129.226.114.41 attackspambots
SSH Brute-Force reported by Fail2Ban
2020-07-27 22:25:31
191.184.40.60 attackbots
Jul 27 15:13:08 buvik sshd[23196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.184.40.60
Jul 27 15:13:10 buvik sshd[23196]: Failed password for invalid user guest from 191.184.40.60 port 50394 ssh2
Jul 27 15:21:47 buvik sshd[24375]: Invalid user software from 191.184.40.60
...
2020-07-27 22:18:17
111.229.25.25 attackspambots
...
2020-07-27 22:24:18
167.71.91.205 attackspam
Jul 27 11:55:29 *** sshd[29875]: Invalid user sic from 167.71.91.205
2020-07-27 21:58:27
129.204.33.4 attackspam
leo_www
2020-07-27 22:30:12
89.216.99.163 attackbotsspam
2020-07-27 11:30:01,756 fail2ban.actions        [937]: NOTICE  [sshd] Ban 89.216.99.163
2020-07-27 12:05:59,342 fail2ban.actions        [937]: NOTICE  [sshd] Ban 89.216.99.163
2020-07-27 12:41:56,191 fail2ban.actions        [937]: NOTICE  [sshd] Ban 89.216.99.163
2020-07-27 13:18:03,846 fail2ban.actions        [937]: NOTICE  [sshd] Ban 89.216.99.163
2020-07-27 13:55:13,636 fail2ban.actions        [937]: NOTICE  [sshd] Ban 89.216.99.163
...
2020-07-27 22:13:42
129.204.181.118 attackspambots
"Unauthorized connection attempt on SSHD detected"
2020-07-27 22:29:42
116.85.40.181 attackspam
Jul 27 15:34:31 nextcloud sshd\[4077\]: Invalid user vr from 116.85.40.181
Jul 27 15:34:31 nextcloud sshd\[4077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.85.40.181
Jul 27 15:34:33 nextcloud sshd\[4077\]: Failed password for invalid user vr from 116.85.40.181 port 43912 ssh2
2020-07-27 21:51:32
40.113.124.250 attackbots
40.113.124.250 - - [27/Jul/2020:15:17:02 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
40.113.124.250 - - [27/Jul/2020:15:17:03 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
40.113.124.250 - - [27/Jul/2020:15:17:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-07-27 22:27:16
27.10.171.72 attackspambots
Jul 27 13:55:04 ncomp sshd[30142]: Invalid user osbash from 27.10.171.72
Jul 27 13:55:04 ncomp sshd[30142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.10.171.72
Jul 27 13:55:04 ncomp sshd[30142]: Invalid user osbash from 27.10.171.72
Jul 27 13:55:06 ncomp sshd[30142]: Failed password for invalid user osbash from 27.10.171.72 port 46790 ssh2
2020-07-27 22:21:41
116.108.68.193 attackspambots
Port probing on unauthorized port 81
2020-07-27 22:07:20

Recently Reported IPs

113.22.20.205 201.110.173.167 78.189.46.196 101.206.1.254
180.95.184.67 178.234.82.184 118.70.186.174 118.70.186.157
85.17.25.48 207.180.231.227 98.58.236.218 178.54.206.221
187.224.167.187 110.88.25.176 89.34.250.223 59.120.140.55
14.212.15.63 157.51.234.151 23.95.28.135 83.239.165.187