Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Kyrgyzstan

Internet Service Provider: unknown

Hostname: unknown

Organization: Mega-Line Ltd.

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 158.181.239.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58878
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;158.181.239.149.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040900 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 09 16:36:29 +08 2019
;; MSG SIZE  rcvd: 119

Host info
149.239.181.158.in-addr.arpa domain name pointer 158.181.239.149.mega.kg.
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
149.239.181.158.in-addr.arpa	name = 158.181.239.149.mega.kg.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
54.37.154.254 attackspam
Jul  4 15:16:24 tux-35-217 sshd\[2256\]: Invalid user demo from 54.37.154.254 port 34145
Jul  4 15:16:24 tux-35-217 sshd\[2256\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.154.254
Jul  4 15:16:26 tux-35-217 sshd\[2256\]: Failed password for invalid user demo from 54.37.154.254 port 34145 ssh2
Jul  4 15:18:36 tux-35-217 sshd\[2261\]: Invalid user bande from 54.37.154.254 port 46717
Jul  4 15:18:36 tux-35-217 sshd\[2261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.154.254
...
2019-07-05 01:46:25
45.122.221.235 attackbots
WordPress login Brute force / Web App Attack on client site.
2019-07-05 01:23:48
132.148.105.132 attack
jannisjulius.de 132.148.105.132 \[04/Jul/2019:18:47:58 +0200\] "POST /wp-login.php HTTP/1.1" 200 6117 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
jannisjulius.de 132.148.105.132 \[04/Jul/2019:18:47:59 +0200\] "POST /wp-login.php HTTP/1.1" 200 6119 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-07-05 01:26:10
118.25.238.76 attack
Apr 23 20:58:29 yesfletchmain sshd\[24223\]: Invalid user public from 118.25.238.76 port 35918
Apr 23 20:58:29 yesfletchmain sshd\[24223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.238.76
Apr 23 20:58:30 yesfletchmain sshd\[24223\]: Failed password for invalid user public from 118.25.238.76 port 35918 ssh2
Apr 23 21:01:46 yesfletchmain sshd\[24270\]: Invalid user mani from 118.25.238.76 port 32980
Apr 23 21:01:46 yesfletchmain sshd\[24270\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.238.76
...
2019-07-05 01:51:01
208.163.47.118 attackspam
DATE:2019-07-04 15:10:03, IP:208.163.47.118, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)
2019-07-05 02:12:23
216.201.128.3 attackbots
Request to REST API ///wp-json/wp/v2/users/
2019-07-05 02:02:05
102.65.46.160 attackspam
2019-07-04 14:22:44 H=102-65-46-160.ftth.web.africa [102.65.46.160]:31056 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=102.65.46.160)
2019-07-04 14:22:45 unexpected disconnection while reading SMTP command from 102-65-46-160.ftth.web.africa [102.65.46.160]:31056 I=[10.100.18.23]:25 (error: Connection reset by peer)
2019-07-04 14:52:47 H=102-65-46-160.ftth.web.africa [102.65.46.160]:8250 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=102.65.46.160)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=102.65.46.160
2019-07-05 01:55:42
27.61.115.34 attackbots
2019-07-04 12:55:55 unexpected disconnection while reading SMTP command from ([27.61.115.34]) [27.61.115.34]:14855 I=[10.100.18.23]:25 (error: Connection reset by peer)
2019-07-04 12:57:06 unexpected disconnection while reading SMTP command from ([27.61.115.34]) [27.61.115.34]:17454 I=[10.100.18.23]:25 (error: Connection reset by peer)
2019-07-04 14:52:38 unexpected disconnection while reading SMTP command from ([27.61.115.34]) [27.61.115.34]:30897 I=[10.100.18.23]:25 (error: Connection reset by peer)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=27.61.115.34
2019-07-05 01:51:53
123.206.27.113 attackbotsspam
$f2bV_matches
2019-07-05 02:00:43
60.251.80.90 attackbots
firewall-block, port(s): 445/tcp
2019-07-05 02:14:17
195.9.185.62 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 11:56:49,021 INFO [shellcode_manager] (195.9.185.62) no match, writing hexdump (982702838f733d8c4a7229f5ae7c879f :1901356) - MS17010 (EternalBlue)
2019-07-05 01:28:55
103.242.110.16 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-07-05 02:13:40
185.196.180.206 attackspambots
firewall-block, port(s): 80/tcp
2019-07-05 02:07:53
206.189.209.142 attackspambots
19/7/4@13:33:55: FAIL: Alarm-Intrusion address from=206.189.209.142
...
2019-07-05 01:49:52
213.152.162.149 attack
SPAM Delivery Attempt
2019-07-05 01:24:41

Recently Reported IPs

216.228.132.249 110.172.146.93 173.44.34.106 92.47.97.10
208.117.222.201 77.222.85.208 139.59.13.185 103.21.140.166
177.153.4.193 222.184.72.66 60.174.192.240 140.143.204.40
45.248.160.67 200.113.187.180 94.228.200.224 109.226.220.205
66.143.231.89 62.4.14.206 103.216.82.214 71.6.233.159