Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Mongolia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
180.149.126.213 attack
Found on   Alienvault    / proto=6  .  srcport=49572  .  dstport=8000  .     (1087)
2020-09-17 19:16:30
180.149.126.213 attackspam
Found on   Alienvault    / proto=6  .  srcport=49572  .  dstport=8000  .     (1087)
2020-09-17 10:33:08
180.149.126.48 attack
 TCP (SYN) 180.149.126.48:46343 -> port 8080, len 44
2020-09-06 02:57:30
180.149.126.205 attackspambots
 TCP (SYN) 180.149.126.205:22832 -> port 8081, len 44
2020-09-05 23:25:09
180.149.126.48 attackbotsspam
 TCP (SYN) 180.149.126.48:46343 -> port 8080, len 44
2020-09-05 18:34:40
180.149.126.205 attackspambots
 TCP (SYN) 180.149.126.205:22832 -> port 8081, len 44
2020-09-05 14:59:04
180.149.126.205 attackbots
firewall-block, port(s): 9000/tcp
2020-09-05 07:37:44
180.149.126.185 attackspambots
Firewall Dropped Connection
2020-09-02 01:05:51
180.149.126.223 attackspam
" "
2020-08-28 09:00:41
180.149.126.184 attackbotsspam
firewall-block, port(s): 8880/tcp
2020-08-25 18:34:19
180.149.126.214 attack
trying to access non-authorized port
2020-08-22 05:43:49
180.149.126.13 attackspambots
" "
2020-08-06 08:05:43
180.149.126.30 attackspambots
3306/tcp 10100/tcp
[2020-06-27/07-08]2pkt
2020-07-08 23:01:49
180.149.126.76 attackbotsspam
Auto Detect gjan.info's Rule!
This IP has been detected by automatic rule.
2020-07-07 23:46:38
180.149.126.60 attackbots
Port Scan detected!
...
2020-06-28 01:05:06
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 180.149.126.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12490
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;180.149.126.42.			IN	A

;; AUTHORITY SECTION:
.			304	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 22:40:11 CST 2022
;; MSG SIZE  rcvd: 107
Host info
b';; connection timed out; no servers could be reached
'
Nslookup info:
server can't find 180.149.126.42.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
45.254.25.62 attackbotsspam
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-17 18:05:10
106.220.114.183 attackspambots
1600275518 - 09/16/2020 18:58:38 Host: 106.220.114.183/106.220.114.183 Port: 445 TCP Blocked
2020-09-17 18:03:52
59.144.139.18 attack
$f2bV_matches
2020-09-17 18:16:46
47.56.139.204 attackspambots
Brute Force
2020-09-17 18:11:38
203.213.66.170 attack
$f2bV_matches
2020-09-17 18:20:08
115.97.67.126 attackspambots
Port probing on unauthorized port 23
2020-09-17 18:20:25
213.39.55.13 attackbotsspam
sshd: Failed password for .... from 213.39.55.13 port 37888 ssh2 (10 attempts)
2020-09-17 18:22:37
190.128.239.146 attackbotsspam
2020-09-17T11:23:57+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)
2020-09-17 18:18:10
198.27.79.180 attackbots
Brute-force attempt banned
2020-09-17 18:01:00
203.86.30.17 attack
Sep 17 10:50:48 mail.srvfarm.net postfix/smtpd[4154548]: lost connection after STARTTLS from unknown[203.86.30.17]
Sep 17 10:50:50 mail.srvfarm.net postfix/smtpd[4154531]: NOQUEUE: reject: RCPT from unknown[203.86.30.17]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Sep 17 10:53:57 mail.srvfarm.net postfix/smtpd[4154587]: lost connection after STARTTLS from unknown[203.86.30.17]
Sep 17 10:53:59 mail.srvfarm.net postfix/smtpd[4160189]: NOQUEUE: reject: RCPT from unknown[203.86.30.17]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Sep 17 10:55:12 mail.srvfarm.net postfix/smtpd[4157771]: lost connection after STARTTLS from unknown[203.86.30.17]
2020-09-17 17:46:40
187.85.206.116 attackbots
Sep 17 09:11:06 mail.srvfarm.net postfix/smtps/smtpd[4107279]: warning: unknown[187.85.206.116]: SASL PLAIN authentication failed: 
Sep 17 09:11:07 mail.srvfarm.net postfix/smtps/smtpd[4107279]: lost connection after AUTH from unknown[187.85.206.116]
Sep 17 09:11:28 mail.srvfarm.net postfix/smtpd[4106754]: warning: unknown[187.85.206.116]: SASL PLAIN authentication failed: 
Sep 17 09:11:28 mail.srvfarm.net postfix/smtpd[4106754]: lost connection after AUTH from unknown[187.85.206.116]
Sep 17 09:16:56 mail.srvfarm.net postfix/smtpd[4103093]: warning: unknown[187.85.206.116]: SASL PLAIN authentication failed:
2020-09-17 17:48:40
68.183.193.148 attack
Failed password for root from 68.183.193.148 port 35438 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.193.148  user=root
Failed password for root from 68.183.193.148 port 46472 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.193.148  user=root
Failed password for root from 68.183.193.148 port 57516 ssh2
2020-09-17 18:18:40
162.142.125.21 attackspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-09-17 18:01:39
190.207.2.130 attack
Honeypot attack, port: 445, PTR: 190-207-2-130.dyn.dsl.cantv.net.
2020-09-17 17:59:20
91.92.145.13 attackbotsspam
Port probing on unauthorized port 8080
2020-09-17 18:13:27

Recently Reported IPs

122.241.189.115 58.147.171.234 197.62.229.221 112.194.204.76
182.61.40.141 20.51.190.70 221.213.75.55 182.23.105.190
24.6.204.219 106.14.187.182 106.15.4.101 119.252.168.218
201.150.181.55 176.110.2.15 45.123.108.219 14.207.155.253
114.237.30.129 196.189.8.29 45.153.160.140 73.92.173.211