Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
2019-06-23 22:39:59,892 [snip] proftpd[32456] [snip] (192.241.148.149[192.241.148.149]): USER root: no such user found from 192.241.148.149 [192.241.148.149] to ::ffff:[snip]:22
2019-06-23 22:40:00,620 [snip] proftpd[32458] [snip] (192.241.148.149[192.241.148.149]): USER admin: no such user found from 192.241.148.149 [192.241.148.149] to ::ffff:[snip]:22
2019-06-23 22:40:01,340 [snip] proftpd[32459] [snip] (192.241.148.149[192.241.148.149]): USER admin: no such user found from 192.241.148.149 [192.241.148.149] to ::ffff:[snip]:22[...]
2019-06-24 07:47:20
Comments on same subnet:
IP Type Details Datetime
192.241.148.205 attack
sshd jail - ssh hack attempt
2020-04-27 13:19:10
192.241.148.205 attackbotsspam
Apr 25 01:16:10 ny01 sshd[14305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.148.205
Apr 25 01:16:11 ny01 sshd[14305]: Failed password for invalid user oracle from 192.241.148.205 port 51248 ssh2
Apr 25 01:21:45 ny01 sshd[14952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.148.205
2020-04-25 13:23:46
192.241.148.205 attackspambots
Invalid user git from 192.241.148.205 port 43276
2020-04-11 04:32:38
192.241.148.104 attackspambots
03/17/2020-14:21:25.290655 192.241.148.104 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-03-18 03:13:29
192.241.148.219 attackspambots
xmlrpc attack
2020-01-16 22:39:06
192.241.148.219 attackspambots
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
2019-12-29 07:51:01
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 192.241.148.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33261
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;192.241.148.149.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062301 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jun 24 07:47:13 CST 2019
;; MSG SIZE  rcvd: 119
Host info
Host 149.148.241.192.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 149.148.241.192.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
209.159.212.65 attackspam
Brute forcing email accounts
2020-08-14 15:48:18
113.200.156.180 attack
Banned for a week because repeated abuses, for example SSH, but not only
2020-08-14 16:13:08
104.197.160.61 attackspam
B: There is NO wordpress hosted!
2020-08-14 15:48:44
68.183.178.162 attackspambots
Aug 14 09:32:35 vps647732 sshd[27267]: Failed password for root from 68.183.178.162 port 40326 ssh2
...
2020-08-14 15:54:03
5.101.107.183 attackspambots
Aug 14 05:43:17 vps333114 sshd[12835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.101.107.183  user=root
Aug 14 05:43:19 vps333114 sshd[12835]: Failed password for root from 5.101.107.183 port 59502 ssh2
...
2020-08-14 15:58:47
93.114.86.226 attackspambots
93.114.86.226 - - [14/Aug/2020:08:07:52 +0100] "POST /wp-login.php HTTP/1.1" 200 1905 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
93.114.86.226 - - [14/Aug/2020:08:07:53 +0100] "POST /wp-login.php HTTP/1.1" 200 1890 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
93.114.86.226 - - [14/Aug/2020:08:07:54 +0100] "POST /wp-login.php HTTP/1.1" 200 1887 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-14 15:42:32
221.208.253.253 attack
IMAP
2020-08-14 15:44:52
118.172.203.52 attack
Icarus honeypot on github
2020-08-14 15:36:28
49.233.134.252 attack
[ssh] SSH attack
2020-08-14 15:56:58
150.95.153.82 attackspam
web-1 [ssh_2] SSH Attack
2020-08-14 16:03:37
60.248.94.243 attackbotsspam
port 23
2020-08-14 16:02:14
222.73.246.141 attack
Aug 14 07:36:40 fhem-rasp sshd[25008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.73.246.141  user=root
Aug 14 07:36:42 fhem-rasp sshd[25008]: Failed password for root from 222.73.246.141 port 34800 ssh2
...
2020-08-14 16:14:45
88.231.225.57 attackspambots
port 23
2020-08-14 15:34:12
14.170.161.214 attackspam
1597376289 - 08/14/2020 05:38:09 Host: 14.170.161.214/14.170.161.214 Port: 445 TCP Blocked
...
2020-08-14 15:37:30
94.31.85.173 attack
Aug 14 09:43:11 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\
Aug 14 09:43:13 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\<3OAFiNGsXK5eH1Wt\>
Aug 14 09:43:35 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\
Aug 14 09:48:45 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\<1kTQm9GsvLJeH1Wt\>
Aug 14 09:48:47 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\<
...
2020-08-14 15:56:34

Recently Reported IPs

185.65.135.180 17.29.78.91 10.41.14.120 144.64.61.22
240e:d2:801a:6633:d4e7:343d:987c:126f 1.22.124.243 60.173.9.126 222.95.22.83
111.250.131.20 189.91.4.237 84.54.153.49 141.85.13.6
37.52.27.108 78.169.90.92 94.46.167.106 73.185.241.75
201.209.185.104 92.242.86.245 197.60.169.38 177.66.237.249