202.144.137.94

Basic Info

City: unknown

Region: unknown

Country: Bhutan

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '202.144.137.16 - 202.144.137.127'

% Abuse contact for '202.144.137.16 - 202.144.137.127' is 'systems@bt.bt'

inetnum:        202.144.137.16 - 202.144.137.127
netname:        DRUKNET
descr:          Infrastructure
country:        BT
admin-c:        JT106-AP
tech-c:         JT106-AP
abuse-c:        AB1276-AP
status:         ASSIGNED NON-PORTABLE
mnt-by:         MAINT-BT-DRUKNET
mnt-irt:        IRT-BTTELECOM-BT
last-modified:  2021-01-14T06:16:01Z
source:         APNIC

irt:            IRT-BTTELECOM-BT
address:        DrukNet
address:        Bhutan Telecom
address:        Thimphu
e-mail:         systems@bt.bt
abuse-mailbox:  systems@bt.bt
admin-c:        DNO1-AP
tech-c:         DNO1-AP
auth:           # Filtered
remarks:        systems@bt.bt was validated on 2026-03-26
mnt-by:         MAINT-BT-DRUKNET
last-modified:  2026-03-26T00:36:43Z
source:         APNIC

role:           ABUSE BTTELECOMBT
country:        ZZ
address:        DrukNet
address:        Bhutan Telecom
address:        Thimphu
phone:          +000000000
e-mail:         systems@bt.bt
admin-c:        DNO1-AP
tech-c:         DNO1-AP
nic-hdl:        AB1276-AP
remarks:        Generated from irt object IRT-BTTELECOM-BT
remarks:        systems@bt.bt was validated on 2026-03-26
abuse-mailbox:  systems@bt.bt
mnt-by:         APNIC-ABUSE
last-modified:  2026-03-26T00:37:14Z
source:         APNIC

person:         Jichen Thinley
address:        DrukNet
address:        Bhutan Telecom
address:        Thimphu
country:        BT
phone:          +975-2-320118
fax-no:         +975-2-328160
e-mail:         jichen@druknet.bt
nic-hdl:        JT106-AP
mnt-by:         MAINT-BT-DRUKNET
last-modified:  2008-09-04T07:29:18Z
source:         APNIC

% Information related to '202.144.128.0/20AS18024'

route:          202.144.128.0/20
descr:          DRUKNET-BLOCK-A1
country:        BT
notify:         ioc@bt.bt
mnt-by:         MAINT-BT-DRUKNET
origin:         AS18024
last-modified:  2018-09-18T09:37:40Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.144.137.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44630
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;202.144.137.94.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026051300 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 13 16:01:08 CST 2026
;; MSG SIZE  rcvd: 107

Host info

94.137.144.202.in-addr.arpa domain name pointer leasedline-202-144-137-94.Yangkhor-Thimphu.druknet.bt.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
94.137.144.202.in-addr.arpa	name = leasedline-202-144-137-94.Yangkhor-Thimphu.druknet.bt.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
83.97.20.190	attackspambots	10/04/2019-18:12:00.411589 83.97.20.190 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-10-05 01:38:17
212.92.115.57	attackspam	RDP Bruteforce	2019-10-05 01:22:05
80.147.59.28	attackspam	Oct 4 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=80.147.59.28, lip=REMOVED, TLS: Disconnected, session=\<8C7SegqUFdhQkzsc\> Oct 4 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=80.147.59.28, lip=REMOVED, TLS, session=\ Oct 4 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=80.147.59.28, lip=REMOVED, TLS, session=\	2019-10-05 01:40:13
185.117.118.187	attackspambots	\[2019-10-04 19:30:23\] NOTICE\[3217\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '185.117.118.187:49494' \(callid: 316644091-187158093-1323251049\) - Failed to authenticate \[2019-10-04 19:30:23\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-10-04T19:30:23.036+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="316644091-187158093-1323251049",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/185.117.118.187/49494",Challenge="1570210222/9ba2405e0c368a9b8370eb19dd2a6d63",Response="b60b8459089e4b049514e0712f4aa537",ExpectedResponse="" \[2019-10-04 19:30:23\] NOTICE\[1168\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '185.117.118.187:49494' \(callid: 316644091-187158093-1323251049\) - Failed to authenticate \[2019-10-04 19:30:23\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResp	2019-10-05 01:43:31
80.82.70.239	attackbots	10/04/2019-13:03:08.373038 80.82.70.239 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-10-05 01:46:15
92.119.160.52	attackbotsspam	firewall-block, port(s): 3389/tcp, 38702/tcp, 62808/tcp	2019-10-05 01:52:48
92.63.194.90	attackspam	SSH Brute-Force reported by Fail2Ban	2019-10-05 01:50:01
81.208.42.172	attackbots	ft-1848-fussball.de 81.208.42.172 \[04/Oct/2019:17:29:43 +0200\] "POST /wp-login.php HTTP/1.1" 200 2298 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ft-1848-fussball.de 81.208.42.172 \[04/Oct/2019:17:29:43 +0200\] "POST /wp-login.php HTTP/1.1" 200 2263 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-10-05 01:59:39
185.176.27.30	attackbotsspam	firewall-block, port(s): 38895/tcp	2019-10-05 01:22:33
112.85.42.227	attack	Oct 4 13:38:31 TORMINT sshd\[25010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.227 user=root Oct 4 13:38:33 TORMINT sshd\[25010\]: Failed password for root from 112.85.42.227 port 20800 ssh2 Oct 4 13:38:35 TORMINT sshd\[25014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.227 user=root Oct 4 13:38:35 TORMINT sshd\[25010\]: Failed password for root from 112.85.42.227 port 20800 ssh2 ...	2019-10-05 01:41:33
222.186.42.117	attackspam	Oct 4 19:19:23 dcd-gentoo sshd[20887]: User root from 222.186.42.117 not allowed because none of user's groups are listed in AllowGroups Oct 4 19:19:26 dcd-gentoo sshd[20887]: error: PAM: Authentication failure for illegal user root from 222.186.42.117 Oct 4 19:19:23 dcd-gentoo sshd[20887]: User root from 222.186.42.117 not allowed because none of user's groups are listed in AllowGroups Oct 4 19:19:26 dcd-gentoo sshd[20887]: error: PAM: Authentication failure for illegal user root from 222.186.42.117 Oct 4 19:19:23 dcd-gentoo sshd[20887]: User root from 222.186.42.117 not allowed because none of user's groups are listed in AllowGroups Oct 4 19:19:26 dcd-gentoo sshd[20887]: error: PAM: Authentication failure for illegal user root from 222.186.42.117 Oct 4 19:19:26 dcd-gentoo sshd[20887]: Failed keyboard-interactive/pam for invalid user root from 222.186.42.117 port 57990 ssh2 ...	2019-10-05 01:21:47
201.39.233.40	attackspambots	Oct 4 18:25:33 herz-der-gamer sshd[14722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.39.233.40 user=root Oct 4 18:25:36 herz-der-gamer sshd[14722]: Failed password for root from 201.39.233.40 port 54119 ssh2 ...	2019-10-05 01:51:23
47.22.130.82	attackspam	Oct 4 17:06:25 pornomens sshd\[1123\]: Invalid user admin from 47.22.130.82 port 35629 Oct 4 17:06:26 pornomens sshd\[1123\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.22.130.82 Oct 4 17:06:27 pornomens sshd\[1123\]: Failed password for invalid user admin from 47.22.130.82 port 35629 ssh2 ...	2019-10-05 01:25:42
52.193.236.34	attackspam	Wordpress Admin Login attack	2019-10-05 01:37:28
34.208.139.143	attackbots	[LAN access from remote] from 34.208.139.143:27705 to 192.168.XX.XX:5000, Thursday, Oct 03,2019 05:32:22 [LAN access from remote] from 34.208.139.143:1598 to 192.168.XX.XX:5001, Thursday, Oct 03,2019 05:32:13	2019-10-05 01:32:44

Recently Reported IPs

20.168.6.41	31.169.82.68	57.141.16.97	35.208.217.108
110.78.153.121	2606:4700:10::6814:5318	2606:4700:10::6816:4140	20.221.68.74
10.223.24.110	119.28.100.147	134.35.157.43	2606:4700:10::6814:8420
2003:d6:a729:7200:81d8:b8be:f73d:9c8a	99.10.76.25	34.85.82.221	35.187.220.208
43.156.18.240	2606:4700:10::6814:6575	69.189.152.90	204.0.23.7