Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
211.159.149.29 attackbots
Invalid user 111 from 211.159.149.29 port 59520
2020-09-26 06:59:50
211.159.149.29 attackbots
Invalid user 111 from 211.159.149.29 port 59520
2020-09-26 00:07:36
211.159.149.29 attack
(sshd) Failed SSH login from 211.159.149.29 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 25 02:22:38 optimus sshd[2435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.149.29  user=root
Sep 25 02:22:40 optimus sshd[2435]: Failed password for root from 211.159.149.29 port 47498 ssh2
Sep 25 02:45:30 optimus sshd[11639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.149.29  user=root
Sep 25 02:45:32 optimus sshd[11639]: Failed password for root from 211.159.149.29 port 34330 ssh2
Sep 25 02:49:52 optimus sshd[13227]: Invalid user dockeruser from 211.159.149.29
2020-09-25 15:44:51
211.159.149.29 attack
Jul 18 19:48:41 vps-51d81928 sshd[67313]: Invalid user nagios from 211.159.149.29 port 42922
Jul 18 19:48:41 vps-51d81928 sshd[67313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.149.29 
Jul 18 19:48:41 vps-51d81928 sshd[67313]: Invalid user nagios from 211.159.149.29 port 42922
Jul 18 19:48:43 vps-51d81928 sshd[67313]: Failed password for invalid user nagios from 211.159.149.29 port 42922 ssh2
Jul 18 19:50:22 vps-51d81928 sshd[67362]: Invalid user ph from 211.159.149.29 port 59336
...
2020-07-19 05:45:27
211.159.149.29 attackspam
Invalid user admin from 211.159.149.29 port 60616
2020-07-04 06:07:29
211.159.149.29 attackspambots
2020-06-08T04:24:34.183226shield sshd\[25854\]: Invalid user 55\\r from 211.159.149.29 port 48706
2020-06-08T04:24:34.186806shield sshd\[25854\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.149.29
2020-06-08T04:24:36.602061shield sshd\[25854\]: Failed password for invalid user 55\\r from 211.159.149.29 port 48706 ssh2
2020-06-08T04:27:17.296724shield sshd\[26814\]: Invalid user totototo\\r from 211.159.149.29 port 45552
2020-06-08T04:27:17.300390shield sshd\[26814\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.149.29
2020-06-08 12:36:55
211.159.149.29 attackbots
Invalid user test from 211.159.149.29 port 55778
2020-03-28 07:32:25
211.159.149.29 attack
Mar 16 15:44:19 mail sshd[6925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.149.29  user=root
Mar 16 15:44:22 mail sshd[6925]: Failed password for root from 211.159.149.29 port 49832 ssh2
...
2020-03-17 00:45:00
211.159.149.84 attackspambots
unauthorized connection attempt
2020-02-16 19:31:27
211.159.149.29 attack
Jan  1 07:24:25 ms-srv sshd[23185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.149.29  user=root
Jan  1 07:24:26 ms-srv sshd[23185]: Failed password for invalid user root from 211.159.149.29 port 58932 ssh2
2020-02-16 02:57:44
211.159.149.29 attack
Automatic report - Banned IP Access
2020-02-09 17:45:16
211.159.149.29 attackbotsspam
Invalid user hugo from 211.159.149.29 port 50250
2020-01-22 02:01:56
211.159.149.29 attackbots
Automatic report - Banned IP Access
2020-01-19 13:06:31
211.159.149.84 attack
Unauthorized connection attempt detected from IP address 211.159.149.84 to port 1433
2019-12-31 00:22:43
211.159.149.29 attackspam
Dec 29 16:40:19 localhost sshd\[53688\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.149.29  user=games
Dec 29 16:40:20 localhost sshd\[53688\]: Failed password for games from 211.159.149.29 port 50138 ssh2
Dec 29 16:46:52 localhost sshd\[53858\]: Invalid user bbh from 211.159.149.29 port 38062
Dec 29 16:46:52 localhost sshd\[53858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.149.29
Dec 29 16:46:54 localhost sshd\[53858\]: Failed password for invalid user bbh from 211.159.149.29 port 38062 ssh2
...
2019-12-30 00:51:52
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 211.159.149.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26290
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;211.159.149.252.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400

;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 00:04:39 CST 2025
;; MSG SIZE  rcvd: 108
Host info
Host 252.149.159.211.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 252.149.159.211.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
149.202.206.206 attackbots
2020-08-18T06:47:25.308583shield sshd\[1492\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3034894.ip-149-202-206.eu  user=root
2020-08-18T06:47:27.662954shield sshd\[1492\]: Failed password for root from 149.202.206.206 port 35510 ssh2
2020-08-18T06:51:45.431805shield sshd\[1942\]: Invalid user admin from 149.202.206.206 port 56604
2020-08-18T06:51:45.441357shield sshd\[1942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3034894.ip-149-202-206.eu
2020-08-18T06:51:47.155319shield sshd\[1942\]: Failed password for invalid user admin from 149.202.206.206 port 56604 ssh2
2020-08-18 14:53:46
114.67.108.60 attack
Invalid user sampserver from 114.67.108.60 port 42212
2020-08-18 14:42:38
58.181.114.138 attackbots
php WP PHPmyadamin ABUSE blocked for 12h
2020-08-18 14:31:00
67.205.173.63 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-08-18 14:18:02
142.93.60.53 attackspam
2020-08-18T07:03:04.023683vps773228.ovh.net sshd[9717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.60.53
2020-08-18T07:03:04.014077vps773228.ovh.net sshd[9717]: Invalid user bn from 142.93.60.53 port 44996
2020-08-18T07:03:06.509707vps773228.ovh.net sshd[9717]: Failed password for invalid user bn from 142.93.60.53 port 44996 ssh2
2020-08-18T07:06:59.622928vps773228.ovh.net sshd[9770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.60.53  user=root
2020-08-18T07:07:01.702623vps773228.ovh.net sshd[9770]: Failed password for root from 142.93.60.53 port 55402 ssh2
...
2020-08-18 14:10:33
118.25.133.220 attack
" "
2020-08-18 14:48:53
163.172.66.130 attackspambots
SSH brute-force attempt
2020-08-18 14:30:05
193.112.213.248 attackspam
Aug 18 08:59:31 journals sshd\[111855\]: Invalid user yizhi from 193.112.213.248
Aug 18 08:59:31 journals sshd\[111855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.213.248
Aug 18 08:59:33 journals sshd\[111855\]: Failed password for invalid user yizhi from 193.112.213.248 port 60114 ssh2
Aug 18 09:04:06 journals sshd\[112349\]: Invalid user cug from 193.112.213.248
Aug 18 09:04:06 journals sshd\[112349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.213.248
...
2020-08-18 14:11:18
2a01:4f8:c17:e835::1 attackspambots
Aug 18 05:55:18 server postfix/smtpd[32283]: NOQUEUE: reject: RCPT from unknown[2a01:4f8:c17:e835::1]: 554 5.7.1 Service unavailable; Client host [2a01:4f8:c17:e835::1] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
2020-08-18 14:09:14
171.240.242.51 attackspambots
1597722905 - 08/18/2020 05:55:05 Host: 171.240.242.51/171.240.242.51 Port: 445 TCP Blocked
2020-08-18 14:20:15
157.230.132.100 attackspam
Aug 18 08:35:54 OPSO sshd\[21933\]: Invalid user xuh from 157.230.132.100 port 46604
Aug 18 08:35:54 OPSO sshd\[21933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.132.100
Aug 18 08:35:56 OPSO sshd\[21933\]: Failed password for invalid user xuh from 157.230.132.100 port 46604 ssh2
Aug 18 08:39:16 OPSO sshd\[22981\]: Invalid user xpq from 157.230.132.100 port 42676
Aug 18 08:39:16 OPSO sshd\[22981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.132.100
2020-08-18 14:43:59
212.64.7.134 attackspam
Aug 18 07:00:06 cosmoit sshd[4571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.7.134
2020-08-18 14:34:47
51.75.122.213 attackbots
Invalid user bis from 51.75.122.213 port 59226
2020-08-18 14:13:13
49.232.55.161 attack
2020-08-18T05:52:49.987909randservbullet-proofcloud-66.localdomain sshd[31974]: Invalid user shit from 49.232.55.161 port 43106
2020-08-18T05:52:49.992313randservbullet-proofcloud-66.localdomain sshd[31974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.55.161
2020-08-18T05:52:49.987909randservbullet-proofcloud-66.localdomain sshd[31974]: Invalid user shit from 49.232.55.161 port 43106
2020-08-18T05:52:51.599632randservbullet-proofcloud-66.localdomain sshd[31974]: Failed password for invalid user shit from 49.232.55.161 port 43106 ssh2
...
2020-08-18 14:36:44
142.93.242.246 attack
*Port Scan* detected from 142.93.242.246 (US/United States/New Jersey/North Bergen/-). 4 hits in the last 231 seconds
2020-08-18 14:24:42

Recently Reported IPs

134.221.57.126 234.164.247.190 174.167.42.32 147.63.182.222
49.123.121.164 161.48.180.248 168.255.105.14 116.122.169.82
122.74.100.195 194.27.230.157 228.143.255.76 234.56.246.134
8.161.116.39 254.94.214.10 46.122.214.142 25.26.186.148
168.28.19.135 37.231.102.1 122.166.67.182 219.106.219.204