Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
223.149.2.128 attack
Mirai and Reaper Exploitation Traffic
2020-08-18 03:52:14
223.149.255.58 attackbots
Honeypot hit.
2020-08-10 12:09:07
223.149.241.39 attackspam
GPON Home Routers Remote Code Execution Vulnerability
2020-08-09 20:31:12
223.149.202.132 attackspambots
Port probing on unauthorized port 23
2020-07-30 23:17:58
223.149.228.207 attackbots
Unauthorized connection attempt detected from IP address 223.149.228.207 to port 23
2020-07-25 23:11:01
223.149.202.193 attackbots
Jul 25 05:51:17 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=223.149.202.193 DST=79.143.186.54 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=11710 DF PROTO=TCP SPT=7572 DPT=23 WINDOW=5440 RES=0x00 SYN URGP=0 Jul 25 05:51:20 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=223.149.202.193 DST=79.143.186.54 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=11711 DF PROTO=TCP SPT=7572 DPT=23 WINDOW=5440 RES=0x00 SYN URGP=0 Jul 25 05:51:26 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=223.149.202.193 DST=79.143.186.54 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=11712 DF PROTO=TCP SPT=7572 DPT=23 WINDOW=5440 RES=0x00 SYN URGP=0
2020-07-25 16:34:08
223.149.248.115 attackspam
Port probing on unauthorized port 5555
2020-07-20 05:13:12
223.149.254.12 attack
Auto Detect Rule!
proto TCP (SYN), 223.149.254.12:2707->gjan.info:23, len 60
2020-07-18 08:05:27
223.149.207.157 attack
Fail2Ban Ban Triggered
2020-07-10 01:58:34
223.149.203.80 attackspambots
Automatic report - Port Scan Attack
2020-06-30 23:23:13
223.149.200.169 attackbotsspam
Unauthorized connection attempt detected from IP address 223.149.200.169 to port 23
2020-06-29 03:10:07
223.149.252.92 attack
Automatic report - Port Scan Attack
2020-06-25 17:42:48
223.149.245.224 attack
Honeypot hit.
2020-06-23 18:20:07
223.149.201.4 attackbotsspam
"SERVER-WEBAPP GPON Router authentication bypass and command injection attempt"
2020-06-16 17:50:28
223.149.21.135 attackspambots
scan r
2020-06-02 22:43:17
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 223.149.2.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6809
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;223.149.2.104.			IN	A

;; AUTHORITY SECTION:
.			376	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 19:11:49 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 104.2.149.223.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.2.149.223.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
91.134.240.73 attackspam
2020-03-23T09:51:43.788938vps773228.ovh.net sshd[22338]: Invalid user nelly from 91.134.240.73 port 45930
2020-03-23T09:51:43.805606vps773228.ovh.net sshd[22338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.ip-91-134-240.eu
2020-03-23T09:51:43.788938vps773228.ovh.net sshd[22338]: Invalid user nelly from 91.134.240.73 port 45930
2020-03-23T09:51:45.830134vps773228.ovh.net sshd[22338]: Failed password for invalid user nelly from 91.134.240.73 port 45930 ssh2
2020-03-23T09:59:12.049746vps773228.ovh.net sshd[25061]: Invalid user linux from 91.134.240.73 port 34350
...
2020-03-23 20:21:24
178.128.255.8 attackspam
Mar 23 13:12:47 lukav-desktop sshd\[2969\]: Invalid user anais from 178.128.255.8
Mar 23 13:12:47 lukav-desktop sshd\[2969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.255.8
Mar 23 13:12:49 lukav-desktop sshd\[2969\]: Failed password for invalid user anais from 178.128.255.8 port 58012 ssh2
Mar 23 13:16:41 lukav-desktop sshd\[22940\]: Invalid user z from 178.128.255.8
Mar 23 13:16:41 lukav-desktop sshd\[22940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.255.8
2020-03-23 19:54:12
36.92.242.130 attackspambots
445/tcp
[2020-03-23]1pkt
2020-03-23 19:55:17
87.119.69.74 attack
23/tcp
[2020-03-23]1pkt
2020-03-23 20:00:19
95.110.235.17 attack
SSH Brute-Forcing (server2)
2020-03-23 20:12:34
103.28.219.211 attackbots
Attempted connection to port 22.
2020-03-23 20:24:00
93.125.104.170 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-23 19:58:43
187.53.109.140 attack
2020-03-23T12:07:21.849528jannga.de sshd[28836]: Invalid user oracle from 187.53.109.140 port 55334
2020-03-23T12:07:24.075368jannga.de sshd[28836]: Failed password for invalid user oracle from 187.53.109.140 port 55334 ssh2
...
2020-03-23 19:53:20
194.32.119.158 attackbotsspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/194.32.119.158/ 
 
 NL - 1H : (5)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : NL 
 NAME ASN : ASN207083 
 
 IP : 194.32.119.158 
 
 CIDR : 194.32.119.0/24 
 
 PREFIX COUNT : 24 
 
 UNIQUE IP COUNT : 9216 
 
 
 ATTACKS DETECTED ASN207083 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2020-03-23 07:34:43 
 
 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN  - data recovery
2020-03-23 20:05:14
118.69.72.198 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-23 19:52:04
101.91.178.122 attackspambots
SSH bruteforce
2020-03-23 19:44:22
138.97.220.170 attack
Automatic report - Port Scan Attack
2020-03-23 20:23:13
117.6.64.147 attackbotsspam
445/tcp
[2020-03-23]1pkt
2020-03-23 20:23:31
112.112.60.194 attackspam
[Mon Mar 02 09:04:44 2020] - Syn Flood From IP: 112.112.60.194 Port: 6000
2020-03-23 19:39:30
129.28.29.57 attack
2020-03-22 UTC: (9x) - abdullah,be,francesca,fujimura,neola,qi,resin,support,vbox
2020-03-23 19:37:33

Recently Reported IPs

117.251.50.63 46.176.0.158 182.88.233.220 162.255.119.150
173.170.161.162 137.184.12.238 117.151.186.92 200.110.173.241
14.198.130.141 119.123.238.251 120.28.65.5 156.198.145.158
177.246.156.78 167.250.98.181 82.151.125.106 154.72.81.154
59.127.43.122 221.138.146.30 75.109.184.190 156.241.235.125