Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Ghana

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
41.242.136.18 attackspam
WordPress brute force
2020-06-28 05:48:04
41.242.136.46 attackbotsspam
WordPress brute force
2020-06-28 05:47:35
41.242.136.23 attackspam
Mar 17 19:05:22 b-admin sshd[2734]: Invalid user pi from 41.242.136.23 port 59108
Mar 17 19:05:22 b-admin sshd[2734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.242.136.23
Mar 17 19:05:25 b-admin sshd[2734]: Failed password for invalid user pi from 41.242.136.23 port 59108 ssh2
Mar 17 19:05:26 b-admin sshd[2734]: Connection closed by 41.242.136.23 port 59108 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=41.242.136.23
2020-03-18 03:35:34
41.242.136.148 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-07 19:04:15
41.242.136.148 attackbotsspam
unauthorized connection attempt
2020-02-16 18:33:49
41.242.136.5 attack
Attempted to scam professionals in an online directory
2019-07-10 04:37:29
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.242.136.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56838
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;41.242.136.7.			IN	A

;; AUTHORITY SECTION:
.			592	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 04:13:49 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 7.136.242.41.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 7.136.242.41.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
185.142.239.49 attackspam
Sep  2 07:11:29 durga sshd[172738]: Failed password for r.r from 185.142.239.49 port 60624 ssh2
Sep  2 07:11:31 durga sshd[172738]: Failed password for r.r from 185.142.239.49 port 60624 ssh2
Sep  2 07:11:33 durga sshd[172738]: Failed password for r.r from 185.142.239.49 port 60624 ssh2
Sep  2 07:11:35 durga sshd[172738]: Failed password for r.r from 185.142.239.49 port 60624 ssh2
Sep  2 07:11:37 durga sshd[172738]: Failed password for r.r from 185.142.239.49 port 60624 ssh2
Sep  2 07:11:39 durga sshd[172738]: Failed password for r.r from 185.142.239.49 port 60624 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=185.142.239.49
2020-09-06 17:44:00
43.241.64.199 attackbotsspam
Icarus honeypot on github
2020-09-06 17:47:36
166.170.223.231 attack
Brute forcing email accounts
2020-09-06 17:40:31
50.252.47.29 attackspam
Honeypot attack, port: 81, PTR: 50-252-47-29-static.hfc.comcastbusiness.net.
2020-09-06 17:49:32
123.206.65.38 attack
SSH Invalid Login
2020-09-06 18:00:47
107.189.10.174 attackspambots
3 failed attempts at connecting to SSH.
2020-09-06 17:43:30
220.175.144.223 attack
SpamScore above: 10.0
2020-09-06 17:29:57
187.115.177.164 attackspambots
1599332383 - 09/05/2020 20:59:43 Host: 187.115.177.164/187.115.177.164 Port: 445 TCP Blocked
2020-09-06 17:32:09
52.173.28.92 attack
(sshd) Failed SSH login from 52.173.28.92 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  6 05:28:11 optimus sshd[26268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.173.28.92  user=root
Sep  6 05:28:13 optimus sshd[26268]: Failed password for root from 52.173.28.92 port 45618 ssh2
Sep  6 05:31:47 optimus sshd[27194]: Invalid user murakami from 52.173.28.92
Sep  6 05:31:47 optimus sshd[27194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.173.28.92 
Sep  6 05:31:50 optimus sshd[27194]: Failed password for invalid user murakami from 52.173.28.92 port 59550 ssh2
2020-09-06 17:54:26
89.234.157.254 attackbotsspam
Unauthorized access detected from black listed ip!
2020-09-06 17:42:04
192.99.12.40 attack
Automatic report - Banned IP Access
2020-09-06 17:38:06
45.238.232.42 attackbots
Sep  6 09:44:05 prod4 sshd\[13041\]: Failed password for root from 45.238.232.42 port 52290 ssh2
Sep  6 09:48:23 prod4 sshd\[14974\]: Failed password for root from 45.238.232.42 port 58982 ssh2
Sep  6 09:52:39 prod4 sshd\[16959\]: Failed password for root from 45.238.232.42 port 37502 ssh2
...
2020-09-06 17:56:43
36.226.76.176 attackbotsspam
Sep  4 03:24:06 kunden sshd[28861]: Invalid user admin from 36.226.76.176
Sep  4 03:24:06 kunden sshd[28861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36-226-76-176.dynamic-ip.hinet.net 
Sep  4 03:24:08 kunden sshd[28861]: Failed password for invalid user admin from 36.226.76.176 port 60891 ssh2
Sep  4 03:24:08 kunden sshd[28861]: Received disconnect from 36.226.76.176: 11: Bye Bye [preauth]
Sep  4 03:24:10 kunden sshd[28863]: Invalid user admin from 36.226.76.176
Sep  4 03:24:10 kunden sshd[28863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36-226-76-176.dynamic-ip.hinet.net 
Sep  4 03:24:13 kunden sshd[28863]: Failed password for invalid user admin from 36.226.76.176 port 60998 ssh2
Sep  4 03:24:13 kunden sshd[28863]: Received disconnect from 36.226.76.176: 11: Bye Bye [preauth]
Sep  4 03:24:15 kunden sshd[28865]: Invalid user admin from 36.226.76.176
Sep  4 03:24:15 kunden ssh........
-------------------------------
2020-09-06 18:06:26
87.101.149.194 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-06 17:58:56
185.220.101.148 attackbotsspam
chaangnoifulda.de:80 185.220.101.148 - - [05/Sep/2020:23:14:49 +0200] "POST /xmlrpc.php HTTP/1.0" 301 501 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
chaangnoifulda.de 185.220.101.148 [05/Sep/2020:23:14:50 +0200] "POST /xmlrpc.php HTTP/1.0" 200 3627 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
2020-09-06 18:10:24

Recently Reported IPs

191.10.139.227 14.45.74.212 157.245.106.229 200.73.130.83
188.4.240.99 59.95.76.48 190.248.52.210 112.247.128.170
27.73.105.195 222.187.68.22 111.67.205.148 3.237.12.23
54.217.76.59 146.59.216.73 175.107.4.161 1.226.99.39
102.141.234.18 94.230.132.121 190.200.191.206 58.219.224.188