Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Philippines

Internet Service Provider: Philippine Long Distance Telephone Company

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbots
Honeypot attack, port: 445, PTR: dsl.49.149.103.157.pldt.net.
2020-06-21 22:27:36
attackspambots
Unauthorized connection attempt from IP address 49.149.103.157 on Port 445(SMB)
2020-06-19 21:40:20
Comments on same subnet:
IP Type Details Datetime
49.149.103.45 attack
This user hacked my Roblox account pls find his address and arrest him
2025-01-11 21:43:35
49.149.103.45 attack
This user hacked my Roblox account pls find his address
2025-01-11 21:43:13
49.149.103.45 attack
This user hacked my Roblox account pls find his address
2025-01-11 21:43:10
49.149.103.45 attack
This user hacked my Roblox account pls find his address
2025-01-11 21:42:59
49.149.103.91 attackspam
Unauthorized connection attempt from IP address 49.149.103.91 on Port 445(SMB)
2020-09-23 00:32:37
49.149.103.91 attackbots
Unauthorized connection attempt from IP address 49.149.103.91 on Port 445(SMB)
2020-09-22 16:33:42
49.149.103.72 attackbots
Honeypot attack, port: 445, PTR: dsl.49.149.103.72.pldt.net.
2020-01-27 19:18:40
49.149.103.45 attackbots
Unauthorized connection attempt from IP address 49.149.103.45 on Port 445(SMB)
2020-01-15 01:44:38
49.149.103.115 attack
1577514588 - 12/28/2019 07:29:48 Host: 49.149.103.115/49.149.103.115 Port: 445 TCP Blocked
2019-12-28 14:59:48
49.149.103.196 attack
Unauthorised access (Dec  1) SRC=49.149.103.196 LEN=52 TTL=117 ID=6555 DF TCP DPT=445 WINDOW=8192 SYN
2019-12-02 02:23:19
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.149.103.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61164
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.149.103.157.			IN	A

;; AUTHORITY SECTION:
.			557	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061900 1800 900 604800 86400

;; Query time: 90 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 19 21:40:16 CST 2020
;; MSG SIZE  rcvd: 118
Host info
157.103.149.49.in-addr.arpa domain name pointer dsl.49.149.103.157.pldt.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
157.103.149.49.in-addr.arpa	name = dsl.49.149.103.157.pldt.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
71.6.232.6 attackspambots
 UDP 71.6.232.6:54858 -> port 123, len 40
2020-06-24 07:25:02
92.63.197.58 attack
[MK-VM2] Blocked by UFW
2020-06-24 07:46:23
189.112.131.144 attack
Automatic report - Port Scan Attack
2020-06-24 07:37:04
98.5.240.187 attackbots
Jun 23 23:27:32 buvik sshd[17768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.5.240.187
Jun 23 23:27:34 buvik sshd[17768]: Failed password for invalid user git from 98.5.240.187 port 51874 ssh2
Jun 23 23:33:11 buvik sshd[18547]: Invalid user frontend from 98.5.240.187
...
2020-06-24 07:49:11
161.35.99.173 attack
2020-06-24T01:48:36+0200 Failed SSH Authentication/Brute Force Attack. (Server 10)
2020-06-24 07:55:59
191.109.179.46 attackbotsspam
Unauthorized connection attempt from IP address 191.109.179.46 on Port 445(SMB)
2020-06-24 07:33:08
45.148.10.222 attack
2020-06-23T23:41:06.438750abusebot-2.cloudsearch.cf sshd[16448]: Invalid user fake from 45.148.10.222 port 36322
2020-06-23T23:41:06.449930abusebot-2.cloudsearch.cf sshd[16448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.222
2020-06-23T23:41:06.438750abusebot-2.cloudsearch.cf sshd[16448]: Invalid user fake from 45.148.10.222 port 36322
2020-06-23T23:41:08.406849abusebot-2.cloudsearch.cf sshd[16448]: Failed password for invalid user fake from 45.148.10.222 port 36322 ssh2
2020-06-23T23:41:08.561690abusebot-2.cloudsearch.cf sshd[16450]: Invalid user admin from 45.148.10.222 port 42712
2020-06-23T23:41:08.568046abusebot-2.cloudsearch.cf sshd[16450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.222
2020-06-23T23:41:08.561690abusebot-2.cloudsearch.cf sshd[16450]: Invalid user admin from 45.148.10.222 port 42712
2020-06-23T23:41:11.136730abusebot-2.cloudsearch.cf sshd[16450]: Failed pa
...
2020-06-24 08:02:18
141.98.80.150 attack
2020-06-24T01:26:38.394502web.dutchmasterserver.nl postfix/smtps/smtpd[1384727]: warning: unknown[141.98.80.150]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-06-24T01:26:57.267889web.dutchmasterserver.nl postfix/smtps/smtpd[1384727]: warning: unknown[141.98.80.150]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-06-24T01:27:15.147328web.dutchmasterserver.nl postfix/smtps/smtpd[1384766]: warning: unknown[141.98.80.150]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-06-24T01:27:21.325632web.dutchmasterserver.nl postfix/smtps/smtpd[1384727]: warning: unknown[141.98.80.150]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-06-24T01:33:44.388840web.dutchmasterserver.nl postfix/smtps/smtpd[1386944]: warning: unknown[141.98.80.150]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-06-24 07:35:32
132.232.248.82 attackbotsspam
Jun 24 01:12:43 vps687878 sshd\[18115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.248.82  user=root
Jun 24 01:12:45 vps687878 sshd\[18115\]: Failed password for root from 132.232.248.82 port 37326 ssh2
Jun 24 01:14:14 vps687878 sshd\[18182\]: Invalid user zack from 132.232.248.82 port 56360
Jun 24 01:14:14 vps687878 sshd\[18182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.248.82
Jun 24 01:14:16 vps687878 sshd\[18182\]: Failed password for invalid user zack from 132.232.248.82 port 56360 ssh2
...
2020-06-24 07:39:40
103.210.237.124 attack
Jun 24 00:31:24 pve1 sshd[16530]: Failed password for root from 103.210.237.124 port 39833 ssh2
...
2020-06-24 07:23:19
200.41.86.59 attackspam
Invalid user test from 200.41.86.59 port 59472
2020-06-24 07:29:53
181.143.172.106 attackspambots
Jun 24 01:43:31 vps687878 sshd\[20478\]: Failed password for invalid user svnuser from 181.143.172.106 port 6092 ssh2
Jun 24 01:47:37 vps687878 sshd\[20833\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.143.172.106  user=root
Jun 24 01:47:39 vps687878 sshd\[20833\]: Failed password for root from 181.143.172.106 port 3356 ssh2
Jun 24 01:51:54 vps687878 sshd\[21160\]: Invalid user webmin from 181.143.172.106 port 47860
Jun 24 01:51:54 vps687878 sshd\[21160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.143.172.106
...
2020-06-24 08:01:04
106.12.165.53 attack
Jun 23 16:20:41 r.ca sshd[6550]: Failed password for invalid user cliente from 106.12.165.53 port 37110 ssh2
2020-06-24 07:50:27
139.213.220.70 attackbots
2020-06-23T23:43:08.824559shield sshd\[17415\]: Invalid user es from 139.213.220.70 port 24950
2020-06-23T23:43:08.829015shield sshd\[17415\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.213.220.70
2020-06-23T23:43:11.202130shield sshd\[17415\]: Failed password for invalid user es from 139.213.220.70 port 24950 ssh2
2020-06-23T23:44:00.703223shield sshd\[17478\]: Invalid user demo from 139.213.220.70 port 30650
2020-06-23T23:44:00.713257shield sshd\[17478\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.213.220.70
2020-06-24 07:44:33
186.215.235.9 attackspam
Jun 23 22:31:41 ArkNodeAT sshd\[6572\]: Invalid user boss from 186.215.235.9
Jun 23 22:31:41 ArkNodeAT sshd\[6572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.215.235.9
Jun 23 22:31:43 ArkNodeAT sshd\[6572\]: Failed password for invalid user boss from 186.215.235.9 port 58753 ssh2
2020-06-24 07:47:36

Recently Reported IPs

162.213.251.87 119.116.13.121 104.219.248.88 84.141.246.67
81.133.24.24 79.137.80.110 78.138.157.42 68.65.122.236
54.38.65.215 176.65.114.96 104.219.248.45 199.188.201.24
176.67.81.9 123.181.62.247 7.52.218.122 100.36.131.254
231.4.101.151 231.209.179.181 103.129.195.196 135.0.128.165