Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.209.149.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2619
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;85.209.149.53.			IN	A

;; AUTHORITY SECTION:
.			435	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062801 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 29 12:12:41 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 53.149.209.85.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 53.149.209.85.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
128.127.71.241 attackbots
Automatic report - XMLRPC Attack
2019-11-10 18:19:47
137.74.119.50 attack
Nov 10 07:52:16 localhost sshd\[10435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.119.50  user=root
Nov 10 07:52:19 localhost sshd\[10435\]: Failed password for root from 137.74.119.50 port 51076 ssh2
Nov 10 07:55:53 localhost sshd\[10654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.119.50  user=root
Nov 10 07:55:55 localhost sshd\[10654\]: Failed password for root from 137.74.119.50 port 59386 ssh2
Nov 10 07:59:42 localhost sshd\[10685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.119.50  user=root
...
2019-11-10 18:50:34
188.225.26.117 attackbots
Port scan on 3 port(s): 2389 3002 18389
2019-11-10 18:28:03
42.229.143.242 attack
42.229.143.242 was recorded 5 times by 1 hosts attempting to connect to the following ports: 23. Incident counter (4h, 24h, all-time): 5, 12, 12
2019-11-10 18:53:05
106.13.136.238 attack
SSH bruteforce
2019-11-10 18:29:34
218.70.174.23 attack
Nov 10 10:35:12 tux-35-217 sshd\[27678\]: Invalid user zxcvb!@\#123 from 218.70.174.23 port 45710
Nov 10 10:35:12 tux-35-217 sshd\[27678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.70.174.23
Nov 10 10:35:13 tux-35-217 sshd\[27678\]: Failed password for invalid user zxcvb!@\#123 from 218.70.174.23 port 45710 ssh2
Nov 10 10:40:50 tux-35-217 sshd\[27707\]: Invalid user !1A2b3c4d! from 218.70.174.23 port 60122
Nov 10 10:40:50 tux-35-217 sshd\[27707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.70.174.23
...
2019-11-10 18:51:35
151.80.155.98 attackbots
Nov 10 11:28:28 host sshd[6082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.ip-151-80-155.eu  user=root
Nov 10 11:28:30 host sshd[6082]: Failed password for root from 151.80.155.98 port 52016 ssh2
...
2019-11-10 18:55:10
109.194.175.27 attackspam
Nov 10 07:23:04 minden010 sshd[20239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.194.175.27
Nov 10 07:23:06 minden010 sshd[20239]: Failed password for invalid user 2003 from 109.194.175.27 port 58084 ssh2
Nov 10 07:27:11 minden010 sshd[21623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.194.175.27
...
2019-11-10 18:37:06
37.254.220.249 attackspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/37.254.220.249/ 
 
 IR - 1H : (50)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : IR 
 NAME ASN : ASN58224 
 
 IP : 37.254.220.249 
 
 CIDR : 37.254.128.0/17 
 
 PREFIX COUNT : 898 
 
 UNIQUE IP COUNT : 2324736 
 
 
 ATTACKS DETECTED ASN58224 :  
  1H - 1 
  3H - 3 
  6H - 6 
 12H - 9 
 24H - 18 
 
 DateTime : 2019-11-10 07:26:48 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery
2019-11-10 18:47:07
151.30.34.162 attackspam
Automatic report - Port Scan Attack
2019-11-10 18:27:11
154.209.75.99 attackspambots
Lines containing failures of 154.209.75.99
Nov  9 23:43:30 myhost sshd[7407]: Invalid user nadege from 154.209.75.99 port 45836
Nov  9 23:43:30 myhost sshd[7407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.209.75.99
Nov  9 23:43:31 myhost sshd[7407]: Failed password for invalid user nadege from 154.209.75.99 port 45836 ssh2
Nov  9 23:43:31 myhost sshd[7407]: Received disconnect from 154.209.75.99 port 45836:11: Bye Bye [preauth]
Nov  9 23:43:31 myhost sshd[7407]: Disconnected from invalid user nadege 154.209.75.99 port 45836 [preauth]
Nov  9 23:55:05 myhost sshd[7415]: User r.r from 154.209.75.99 not allowed because not listed in AllowUsers
Nov  9 23:55:05 myhost sshd[7415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.209.75.99  user=r.r
Nov  9 23:55:08 myhost sshd[7415]: Failed password for invalid user r.r from 154.209.75.99 port 37692 ssh2
Nov  9 23:55:08 myhost sshd[7415]........
------------------------------
2019-11-10 18:49:45
92.222.72.234 attackspambots
Nov  9 23:42:57 server sshd\[25666\]: Failed password for invalid user oracle2 from 92.222.72.234 port 45407 ssh2
Nov 10 10:20:27 server sshd\[6976\]: Invalid user argos from 92.222.72.234
Nov 10 10:20:27 server sshd\[6976\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=234.ip-92-222-72.eu 
Nov 10 10:20:29 server sshd\[6976\]: Failed password for invalid user argos from 92.222.72.234 port 56680 ssh2
Nov 10 10:33:06 server sshd\[10263\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=234.ip-92-222-72.eu  user=root
...
2019-11-10 18:31:45
104.131.224.81 attackspam
Nov 10 11:33:32 MK-Soft-VM6 sshd[5897]: Failed password for root from 104.131.224.81 port 42983 ssh2
...
2019-11-10 18:53:19
89.35.39.180 attack
Fail2Ban Ban Triggered
2019-11-10 18:25:55
217.182.79.245 attackspam
Triggered by Fail2Ban at Vostok web server
2019-11-10 18:50:49

Recently Reported IPs

180.76.18.215 137.226.235.239 137.226.237.145 192.24.25.3
169.229.136.171 137.226.253.162 169.229.142.49 180.76.84.198
137.226.235.58 83.252.11.47 201.186.40.20 181.189.253.17
137.226.218.60 137.226.192.150 137.226.104.190 201.184.176.107
45.67.213.118 170.83.78.132 137.226.185.60 179.43.187.11