Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: TOT Public Company Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Unauthorized connection attempt from IP address 1.1.139.223 on Port 445(SMB)
2020-04-30 20:17:07
Comments on same subnet:
IP Type Details Datetime
1.1.139.54 attackbots
 TCP (SYN) 1.1.139.54:58126 -> port 22, len 52
2020-05-20 07:41:38
1.1.139.112 attackbots
" "
2020-04-18 12:18:44
1.1.139.37 attack
Honeypot attack, port: 81, PTR: node-279.pool-1-1.dynamic.totinternet.net.
2020-02-11 08:08:53
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.1.139.223
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52967
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.1.139.223.			IN	A

;; AUTHORITY SECTION:
.			584	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020043000 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 30 20:17:02 CST 2020
;; MSG SIZE  rcvd: 115
Host info
223.139.1.1.in-addr.arpa domain name pointer node-2cf.pool-1-1.dynamic.totinternet.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
223.139.1.1.in-addr.arpa	name = node-2cf.pool-1-1.dynamic.totinternet.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
46.245.179.222 attack
Oct 21 21:19:23 hanapaa sshd\[2681\]: Invalid user igor from 46.245.179.222
Oct 21 21:19:23 hanapaa sshd\[2681\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46-245-179-222.static.mivitec.net
Oct 21 21:19:25 hanapaa sshd\[2681\]: Failed password for invalid user igor from 46.245.179.222 port 47758 ssh2
Oct 21 21:22:53 hanapaa sshd\[2947\]: Invalid user deluge from 46.245.179.222
Oct 21 21:22:53 hanapaa sshd\[2947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46-245-179-222.static.mivitec.net
2019-10-22 15:52:50
118.25.27.102 attackspambots
Oct 21 18:07:07 wbs sshd\[25088\]: Invalid user Cisco from 118.25.27.102
Oct 21 18:07:07 wbs sshd\[25088\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.27.102
Oct 21 18:07:09 wbs sshd\[25088\]: Failed password for invalid user Cisco from 118.25.27.102 port 40407 ssh2
Oct 21 18:11:36 wbs sshd\[25597\]: Invalid user cashier123 from 118.25.27.102
Oct 21 18:11:36 wbs sshd\[25597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.27.102
2019-10-22 15:27:11
209.235.67.48 attackspam
2019-10-22T07:23:46.791070homeassistant sshd[1633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.235.67.48  user=root
2019-10-22T07:23:49.115596homeassistant sshd[1633]: Failed password for root from 209.235.67.48 port 51431 ssh2
...
2019-10-22 15:25:45
212.47.251.164 attack
2019-10-22T07:10:20.195437abusebot-4.cloudsearch.cf sshd\[25288\]: Invalid user anna from 212.47.251.164 port 46898
2019-10-22 15:52:07
111.11.5.118 attack
UTC: 2019-10-21 port: 23/tcp
2019-10-22 15:28:52
94.4.237.213 attackbots
Brute force attempt
2019-10-22 15:33:13
134.209.36.79 attack
Oct 21 16:06:25 nbi-634 sshd[18346]: User r.r from 134.209.36.79 not allowed because not listed in AllowUsers
Oct 21 16:06:25 nbi-634 sshd[18346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.36.79  user=r.r
Oct 21 16:06:28 nbi-634 sshd[18346]: Failed password for invalid user r.r from 134.209.36.79 port 44208 ssh2
Oct 21 16:06:28 nbi-634 sshd[18346]: Received disconnect from 134.209.36.79 port 44208:11: Bye Bye [preauth]
Oct 21 16:06:28 nbi-634 sshd[18346]: Disconnected from 134.209.36.79 port 44208 [preauth]
Oct 21 16:25:45 nbi-634 sshd[19182]: User r.r from 134.209.36.79 not allowed because not listed in AllowUsers
Oct 21 16:25:45 nbi-634 sshd[19182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.36.79  user=r.r
Oct 21 16:25:47 nbi-634 sshd[19182]: Failed password for invalid user r.r from 134.209.36.79 port 48990 ssh2
Oct 21 16:25:47 nbi-634 sshd[19182]: Received dis........
-------------------------------
2019-10-22 15:57:02
168.232.163.250 attack
SSH Brute-Forcing (ownc)
2019-10-22 15:49:46
92.53.90.179 attackspambots
Port scan on 8 port(s): 4034 4252 4624 5026 5099 5145 5395 5477
2019-10-22 15:30:34
222.186.175.147 attack
Oct 21 21:40:56 web1 sshd\[29057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.147  user=root
Oct 21 21:40:58 web1 sshd\[29057\]: Failed password for root from 222.186.175.147 port 37860 ssh2
Oct 21 21:41:02 web1 sshd\[29057\]: Failed password for root from 222.186.175.147 port 37860 ssh2
Oct 21 21:41:24 web1 sshd\[29095\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.147  user=root
Oct 21 21:41:26 web1 sshd\[29095\]: Failed password for root from 222.186.175.147 port 39008 ssh2
2019-10-22 15:45:40
138.255.184.231 attack
Automatic report - Port Scan Attack
2019-10-22 15:50:54
80.211.249.177 attack
Oct 22 06:46:03 intra sshd\[24331\]: Invalid user abc123 from 80.211.249.177Oct 22 06:46:04 intra sshd\[24331\]: Failed password for invalid user abc123 from 80.211.249.177 port 46696 ssh2Oct 22 06:50:02 intra sshd\[24361\]: Invalid user rahynng from 80.211.249.177Oct 22 06:50:05 intra sshd\[24361\]: Failed password for invalid user rahynng from 80.211.249.177 port 56226 ssh2Oct 22 06:53:48 intra sshd\[24416\]: Invalid user volker from 80.211.249.177Oct 22 06:53:50 intra sshd\[24416\]: Failed password for invalid user volker from 80.211.249.177 port 37518 ssh2
...
2019-10-22 15:40:26
104.148.83.35 attack
Brute force SMTP login attempts.
2019-10-22 15:51:37
88.214.26.8 attackspam
SSH Brute Force
2019-10-22 15:44:44
54.39.196.199 attack
Invalid user iftfw from 54.39.196.199 port 48632
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.196.199
Failed password for invalid user iftfw from 54.39.196.199 port 48632 ssh2
Invalid user andy from 54.39.196.199 port 59458
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.196.199
2019-10-22 15:58:26

Recently Reported IPs

5.188.9.19 222.247.164.100 185.228.80.32 177.137.58.82
89.210.29.173 222.218.17.199 172.97.4.189 211.253.133.50
128.69.101.36 196.202.106.141 37.185.26.226 80.249.161.173
111.177.32.145 144.172.84.62 191.137.39.232 109.24.144.69
54.38.123.240 132.232.68.26 125.160.211.15 177.10.104.161