Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: TOT Public Company Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspam
1586231183 - 04/07/2020 05:46:23 Host: 1.1.214.119/1.1.214.119 Port: 445 TCP Blocked
2020-04-07 19:36:21
Comments on same subnet:
IP Type Details Datetime
1.1.214.95 attackspam
2020-05-21T13:57:22.777218suse-nuc sshd[6015]: Invalid user admin from 1.1.214.95 port 43183
...
2020-09-27 05:58:43
1.1.214.95 attack
2020-05-21T13:57:22.777218suse-nuc sshd[6015]: Invalid user admin from 1.1.214.95 port 43183
...
2020-09-26 22:18:37
1.1.214.95 attackbotsspam
2020-05-21T13:57:22.777218suse-nuc sshd[6015]: Invalid user admin from 1.1.214.95 port 43183
...
2020-09-26 14:03:10
1.1.214.80 attackbots
Unauthorized connection attempt from IP address 1.1.214.80 on Port 445(SMB)
2020-05-06 00:29:33
1.1.214.100 attackbotsspam
Unauthorized connection attempt from IP address 1.1.214.100 on Port 445(SMB)
2020-03-17 12:07:19
1.1.214.172 attack
Nov 24 17:13:08 mail sshd[31569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.1.214.172 
Nov 24 17:13:10 mail sshd[31569]: Failed password for invalid user mpeg from 1.1.214.172 port 46524 ssh2
Nov 24 17:18:47 mail sshd[32371]: Failed password for root from 1.1.214.172 port 54550 ssh2
2019-11-25 00:43:50
1.1.214.172 attack
Nov 24 08:14:42 heissa sshd\[1603\]: Invalid user buster from 1.1.214.172 port 40912
Nov 24 08:14:42 heissa sshd\[1603\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.1.214.172
Nov 24 08:14:44 heissa sshd\[1603\]: Failed password for invalid user buster from 1.1.214.172 port 40912 ssh2
Nov 24 08:21:14 heissa sshd\[5401\]: Invalid user admin from 1.1.214.172 port 49416
Nov 24 08:21:14 heissa sshd\[5401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.1.214.172
2019-11-24 17:22:26
1.1.214.212 attack
Sat, 20 Jul 2019 21:55:20 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 10:48:37
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.1.214.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42482
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.1.214.119.			IN	A

;; AUTHORITY SECTION:
.			470	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040700 1800 900 604800 86400

;; Query time: 94 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 07 19:36:08 CST 2020
;; MSG SIZE  rcvd: 115
Host info
119.214.1.1.in-addr.arpa domain name pointer node-h2v.pool-1-1.dynamic.totinternet.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
119.214.1.1.in-addr.arpa	name = node-h2v.pool-1-1.dynamic.totinternet.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
78.128.113.130 attackspam
Dec 14 10:55:03 dedicated sshd[26151]: Invalid user admin from 78.128.113.130 port 53442
2019-12-14 18:02:22
51.38.126.92 attackspam
Dec 14 09:43:56 legacy sshd[22700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.126.92
Dec 14 09:43:57 legacy sshd[22700]: Failed password for invalid user abcd from 51.38.126.92 port 42050 ssh2
Dec 14 09:49:13 legacy sshd[22922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.126.92
...
2019-12-14 18:10:08
63.81.87.73 attackspam
Dec 14 08:18:55 grey postfix/smtpd\[25608\]: NOQUEUE: reject: RCPT from delicate.vidyad.com\[63.81.87.73\]: 554 5.7.1 Service unavailable\; Client host \[63.81.87.73\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[63.81.87.73\]\; from=\ to=\ proto=ESMTP helo=\
...
2019-12-14 18:20:51
60.250.50.235 attack
Dec 14 07:25:51 MK-Soft-VM7 sshd[11845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.250.50.235 
Dec 14 07:25:53 MK-Soft-VM7 sshd[11845]: Failed password for invalid user gmodserver from 60.250.50.235 port 42344 ssh2
...
2019-12-14 18:26:21
79.124.62.27 attackspam
Dec 14 10:53:30 debian-2gb-nbg1-2 kernel: \[24598738.737267\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=79.124.62.27 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=44997 PROTO=TCP SPT=52705 DPT=8080 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-14 17:55:28
124.205.90.106 attack
Dec 14 04:18:03 plusreed sshd[17563]: Invalid user vcsa from 124.205.90.106
...
2019-12-14 18:09:39
123.16.138.187 attack
IP: 123.16.138.187
ASN: AS45899 VNPT Corp
Port: Simple Mail Transfer 25
Found in one or more Blacklists
Date: 14/12/2019 6:26:08 AM UTC
2019-12-14 18:14:59
178.62.78.183 attackbotsspam
Dec 14 10:09:52 sd-53420 sshd\[7753\]: User root from 178.62.78.183 not allowed because none of user's groups are listed in AllowGroups
Dec 14 10:09:52 sd-53420 sshd\[7753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.78.183  user=root
Dec 14 10:09:54 sd-53420 sshd\[7753\]: Failed password for invalid user root from 178.62.78.183 port 54214 ssh2
Dec 14 10:18:21 sd-53420 sshd\[8343\]: Invalid user yuhua from 178.62.78.183
Dec 14 10:18:21 sd-53420 sshd\[8343\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.78.183
...
2019-12-14 18:16:18
41.208.150.114 attackspam
Dec 14 09:56:30 meumeu sshd[14693]: Failed password for root from 41.208.150.114 port 53116 ssh2
Dec 14 10:02:46 meumeu sshd[15751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.208.150.114 
Dec 14 10:02:48 meumeu sshd[15751]: Failed password for invalid user fuckup from 41.208.150.114 port 33048 ssh2
...
2019-12-14 18:17:00
65.50.209.87 attackspambots
Dec 14 10:36:57 v22018086721571380 sshd[6078]: Failed password for invalid user temp1 from 65.50.209.87 port 42626 ssh2
2019-12-14 17:57:45
180.127.93.85 attackbots
Dec 14 07:26:18 grey postfix/smtpd\[13604\]: NOQUEUE: reject: RCPT from unknown\[180.127.93.85\]: 554 5.7.1 Service unavailable\; Client host \[180.127.93.85\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=180.127.93.85\; from=\ to=\ proto=SMTP helo=\
...
2019-12-14 18:07:48
42.113.232.193 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-12-14 18:15:48
189.181.219.135 attackbots
Dec 14 06:48:43 ws12vmsma01 sshd[63276]: Invalid user katsumata from 189.181.219.135
Dec 14 06:48:45 ws12vmsma01 sshd[63276]: Failed password for invalid user katsumata from 189.181.219.135 port 32895 ssh2
Dec 14 06:54:52 ws12vmsma01 sshd[64096]: Invalid user turumaru from 189.181.219.135
...
2019-12-14 17:59:32
82.112.45.67 attackbotsspam
1576304759 - 12/14/2019 07:25:59 Host: 82.112.45.67/82.112.45.67 Port: 445 TCP Blocked
2019-12-14 18:22:56
146.242.56.21 attackspam
Host Scan
2019-12-14 17:48:03

Recently Reported IPs

14.181.78.7 218.80.187.130 121.229.54.116 203.3.135.56
201.20.248.195 171.241.79.160 207.199.127.130 85.186.29.160
212.21.11.44 36.71.232.18 223.150.16.237 36.71.78.228
2.134.48.159 118.175.173.161 171.5.217.57 125.27.44.147
125.46.242.232 123.28.154.218 1.168.236.233 36.67.128.250