Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Taiwan (Province of China)

Internet Service Provider: Chunghwa Telecom Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
Type Details Datetime
attack 
unauthorized connection attempt
 2020-02-15 18:03:39
Comments on same subnet:
IP Type Details Datetime
111.249.215.53 attackbots 
1595519016 - 07/23/2020 17:43:36 Host: 111.249.215.53/111.249.215.53 Port: 445 TCP Blocked
 2020-07-24 00:52:50
111.249.21.55 attack 
Unauthorised access (Jun  2) SRC=111.249.21.55 LEN=40 TTL=46 ID=48332 TCP DPT=23 WINDOW=360 SYN
 2020-06-02 12:53:37
111.249.20.246 attack 
Honeypot attack, port: 445, PTR: 111-249-20-246.dynamic-ip.hinet.net.
 2020-03-08 20:03:09
111.249.20.168 attack 
1582519624 - 02/24/2020 05:47:04 Host: 111.249.20.168/111.249.20.168 Port: 445 TCP Blocked
 2020-02-24 18:34:38
111.249.215.245 attackspambots 
MultiHost/MultiPort Probe, Scan, Hack -
 2020-02-15 18:01:21
111.249.216.251 attack 
MultiHost/MultiPort Probe, Scan, Hack -
 2020-02-15 17:59:03
111.249.24.25 attackbotsspam 
Unauthorized connection attempt from IP address 111.249.24.25 on Port 445(SMB)
 2019-12-01 03:14:36
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.249.2.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60406
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;111.249.2.45.			IN	A

;; AUTHORITY SECTION:
.			380	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021500 1800 900 604800 86400

;; Query time: 179 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 18:03:36 CST 2020
;; MSG SIZE  rcvd: 116
Host info
45.2.249.111.in-addr.arpa domain name pointer 111-249-2-45.dynamic-ip.hinet.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
45.2.249.111.in-addr.arpa	name = 111-249-2-45.dynamic-ip.hinet.net.

Authoritative answers can be found from:
Related IP info:
111.249.2.74
111.249.2.65
111.249.2.215
111.249.2.73
111.249.2.148
111.249.2.99
111.249.2.100
111.249.2.166
111.249.2.192
111.249.2.77
111.249.2.50
111.249.2.141
111.249.2.196
111.249.2.175
111.249.2.81
111.249.2.32
111.249.2.232
111.249.2.36
111.249.2.112
111.249.2.49
111.249.2.102
111.249.2.169
111.249.2.220
111.249.2.135
111.249.2.128
111.249.2.121
111.249.2.236
111.249.2.12
111.249.2.14
111.249.2.229
111.249.2.149
111.249.2.164
111.249.2.161
111.249.2.105
111.249.2.6
111.249.2.42
111.249.2.129
111.249.2.7
111.249.2.198
111.249.2.107
111.249.2.188
111.249.2.151
111.249.2.84
111.249.2.39
111.249.2.57
111.249.2.191
111.249.2.85
111.249.2.114
111.249.2.210
111.249.2.226
111.249.2.67
111.249.2.1
111.249.2.174
111.249.2.222
111.249.2.61
111.249.2.9
111.249.2.242
111.249.2.37
111.249.2.237
111.249.2.52
111.249.2.63
111.249.2.23
111.249.2.170
111.249.2.130
111.249.2.248
111.249.2.16
111.249.2.233
111.249.2.72
111.249.2.193
111.249.2.90
111.249.2.183
111.249.2.97
111.249.2.195
111.249.2.109
111.249.2.34
111.249.2.30
111.249.2.179
111.249.2.58
111.249.2.142
111.249.2.203
111.249.2.18
111.249.2.205
111.249.2.47
111.249.2.41
111.249.2.21
111.249.2.8
111.249.2.216
111.249.2.116
111.249.2.235
111.249.2.160
111.249.2.253
111.249.2.95
111.249.2.66
111.249.2.70
111.249.2.132
111.249.2.110
111.249.2.158
111.249.2.133
111.249.2.55
111.249.2.177
111.249.2.25
111.249.2.214
111.249.2.20
111.249.2.11
111.249.2.212
111.249.2.79
111.249.2.167
111.249.2.199
111.249.2.243
111.249.2.234
111.249.2.197
111.249.2.120
111.249.2.115
111.249.2.44
111.249.2.162
111.249.2.244
111.249.2.31
111.249.2.247
111.249.2.78
111.249.2.187
111.249.2.46
111.249.2.131
111.249.2.245
111.249.2.71
111.249.2.60
111.249.2.182
111.249.2.154
111.249.2.225
111.249.2.45
111.249.2.249
111.249.2.106
111.249.2.207
111.249.2.246
111.249.2.93
111.249.2.27
111.249.2.139
111.249.2.4
111.249.2.211
111.249.2.230
111.249.2.125
111.249.2.88
111.249.2.22
111.249.2.43
111.249.2.146
111.249.2.180
111.249.2.113
111.249.2.221
111.249.2.75
111.249.2.202
111.249.2.227
111.249.2.156
111.249.2.76
111.249.2.155
111.249.2.240
111.249.2.89
111.249.2.238
111.249.2.2
111.249.2.200
111.249.2.101
111.249.2.194
111.249.2.171
111.249.2.201
111.249.2.38
111.249.2.13
111.249.2.51
111.249.2.137
111.249.2.252
111.249.2.153
111.249.2.219
111.249.2.19
111.249.2.10
111.249.2.103
111.249.2.35
111.249.2.17
111.249.2.40
111.249.2.136
111.249.2.224
111.249.2.15
111.249.2.69
111.249.2.29
111.249.2.118
111.249.2.86
111.249.2.239
111.249.2.140
111.249.2.143
111.249.2.3
111.249.2.82
111.249.2.206
111.249.2.190
111.249.2.147
111.249.2.223
111.249.2.62
111.249.2.186
111.249.2.241
111.249.2.48
111.249.2.96
111.249.2.150
111.249.2.80
111.249.2.208
111.249.2.189
111.249.2.26
111.249.2.218
111.249.2.181
111.249.2.254
111.249.2.231
111.249.2.117
111.249.2.91
111.249.2.134
111.249.2.163
111.249.2.144
111.249.2.185
111.249.2.126
111.249.2.122
111.249.2.53
111.249.2.68
111.249.2.111
111.249.2.209
111.249.2.228
111.249.2.251
111.249.2.123
111.249.2.24
111.249.2.157
111.249.2.64
111.249.2.127
111.249.2.184
111.249.2.213
111.249.2.173
111.249.2.119
111.249.2.165
111.249.2.159
111.249.2.138
111.249.2.83
111.249.2.178
111.249.2.145
111.249.2.59
111.249.2.94
111.249.2.108
111.249.2.56
111.249.2.152
111.249.2.33
111.249.2.92
111.249.2.176
111.249.2.54
111.249.2.204
111.249.2.168
111.249.2.98
111.249.2.104
111.249.2.124
111.249.2.217
111.249.2.250
111.249.2.28
111.249.2.87
111.249.2.172
111.249.2.5
Related comments:
IP Type Details Datetime
185.176.27.178 attack 
Dec 20 20:43:37 debian-2gb-nbg1-2 kernel: \[523778.033969\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.178 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=718 PROTO=TCP SPT=59403 DPT=31475 WINDOW=1024 RES=0x00 SYN URGP=0
 2019-12-21 03:53:51
14.163.145.225 attackspam 
Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:36.
 2019-12-21 03:37:59
110.137.80.27 attackbots 
Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:20.
 2019-12-21 03:57:46
118.68.62.235 attackbotsspam 
Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:32.
 2019-12-21 03:45:29
110.139.77.149 attackspam 
Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:20.
 2019-12-21 03:55:53
118.70.42.121 attack 
Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:33.
 2019-12-21 03:44:20
9.202.157.78 attackbotsspam 
Autoban   9.202.157.78 VIRUS
 2019-12-21 04:03:12
110.77.234.227 attack 
Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:21.
 2019-12-21 03:56:25
105.96.52.138 attackspam 
Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:19.
 2019-12-21 03:59:48
175.197.233.197 attackspambots 
Dec 20 04:44:02 sachi sshd\[17638\]: Invalid user fairway123 from 175.197.233.197
Dec 20 04:44:02 sachi sshd\[17638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.197.233.197
Dec 20 04:44:04 sachi sshd\[17638\]: Failed password for invalid user fairway123 from 175.197.233.197 port 59158 ssh2
Dec 20 04:50:27 sachi sshd\[18252\]: Invalid user pinson from 175.197.233.197
Dec 20 04:50:27 sachi sshd\[18252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.197.233.197
 2019-12-21 03:49:18
181.99.84.249 attack 
Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:44.
 2019-12-21 03:24:46
14.249.145.207 attackbots 
Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:39.
 2019-12-21 03:34:13
14.253.158.168 attack 
Tried sshing with brute force.
 2019-12-21 03:51:24
123.19.196.192 attackbotsspam 
Dec 20 15:50:32 grey postfix/smtpd\[19282\]: NOQUEUE: reject: RCPT from unknown\[123.19.196.192\]: 554 5.7.1 Service unavailable\; Client host \[123.19.196.192\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?123.19.196.192\; from=\ to=\ proto=ESMTP helo=\<\[123.19.196.192\]\>
...
 2019-12-21 03:43:09
70.186.146.138 attack 
Dec 20 15:04:04 server sshd\[27269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=wsip-70-186-146-138.ph.ph.cox.net  user=root
Dec 20 15:04:06 server sshd\[27269\]: Failed password for root from 70.186.146.138 port 33918 ssh2
Dec 20 21:01:35 server sshd\[23016\]: Invalid user test from 70.186.146.138
Dec 20 21:01:35 server sshd\[23016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=wsip-70-186-146-138.ph.ph.cox.net 
Dec 20 21:01:37 server sshd\[23016\]: Failed password for invalid user test from 70.186.146.138 port 40080 ssh2
...
 2019-12-21 03:44:31

Recently Reported IPs

183.91.11.75 90.230.212.251 111.248.83.120 78.186.161.183
195.189.227.130 164.126.8.219 111.248.63.177 148.204.214.231
133.85.155.78 111.248.60.231 111.248.58.95 118.171.67.165
150.195.102.147 111.248.57.28 22.156.167.156 216.172.65.242
111.248.196.213 103.245.71.137 45.83.67.235 192.241.210.245