Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Tainan City

Region: Tainan

Country: Taiwan, China

Internet Service Provider: Chunghwa Telecom Co. Ltd.

Hostname: unknown

Organization: Data Communication Business Group

Usage Type: unknown

Comments:
Type Details Datetime
attackspam
445/tcp
[2019-07-30]1pkt
2019-07-31 04:07:36
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.255.11.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63730
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;111.255.11.56.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019073002 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 31 04:07:31 CST 2019
;; MSG SIZE  rcvd: 117
Host info
56.11.255.111.in-addr.arpa domain name pointer 111-255-11-56.dynamic-ip.hinet.net.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
56.11.255.111.in-addr.arpa	name = 111-255-11-56.dynamic-ip.hinet.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
78.128.113.182 attack
15 attempts against mh-mag-login-ban on comet
2020-03-11 15:04:20
49.234.12.123 attackspam
Mar 11 03:45:36 meumeu sshd[17225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.12.123 
Mar 11 03:45:38 meumeu sshd[17225]: Failed password for invalid user multamuievadaueuvoua from 49.234.12.123 port 44876 ssh2
Mar 11 03:49:27 meumeu sshd[17979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.12.123 
...
2020-03-11 15:06:27
46.32.104.170 attackbots
Brute force attempt
2020-03-11 15:37:11
42.200.66.164 attackspambots
Mar 11 08:22:59 legacy sshd[31682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.200.66.164
Mar 11 08:23:01 legacy sshd[31682]: Failed password for invalid user plex from 42.200.66.164 port 54798 ssh2
Mar 11 08:27:13 legacy sshd[31783]: Failed password for root from 42.200.66.164 port 39502 ssh2
...
2020-03-11 15:41:31
123.25.116.225 attack
Unauthorized connection attempt detected from IP address 123.25.116.225 to port 445
2020-03-11 15:35:09
45.133.99.2 attack
2020-03-11 08:33:41 dovecot_login authenticator failed for \(\[45.133.99.2\]\) \[45.133.99.2\]: 535 Incorrect authentication data \(set_id=info@orogest.it\)
2020-03-11 08:33:50 dovecot_login authenticator failed for \(\[45.133.99.2\]\) \[45.133.99.2\]: 535 Incorrect authentication data
2020-03-11 08:34:00 dovecot_login authenticator failed for \(\[45.133.99.2\]\) \[45.133.99.2\]: 535 Incorrect authentication data
2020-03-11 08:34:06 dovecot_login authenticator failed for \(\[45.133.99.2\]\) \[45.133.99.2\]: 535 Incorrect authentication data
2020-03-11 08:34:19 dovecot_login authenticator failed for \(\[45.133.99.2\]\) \[45.133.99.2\]: 535 Incorrect authentication data
2020-03-11 15:41:06
42.112.16.179 attack
Unauthorized connection attempt detected from IP address 42.112.16.179 to port 445 [T]
2020-03-11 15:42:01
85.93.20.66 attackspam
15 attempts against mh-mag-login-ban on comet
2020-03-11 15:15:20
36.81.67.65 attack
firewall-block, port(s): 445/tcp
2020-03-11 15:42:26
203.78.114.205 attackspam
Email rejected due to spam filtering
2020-03-11 15:01:05
187.33.233.230 attackbotsspam
Brute forcing RDP port 3389
2020-03-11 15:25:26
178.146.97.42 attackbotsspam
Scan detected 2020.03.11 03:11:15 blocked until 2020.04.05 00:42:38
2020-03-11 15:30:59
36.71.239.23 attackspam
Unauthorized connection attempt detected from IP address 36.71.239.23 to port 445
2020-03-11 15:03:37
59.44.204.42 attackspambots
SSH Brute-Forcing (server1)
2020-03-11 15:38:35
181.169.237.59 attackbotsspam
Automatic report - Port Scan Attack
2020-03-11 14:51:59

Recently Reported IPs

149.24.71.8 147.235.142.75 192.87.9.31 106.110.147.74
114.109.95.232 14.52.76.104 140.207.112.196 60.50.125.157
51.75.121.21 222.223.188.246 8.106.144.111 49.81.93.12
173.126.255.99 110.146.194.63 119.51.82.102 220.7.133.88
105.163.26.161 50.99.160.19 95.233.193.63 121.21.24.13