Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Saigon Tourist Cable Television

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspam
Unauthorized connection attempt detected from IP address 112.197.139.54 to port 5555 [J]
2020-02-23 21:00:02
Comments on same subnet:
IP Type Details Datetime
112.197.139.91 attackspambots
Sep  3 06:00:56 sip sshd[4743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.197.139.91
Sep  3 06:00:57 sip sshd[4749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.197.139.91
Sep  3 06:00:59 sip sshd[4743]: Failed password for invalid user guest from 112.197.139.91 port 51444 ssh2
2020-09-03 21:34:27
112.197.139.91 attack
Sep  3 06:00:56 sip sshd[4743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.197.139.91
Sep  3 06:00:57 sip sshd[4749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.197.139.91
Sep  3 06:00:59 sip sshd[4743]: Failed password for invalid user guest from 112.197.139.91 port 51444 ssh2
2020-09-03 13:17:05
112.197.139.91 attackbotsspam
SSH login attempts brute force.
2020-09-03 05:33:05
112.197.139.117 attackbots
Jun  2 14:08:34 fhem-rasp sshd[7977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.197.139.117 
Jun  2 14:08:37 fhem-rasp sshd[7977]: Failed password for invalid user ubnt from 112.197.139.117 port 35332 ssh2
...
2020-06-02 20:49:13
112.197.139.98 attack
May 25 10:17:23 vpn01 sshd[7258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.197.139.98
May 25 10:17:25 vpn01 sshd[7258]: Failed password for invalid user admin from 112.197.139.98 port 42217 ssh2
...
2020-05-25 19:08:38
112.197.139.37 attackspam
Honeypot attack, port: 5555, PTR: PTR record not found
2020-01-14 04:48:11
112.197.139.28 attack
Unauthorized connection attempt detected from IP address 112.197.139.28 to port 5555
2020-01-01 04:11:01
112.197.139.27 attackbots
Unauthorized connection attempt detected from IP address 112.197.139.27 to port 5555
2019-12-31 02:08:19
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.197.139.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33102
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.197.139.54.			IN	A

;; AUTHORITY SECTION:
.			305	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022300 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 23 20:59:57 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 54.139.197.112.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 54.139.197.112.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
167.99.143.90 attack
Jun 29 09:57:56 debian sshd\[17329\]: Invalid user gozone from 167.99.143.90 port 35478
Jun 29 09:57:56 debian sshd\[17329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.143.90
...
2019-06-29 17:04:51
112.133.237.28 attack
Honeypot attack, port: 445, PTR: PTR record not found
2019-06-29 17:10:54
190.60.216.5 attackbots
Honeypot attack, port: 445, PTR: 5.216.60.190.host.ifxnetworks.com.
2019-06-29 17:20:42
223.255.127.57 attackspam
Port 1433 Scan
2019-06-29 17:29:15
27.210.156.19 attack
23/tcp
[2019-06-29]1pkt
2019-06-29 17:45:09
185.51.36.66 attackspam
8080/tcp
[2019-06-29]1pkt
2019-06-29 17:45:31
103.81.13.20 attackbotsspam
8080/tcp
[2019-06-29]1pkt
2019-06-29 16:51:57
218.234.206.107 attackspambots
Triggered by Fail2Ban
2019-06-29 17:26:12
177.91.132.99 attackspambots
29.06.2019 10:41:31 - Login Fail on hMailserver 
Detected by ELinOX-hMail-A2F
2019-06-29 17:27:33
179.162.252.168 attackspambots
Honeypot attack, port: 23, PTR: 179.162.252.168.dynamic.adsl.gvt.net.br.
2019-06-29 17:38:56
159.89.182.139 attackspambots
Automatic report - Web App Attack
2019-06-29 17:22:11
202.155.234.28 attackbotsspam
Jun 29 10:50:57 mail sshd\[3446\]: Invalid user manager from 202.155.234.28 port 3824
Jun 29 10:50:57 mail sshd\[3446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.155.234.28
Jun 29 10:50:59 mail sshd\[3446\]: Failed password for invalid user manager from 202.155.234.28 port 3824 ssh2
Jun 29 10:57:36 mail sshd\[4261\]: Invalid user cong from 202.155.234.28 port 3950
Jun 29 10:57:36 mail sshd\[4261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.155.234.28
2019-06-29 17:16:07
49.71.154.227 attackbotsspam
Honeypot attack, port: 23, PTR: PTR record not found
2019-06-29 17:08:32
94.249.28.6 attackspam
Honeypot attack, port: 23, PTR: 94.249.x.6.go.com.jo.
2019-06-29 17:15:03
49.67.147.146 attack
2019-06-29T06:20:52.290418 X postfix/smtpd[53610]: warning: unknown[49.67.147.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-29T06:22:02.206737 X postfix/smtpd[53610]: warning: unknown[49.67.147.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-29T10:41:48.002902 X postfix/smtpd[24015]: warning: unknown[49.67.147.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-29 16:55:23

Recently Reported IPs

219.85.54.87 218.210.35.49 211.75.219.143 200.75.221.130
194.186.195.194 190.232.172.38 189.226.116.151 189.134.233.218
188.158.121.143 187.111.180.13 182.52.143.165 181.51.56.51
171.247.5.160 161.0.156.169 150.129.151.212 125.231.130.106
123.195.115.39 122.165.205.189 122.160.46.61 120.35.26.129