Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Korea, Republic of

Internet Service Provider: LG Dacom Corporation

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
SSH Brute Force
2019-12-03 20:28:30
attackspam
Nov 28 22:00:11 MK-Soft-VM8 sshd[2683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138 
Nov 28 22:00:13 MK-Soft-VM8 sshd[2683]: Failed password for invalid user turinsky from 112.216.129.138 port 56144 ssh2
...
2019-11-29 05:21:03
attackbots
Nov 14 07:41:21 sd-53420 sshd\[10809\]: Invalid user runo from 112.216.129.138
Nov 14 07:41:21 sd-53420 sshd\[10809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
Nov 14 07:41:23 sd-53420 sshd\[10809\]: Failed password for invalid user runo from 112.216.129.138 port 48028 ssh2
Nov 14 07:45:51 sd-53420 sshd\[12038\]: Invalid user tarbatt from 112.216.129.138
Nov 14 07:45:51 sd-53420 sshd\[12038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
...
2019-11-14 16:35:16
attackspam
Automatic report - Banned IP Access
2019-11-13 05:06:03
attack
Nov  6 14:33:24 web8 sshd\[13353\]: Invalid user jomar from 112.216.129.138
Nov  6 14:33:24 web8 sshd\[13353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
Nov  6 14:33:25 web8 sshd\[13353\]: Failed password for invalid user jomar from 112.216.129.138 port 37734 ssh2
Nov  6 14:38:03 web8 sshd\[15514\]: Invalid user rizal from 112.216.129.138
Nov  6 14:38:03 web8 sshd\[15514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
2019-11-07 02:08:29
attack
2019-11-02T07:43:14.5512711495-001 sshd\[56205\]: Invalid user gbpass from 112.216.129.138 port 57772
2019-11-02T07:43:14.5599621495-001 sshd\[56205\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
2019-11-02T07:43:16.7914031495-001 sshd\[56205\]: Failed password for invalid user gbpass from 112.216.129.138 port 57772 ssh2
2019-11-02T07:48:05.9620111495-001 sshd\[56357\]: Invalid user AbcAbc123 from 112.216.129.138 port 42592
2019-11-02T07:48:05.9700361495-001 sshd\[56357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
2019-11-02T07:48:07.8207261495-001 sshd\[56357\]: Failed password for invalid user AbcAbc123 from 112.216.129.138 port 42592 ssh2
...
2019-11-02 21:12:46
attackbots
Oct 31 22:08:28 web8 sshd\[2535\]: Invalid user Russel from 112.216.129.138
Oct 31 22:08:28 web8 sshd\[2535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
Oct 31 22:08:30 web8 sshd\[2535\]: Failed password for invalid user Russel from 112.216.129.138 port 58188 ssh2
Oct 31 22:13:06 web8 sshd\[4755\]: Invalid user famed from 112.216.129.138
Oct 31 22:13:06 web8 sshd\[4755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
2019-11-01 07:05:45
attackspambots
Invalid user tian from 112.216.129.138 port 50458
2019-10-30 07:20:51
attackspam
Oct 19 03:55:17 php1 sshd\[12498\]: Invalid user zaqxsw from 112.216.129.138
Oct 19 03:55:17 php1 sshd\[12498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
Oct 19 03:55:19 php1 sshd\[12498\]: Failed password for invalid user zaqxsw from 112.216.129.138 port 42482 ssh2
Oct 19 04:00:15 php1 sshd\[13387\]: Invalid user Game123 from 112.216.129.138
Oct 19 04:00:15 php1 sshd\[13387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
2019-10-19 22:32:52
attack
Oct 18 14:23:27 eventyay sshd[3112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
Oct 18 14:23:29 eventyay sshd[3112]: Failed password for invalid user jessie from 112.216.129.138 port 37468 ssh2
Oct 18 14:28:29 eventyay sshd[3189]: Failed password for root from 112.216.129.138 port 48806 ssh2
...
2019-10-18 20:33:13
attackbotsspam
Oct 16 21:24:24 xeon sshd[18106]: Failed password for root from 112.216.129.138 port 42652 ssh2
2019-10-17 04:45:21
attackbotsspam
Oct 15 07:23:54 SilenceServices sshd[12418]: Failed password for root from 112.216.129.138 port 53006 ssh2
Oct 15 07:29:11 SilenceServices sshd[13839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
Oct 15 07:29:13 SilenceServices sshd[13839]: Failed password for invalid user oracle from 112.216.129.138 port 36040 ssh2
2019-10-15 13:53:32
attackbots
Oct  8 20:39:54 web9 sshd\[20615\]: Invalid user P@ssw0rd12345 from 112.216.129.138
Oct  8 20:39:54 web9 sshd\[20615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
Oct  8 20:39:56 web9 sshd\[20615\]: Failed password for invalid user P@ssw0rd12345 from 112.216.129.138 port 60288 ssh2
Oct  8 20:44:39 web9 sshd\[21431\]: Invalid user P@ssw0rd12345 from 112.216.129.138
Oct  8 20:44:39 web9 sshd\[21431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
2019-10-09 15:36:07
attackbots
Aug 26 01:10:53 dallas01 sshd[29839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
Aug 26 01:10:55 dallas01 sshd[29839]: Failed password for invalid user marketing from 112.216.129.138 port 39296 ssh2
Aug 26 01:15:21 dallas01 sshd[30578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
Aug 26 01:15:24 dallas01 sshd[30578]: Failed password for invalid user bot from 112.216.129.138 port 54460 ssh2
2019-10-08 13:02:32
attackbotsspam
Sep 28 23:53:29 game-panel sshd[19734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
Sep 28 23:53:31 game-panel sshd[19734]: Failed password for invalid user hydra from 112.216.129.138 port 35224 ssh2
Sep 28 23:58:11 game-panel sshd[19924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
2019-09-29 08:13:59
attackspam
2019-09-16T11:12:10.192403abusebot-5.cloudsearch.cf sshd\[28181\]: Invalid user charlott123 from 112.216.129.138 port 49616
2019-09-16T11:12:10.196976abusebot-5.cloudsearch.cf sshd\[28181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
2019-09-17 01:19:35
attackbotsspam
Aug 27 13:09:31 plusreed sshd[14976]: Invalid user diana from 112.216.129.138
...
2019-08-28 01:48:41
attackbotsspam
Aug 25 00:59:35 kapalua sshd\[8227\]: Invalid user dimitri from 112.216.129.138
Aug 25 00:59:35 kapalua sshd\[8227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
Aug 25 00:59:37 kapalua sshd\[8227\]: Failed password for invalid user dimitri from 112.216.129.138 port 50882 ssh2
Aug 25 01:04:13 kapalua sshd\[8664\]: Invalid user titi from 112.216.129.138
Aug 25 01:04:13 kapalua sshd\[8664\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
2019-08-25 19:16:25
attack
Aug 16 09:10:44 vps691689 sshd[31945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
Aug 16 09:10:46 vps691689 sshd[31945]: Failed password for invalid user qt from 112.216.129.138 port 51184 ssh2
...
2019-08-16 15:20:42
attack
Jul 14 08:48:54 MK-Soft-VM6 sshd\[404\]: Invalid user popuser from 112.216.129.138 port 49004
Jul 14 08:48:54 MK-Soft-VM6 sshd\[404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
Jul 14 08:48:56 MK-Soft-VM6 sshd\[404\]: Failed password for invalid user popuser from 112.216.129.138 port 49004 ssh2
...
2019-07-14 17:36:07
attack
Invalid user sqoop from 112.216.129.138 port 49940
2019-07-13 16:13:30
attackbotsspam
Jul  5 16:06:43 localhost sshd[8781]: Invalid user user1 from 112.216.129.138 port 52642
Jul  5 16:06:43 localhost sshd[8781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.129.138
Jul  5 16:06:43 localhost sshd[8781]: Invalid user user1 from 112.216.129.138 port 52642
Jul  5 16:06:45 localhost sshd[8781]: Failed password for invalid user user1 from 112.216.129.138 port 52642 ssh2
...
2019-07-05 21:23:55
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.216.129.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3865
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.216.129.138.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070401 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jul 05 11:27:20 CST 2019
;; MSG SIZE  rcvd: 119
Host info
Host 138.129.216.112.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 138.129.216.112.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
139.162.70.53 attack
" "
2020-02-26 06:16:31
201.103.131.184 attackspam
Honeypot attack, port: 81, PTR: dsl-201-103-131-184-dyn.prod-infinitum.com.mx.
2020-02-26 05:57:59
93.183.125.188 attackspam
" "
2020-02-26 06:15:43
45.143.223.133 attack
Unauthorized connection attempt detected from IP address 45.143.223.133 to port 25
2020-02-26 05:58:37
92.246.84.210 attackbots
" "
2020-02-26 06:16:01
60.52.0.56 attack
Honeypot attack, port: 81, PTR: PTR record not found
2020-02-26 06:08:43
46.32.104.172 attack
Feb 25 17:34:54 mout sshd[26200]: Invalid user info from 46.32.104.172 port 55174
2020-02-26 05:43:40
179.113.105.138 attackbotsspam
Honeypot attack, port: 445, PTR: 179-113-105-138.user.vivozap.com.br.
2020-02-26 05:41:07
49.88.112.75 attackbots
Feb 25 22:32:14 vps647732 sshd[26862]: Failed password for root from 49.88.112.75 port 62093 ssh2
...
2020-02-26 05:54:51
187.114.251.92 attack
Honeypot attack, port: 81, PTR: 187.114.251.92.static.host.gvt.net.br.
2020-02-26 06:13:20
45.134.179.57 attack
Feb 25 19:28:58 h2177944 kernel: \[5853118.290782\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.134.179.57 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=44791 PROTO=TCP SPT=46811 DPT=13423 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb 25 19:28:58 h2177944 kernel: \[5853118.290797\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.134.179.57 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=44791 PROTO=TCP SPT=46811 DPT=13423 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb 25 19:37:22 h2177944 kernel: \[5853622.621844\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.134.179.57 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=15940 PROTO=TCP SPT=46811 DPT=13474 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb 25 19:37:22 h2177944 kernel: \[5853622.621859\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.134.179.57 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=15940 PROTO=TCP SPT=46811 DPT=13474 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb 25 19:49:52 h2177944 kernel: \[5854371.978369\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.134.179.57 DST=85.214.1
2020-02-26 05:47:06
159.89.194.160 attackbotsspam
Feb 25 22:55:13 pkdns2 sshd\[42995\]: Invalid user webmaster from 159.89.194.160Feb 25 22:55:15 pkdns2 sshd\[42995\]: Failed password for invalid user webmaster from 159.89.194.160 port 34372 ssh2Feb 25 22:59:36 pkdns2 sshd\[43152\]: Invalid user ts3 from 159.89.194.160Feb 25 22:59:39 pkdns2 sshd\[43152\]: Failed password for invalid user ts3 from 159.89.194.160 port 46512 ssh2Feb 25 23:04:02 pkdns2 sshd\[43326\]: Invalid user xvwei from 159.89.194.160Feb 25 23:04:04 pkdns2 sshd\[43326\]: Failed password for invalid user xvwei from 159.89.194.160 port 58652 ssh2
...
2020-02-26 05:39:16
209.17.96.42 attackspambots
Unauthorised access (Feb 25) SRC=209.17.96.42 LEN=44 TOS=0x08 PREC=0x20 TTL=241 ID=54321 TCP DPT=8080 WINDOW=65535 SYN
2020-02-26 05:57:28
188.116.57.30 attackbotsspam
Date: Tue, 25 Feb 2020 00:07:50 -0000
From: "Lifeventure" 
Subject: Things From The Past That Look Practically Unrecognizable Today
Reply-To: " Lifeventure "  
 lifeventureclubnews.com  resolves to   188.116.57.30
2020-02-26 06:02:44
181.197.40.245 attackspam
Honeypot attack, port: 5555, PTR: PTR record not found
2020-02-26 06:05:20

Recently Reported IPs

68.138.115.21 174.199.53.195 185.26.101.244 19.193.75.54
141.3.24.98 180.19.121.34 230.84.150.48 124.56.178.50
236.18.73.235 103.45.145.145 141.100.25.37 246.174.77.91
54.36.148.130 1.234.45.41 178.162.211.204 45.65.220.171
81.198.161.120 103.4.165.254 153.133.217.220 200.183.138.178