Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Taiwan, Province of China

Internet Service Provider: Chunghwa Telecom Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspam
Portscan or hack attempt detected by psad/fwsnort
2019-10-20 21:19:30
Comments on same subnet:
IP Type Details Datetime
114.34.185.178 attackbots
port scan and connect, tcp 80 (http)
2020-07-19 04:26:46
114.34.185.105 attackspam
RDP Scan
2019-08-16 05:30:43
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.34.185.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31623
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.34.185.64.			IN	A

;; AUTHORITY SECTION:
.			531	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102000 1800 900 604800 86400

;; Query time: 91 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 20 21:19:26 CST 2019
;; MSG SIZE  rcvd: 117
Host info
64.185.34.114.in-addr.arpa domain name pointer 114-34-185-64.HINET-IP.hinet.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
64.185.34.114.in-addr.arpa	name = 114-34-185-64.HINET-IP.hinet.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
125.74.10.146 attackbotsspam
Oct 21 09:57:49 server sshd\[18263\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.74.10.146  user=root
Oct 21 09:57:50 server sshd\[18263\]: Failed password for root from 125.74.10.146 port 58879 ssh2
Oct 21 10:15:35 server sshd\[22714\]: Invalid user neil from 125.74.10.146
Oct 21 10:15:35 server sshd\[22714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.74.10.146 
Oct 21 10:15:37 server sshd\[22714\]: Failed password for invalid user neil from 125.74.10.146 port 53438 ssh2
...
2019-10-21 18:54:22
185.175.93.9 attack
firewall-block, port(s): 3385/tcp, 3387/tcp, 3393/tcp, 3395/tcp, 3396/tcp, 3398/tcp
2019-10-21 19:04:53
212.8.242.12 attackspambots
Bad user agent
2019-10-21 18:57:49
196.11.80.154 attack
2019-10-20 22:42:09 H=(lmarchitects.it) [196.11.80.154]:46662 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/196.11.80.154)
2019-10-20 22:42:12 H=(lmarchitects.it) [196.11.80.154]:46662 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/196.11.80.154)
2019-10-20 22:42:14 H=(lmarchitects.it) [196.11.80.154]:46662 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
...
2019-10-21 19:28:33
49.88.112.68 attack
Oct 21 14:10:32 sauna sshd[110783]: Failed password for root from 49.88.112.68 port 12205 ssh2
...
2019-10-21 19:17:11
223.206.246.143 attackbots
Oct 21 03:42:50 thevastnessof sshd[27613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.206.246.143
...
2019-10-21 19:07:23
185.118.212.250 attackspam
Automatic report - Port Scan Attack
2019-10-21 19:20:14
103.254.120.222 attack
SSH bruteforce (Triggered fail2ban)
2019-10-21 19:20:53
138.68.92.121 attack
Oct 21 10:23:27 h2177944 sshd\[17673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121
Oct 21 10:23:29 h2177944 sshd\[17673\]: Failed password for invalid user Adrien from 138.68.92.121 port 59156 ssh2
Oct 21 11:24:05 h2177944 sshd\[20552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121  user=root
Oct 21 11:24:07 h2177944 sshd\[20552\]: Failed password for root from 138.68.92.121 port 45550 ssh2
...
2019-10-21 19:31:23
118.25.101.161 attack
2019-10-21T04:14:28.842549abusebot.cloudsearch.cf sshd\[1484\]: Invalid user opiabi from 118.25.101.161 port 36288
2019-10-21 18:59:11
139.199.133.160 attackspam
Oct 21 12:19:52 nextcloud sshd\[13053\]: Invalid user devorne from 139.199.133.160
Oct 21 12:19:52 nextcloud sshd\[13053\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.133.160
Oct 21 12:19:53 nextcloud sshd\[13053\]: Failed password for invalid user devorne from 139.199.133.160 port 58260 ssh2
...
2019-10-21 19:24:35
45.80.65.80 attackbotsspam
Oct 20 20:05:11 kapalua sshd\[24471\]: Invalid user bmt from 45.80.65.80
Oct 20 20:05:11 kapalua sshd\[24471\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.80.65.80
Oct 20 20:05:13 kapalua sshd\[24471\]: Failed password for invalid user bmt from 45.80.65.80 port 46080 ssh2
Oct 20 20:10:48 kapalua sshd\[25086\]: Invalid user CENT0S@2017 from 45.80.65.80
Oct 20 20:10:48 kapalua sshd\[25086\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.80.65.80
2019-10-21 18:53:37
140.143.227.43 attackspambots
$f2bV_matches
2019-10-21 18:54:35
80.150.162.146 attackspambots
ssh brute force
2019-10-21 19:14:49
45.80.64.127 attack
2019-10-21T06:22:55.798763abusebot-7.cloudsearch.cf sshd\[27352\]: Invalid user Driver@123 from 45.80.64.127 port 59552
2019-10-21 19:21:22

Recently Reported IPs

217.112.142.117 177.113.171.84 10.152.8.66 188.225.11.158
45.148.232.94 182.50.130.2 157.245.75.86 45.80.105.41
152.231.100.6 79.117.160.120 89.46.196.10 10.152.8.56
185.243.180.49 41.41.3.222 61.14.210.221 140.249.206.6
77.247.110.38 185.26.107.131 139.130.50.190 158.69.204.172