Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Taiwan (Province of China)

Internet Service Provider: Chunghwa Telecom Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Brute force blocker - service: proftpd1 - aantal: 146 - Tue Sep 11 16:10:20 2018
2020-09-26 03:49:12
attackbotsspam
Brute force blocker - service: proftpd1 - aantal: 146 - Tue Sep 11 16:10:20 2018
2020-09-25 20:33:57
attackbots
Brute force blocker - service: proftpd1 - aantal: 146 - Tue Sep 11 16:10:20 2018
2020-09-25 12:11:29
Comments on same subnet:
IP Type Details Datetime
114.39.54.200 attackbotsspam
Unauthorized connection attempt from IP address 114.39.54.200 on Port 445(SMB)
2019-11-27 00:05:47
114.39.54.137 attack
UTC: 2019-10-21 port: 23/tcp
2019-10-22 17:04:36
114.39.54.59 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-08-29 19:54:18
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.39.54.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61323
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.39.54.104.			IN	A

;; AUTHORITY SECTION:
.			520	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092402 1800 900 604800 86400

;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 25 12:11:24 CST 2020
;; MSG SIZE  rcvd: 117
Host info
104.54.39.114.in-addr.arpa domain name pointer 114-39-54-104.dynamic-ip.hinet.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
104.54.39.114.in-addr.arpa	name = 114-39-54-104.dynamic-ip.hinet.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
168.194.232.63 attackbots
2019-07-05 00:23:54 H=(host-168-194-232-63.telered.com.ar) [168.194.232.63]:17859 I=[10.100.18.21]:25 sender verify fail for : all relevant MX records point to non-existent hosts
2019-07-05 x@x
2019-07-05 00:23:55 unexpected disconnection while reading SMTP command from (host-168-194-232-63.telered.com.ar) [168.194.232.63]:17859 I=[10.100.18.21]:25 (error: Connection reset by peer)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=168.194.232.63
2019-07-05 14:22:09
92.118.37.81 attackbotsspam
05.07.2019 05:05:03 Connection to port 22156 blocked by firewall
2019-07-05 14:17:34
179.242.136.85 attackspambots
TCP port 445 (SMB) attempt blocked by firewall. [2019-07-05 00:43:34]
2019-07-05 14:14:43
124.31.204.116 attack
SMB Server BruteForce Attack
2019-07-05 14:40:18
186.52.158.47 attack
2019-07-05 00:26:45 unexpected disconnection while reading SMTP command from r186-52-158-47.dialup.adsl.anteldata.net.uy [186.52.158.47]:7694 I=[10.100.18.20]:25 (error: Connection reset by peer)
2019-07-05 00:26:55 unexpected disconnection while reading SMTP command from r186-52-158-47.dialup.adsl.anteldata.net.uy [186.52.158.47]:8590 I=[10.100.18.20]:25 (error: Connection reset by peer)
2019-07-05 00:27:04 unexpected disconnection while reading SMTP command from r186-52-158-47.dialup.adsl.anteldata.net.uy [186.52.158.47]:25131 I=[10.100.18.20]:25 (error: Connection reset by peer)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=186.52.158.47
2019-07-05 14:32:27
59.125.181.139 attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 15:21:07,974 INFO [shellcode_manager] (59.125.181.139) no match, writing hexdump (09aa4eb769b4b05f6713593d4c24c84c :2254092) - MS17010 (EternalBlue)
2019-07-05 14:36:28
86.57.168.223 attackspambots
Autoban   86.57.168.223 ABORTED AUTH
2019-07-05 14:40:55
5.69.102.37 attack
2019-07-05 00:07:31 H=05456625.skybroadband.com [5.69.102.37]:49141 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=5.69.102.37)
2019-07-05 00:07:31 unexpected disconnection while reading SMTP command from 05456625.skybroadband.com [5.69.102.37]:49141 I=[10.100.18.22]:25 (error: Connection reset by peer)
2019-07-05 00:29:32 H=05456625.skybroadband.com [5.69.102.37]:10298 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=5.69.102.37)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=5.69.102.37
2019-07-05 14:42:45
111.22.108.103 attackspambots
IMAP brute force
...
2019-07-05 14:52:37
177.135.93.227 attackbots
Jul  5 08:18:43 dedicated sshd[25635]: Invalid user pul from 177.135.93.227 port 42326
2019-07-05 14:19:23
177.228.104.251 attackspam
2019-07-05 00:22:20 unexpected disconnection while reading SMTP command from (customer-CLN-104-251.megared.net.mx) [177.228.104.251]:49462 I=[10.100.18.23]:25 (error: Connection reset by peer)
2019-07-05 00:23:28 unexpected disconnection while reading SMTP command from (customer-CLN-104-251.megared.net.mx) [177.228.104.251]:21597 I=[10.100.18.23]:25 (error: Connection reset by peer)
2019-07-05 00:23:37 unexpected disconnection while reading SMTP command from (customer-CLN-104-251.megared.net.mx) [177.228.104.251]:43879 I=[10.100.18.23]:25 (error: Connection reset by peer)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=177.228.104.251
2019-07-05 14:19:04
114.35.59.240 attackbots
114.35.59.240 - - [05/Jul/2019:00:44:04 +0200] "POST [munged]wp-login.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 0.000
2019-07-05 14:15:48
104.217.191.123 attack
Jul  4 15:28:15 woof sshd[25603]: Invalid user marta from 104.217.191.123
Jul  4 15:28:15 woof sshd[25603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.217.191.123
Jul  4 15:28:16 woof sshd[25603]: Failed password for invalid user marta from 104.217.191.123 port 39990 ssh2
Jul  4 15:28:16 woof sshd[25603]: Received disconnect from 104.217.191.123: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.217.191.123
2019-07-05 14:37:42
188.253.231.230 attack
2019-07-04 23:05:35 H=([188.253.231.230]) [188.253.231.230]:3147 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=188.253.231.230)
2019-07-04 23:05:37 unexpected disconnection while reading SMTP command from ([188.253.231.230]) [188.253.231.230]:3147 I=[10.100.18.25]:25 (error: Connection reset by peer)
2019-07-05 00:26:53 H=([188.253.231.230]) [188.253.231.230]:13487 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=188.253.231.230)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=188.253.231.230
2019-07-05 14:32:01
157.230.40.177 attackbots
Jul  5 04:52:46 mail sshd\[15547\]: Invalid user jule from 157.230.40.177
Jul  5 04:52:46 mail sshd\[15547\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.40.177
Jul  5 04:52:48 mail sshd\[15547\]: Failed password for invalid user jule from 157.230.40.177 port 45818 ssh2
...
2019-07-05 14:11:29

Recently Reported IPs

45.227.145.82 220.135.64.185 95.42.28.3 106.56.86.18
95.10.238.146 186.251.225.186 170.84.50.54 78.186.252.51
69.172.94.33 49.235.137.64 149.80.162.171 28.146.72.172
102.105.173.205 223.89.64.235 146.56.199.140 125.135.66.111
112.33.41.96 61.230.16.47 45.181.229.209 218.73.129.201