Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
114.99.12.97 attackspambots
Unauthorized connection attempt detected from IP address 114.99.12.97 to port 6656 [T]
2020-01-29 20:09:05
114.99.12.10 attackbotsspam
Unauthorized connection attempt detected from IP address 114.99.12.10 to port 6656 [T]
2020-01-29 17:40:08
114.99.12.192 attackbotsspam
Brute force attempt
2020-01-15 21:57:37
114.99.12.135 attackspam
Brute force attempt
2020-01-03 07:20:38
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.99.12.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50583
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.99.12.252.			IN	A

;; AUTHORITY SECTION:
.			544	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030501 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 06 11:13:48 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 252.12.99.114.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 252.12.99.114.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.186.30.59 attackspam
Aug 16 18:15:17 vps647732 sshd[22332]: Failed password for root from 222.186.30.59 port 54335 ssh2
...
2020-08-17 00:26:18
157.245.40.76 attackspam
157.245.40.76 - - [16/Aug/2020:13:50:13 +0100] "POST /wp-login.php HTTP/1.1" 200 2264 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.40.76 - - [16/Aug/2020:13:50:18 +0100] "POST /wp-login.php HTTP/1.1" 200 2195 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.40.76 - - [16/Aug/2020:13:50:23 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-17 00:14:10
212.156.221.69 attackspam
2020-08-16T10:09:29.1459041495-001 sshd[32879]: Invalid user yip from 212.156.221.69 port 40572
2020-08-16T10:09:30.6787971495-001 sshd[32879]: Failed password for invalid user yip from 212.156.221.69 port 40572 ssh2
2020-08-16T10:11:35.1960131495-001 sshd[32966]: Invalid user ubuntu from 212.156.221.69 port 43756
2020-08-16T10:11:35.1991731495-001 sshd[32966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.156.221.69
2020-08-16T10:11:35.1960131495-001 sshd[32966]: Invalid user ubuntu from 212.156.221.69 port 43756
2020-08-16T10:11:37.0240051495-001 sshd[32966]: Failed password for invalid user ubuntu from 212.156.221.69 port 43756 ssh2
...
2020-08-17 00:47:07
128.199.44.102 attackspambots
2020-08-16T14:13:02.052804n23.at sshd[3864542]: Invalid user cbs from 128.199.44.102 port 58692
2020-08-16T14:13:03.732418n23.at sshd[3864542]: Failed password for invalid user cbs from 128.199.44.102 port 58692 ssh2
2020-08-16T14:23:20.133703n23.at sshd[3873111]: Invalid user ftpusers from 128.199.44.102 port 41973
...
2020-08-17 00:10:26
123.207.97.250 attackspambots
2020-08-16T17:31:54+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)
2020-08-17 00:28:36
148.252.132.148 attackbotsspam
Lines containing failures of 148.252.132.148
Aug 16 14:02:51 keyhelp sshd[6002]: Invalid user garibaldi from 148.252.132.148 port 45757
Aug 16 14:02:51 keyhelp sshd[6002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.252.132.148
Aug 16 14:02:53 keyhelp sshd[6002]: Failed password for invalid user garibaldi from 148.252.132.148 port 45757 ssh2
Aug 16 14:02:53 keyhelp sshd[6002]: Received disconnect from 148.252.132.148 port 45757:11: Bye Bye [preauth]
Aug 16 14:02:53 keyhelp sshd[6002]: Disconnected from invalid user garibaldi 148.252.132.148 port 45757 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=148.252.132.148
2020-08-17 00:21:47
51.178.28.196 attack
20 attempts against mh-ssh on echoip
2020-08-17 00:34:05
116.85.15.85 attackspam
Brute force attempt
2020-08-17 00:17:23
93.107.187.162 attackbots
Aug 16 18:01:57 fhem-rasp sshd[2793]: Invalid user vicente from 93.107.187.162 port 54486
...
2020-08-17 00:20:32
185.100.87.206 attack
Aug 16 16:24:19 *** sshd[28403]: Invalid user admin from 185.100.87.206
2020-08-17 00:36:30
106.12.36.3 attackspam
Aug 16 22:06:30 itv-usvr-01 sshd[6865]: Invalid user tang from 106.12.36.3
Aug 16 22:06:30 itv-usvr-01 sshd[6865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.36.3
Aug 16 22:06:30 itv-usvr-01 sshd[6865]: Invalid user tang from 106.12.36.3
Aug 16 22:06:33 itv-usvr-01 sshd[6865]: Failed password for invalid user tang from 106.12.36.3 port 41434 ssh2
2020-08-17 00:48:22
222.186.190.14 attackbots
Aug 16 16:59:52 rocket sshd[26671]: Failed password for root from 222.186.190.14 port 56468 ssh2
Aug 16 17:00:00 rocket sshd[26688]: Failed password for root from 222.186.190.14 port 36374 ssh2
...
2020-08-17 00:05:51
37.49.230.60 attackspambots
Fail2Ban Ban Triggered (2)
2020-08-17 00:43:48
106.12.210.77 attackspam
k+ssh-bruteforce
2020-08-17 00:38:55
212.83.189.95 attackspambots
Automatic report generated by Wazuh
2020-08-17 00:35:58

Recently Reported IPs

114.230.69.196 175.123.140.159 114.99.12.36 114.99.12.4
114.99.12.34 114.99.12.45 114.99.12.32 114.99.12.49
114.99.12.50 114.99.12.38 114.230.69.198 114.99.12.40
114.99.12.46 114.99.13.232 114.99.13.236 114.99.13.234
114.99.12.51 114.99.13.240 114.99.13.242 114.99.13.246