Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Viettel Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Sep 10 15:37:51 our-server-hostname postfix/smtpd[19624]: connect from unknown[116.107.205.149]
Sep 10 15:37:52 our-server-hostname postfix/smtpd[19624]: NOQUEUE: reject: RCPT from unknown[116.107.205.149]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Sep 10 15:37:53 our-server-hostname postfix/smtpd[19624]: lost connection after RCPT from unknown[116.107.205.149]
Sep 10 15:37:53 our-server-hostname postfix/smtpd[19624]: disconnect from unknown[116.107.205.149]
Sep 10 16:07:51 our-server-hostname postfix/smtpd[10737]: connect from unknown[116.107.205.149]
Sep 10 16:07:53 our-server-hostname postfix/smtpd[10737]: NOQUEUE: reject: RCPT from unknown[116.107.205.149]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Sep 10 16:07:53 our-server-hostname postfix/smtpd[10737]: NOQUEUE: reject: RCPT from unknown[116.107.205.149]: 504 5.5.2 : Helo command rejected: need fully-qualif........
-------------------------------
2019-09-11 07:16:40
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.107.205.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59476
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.107.205.149.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091003 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Sep 11 07:16:32 CST 2019
;; MSG SIZE  rcvd: 119
Host info
Host 149.205.107.116.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 149.205.107.116.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
190.13.80.218 attackspambots
1596370315 - 08/02/2020 14:11:55 Host: 190.13.80.218/190.13.80.218 Port: 445 TCP Blocked
2020-08-02 22:20:57
200.27.38.106 attackspambots
Connection to SSH Honeypot - Detected by HoneypotDB
2020-08-02 22:27:50
123.207.10.199 attack
prod6
...
2020-08-02 22:54:19
51.254.124.202 attackbots
Aug  2 09:13:40 vps46666688 sshd[3344]: Failed password for root from 51.254.124.202 port 45010 ssh2
...
2020-08-02 22:16:41
213.32.23.58 attack
Aug  2 09:07:28 firewall sshd[31653]: Failed password for root from 213.32.23.58 port 39452 ssh2
Aug  2 09:11:23 firewall sshd[31809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.23.58  user=root
Aug  2 09:11:25 firewall sshd[31809]: Failed password for root from 213.32.23.58 port 49900 ssh2
...
2020-08-02 22:41:34
193.77.156.24 attackspam
Automatic report - Port Scan Attack
2020-08-02 22:25:37
103.98.17.94 attack
Aug  2 14:07:55 ip40 sshd[12468]: Failed password for root from 103.98.17.94 port 44786 ssh2
...
2020-08-02 22:56:03
142.93.143.85 attack
Trolling for resource vulnerabilities
2020-08-02 22:17:05
189.41.213.160 attack
Automatic report - Port Scan Attack
2020-08-02 22:54:51
129.204.2.171 attackbots
Aug  2 17:07:05 gw1 sshd[9791]: Failed password for root from 129.204.2.171 port 43020 ssh2
...
2020-08-02 22:51:50
213.196.144.134 attackspambots
Port Scan detected!
...
2020-08-02 22:40:39
129.204.28.114 attackbots
Aug  2 02:46:45 web9 sshd\[22251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.28.114  user=root
Aug  2 02:46:47 web9 sshd\[22251\]: Failed password for root from 129.204.28.114 port 32976 ssh2
Aug  2 02:51:09 web9 sshd\[22853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.28.114  user=root
Aug  2 02:51:11 web9 sshd\[22853\]: Failed password for root from 129.204.28.114 port 50874 ssh2
Aug  2 02:55:30 web9 sshd\[23346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.28.114  user=root
2020-08-02 22:30:58
45.55.173.232 attackbots
/wp-login.php
2020-08-02 22:26:51
60.51.17.33 attackbots
Aug  2 15:03:41 kh-dev-server sshd[25695]: Failed password for root from 60.51.17.33 port 52926 ssh2
...
2020-08-02 22:23:32
103.214.202.143 attackbots
php WP PHPmyadamin ABUSE blocked for 12h
2020-08-02 22:18:07

Recently Reported IPs

93.222.189.216 70.205.166.104 180.228.32.208 164.76.98.126
79.98.96.103 245.190.220.57 72.255.98.46 238.161.168.235
113.238.132.65 177.49.231.11 66.42.75.154 50.192.151.42
118.170.145.230 193.2.141.48 215.47.77.80 27.34.58.60
115.55.99.241 210.120.184.30 139.187.229.252 150.214.11.202