Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Lithuania

Internet Service Provider: UAB Host Baltic

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attackspam
RDP Brute Force attempt, PTR: None
2019-11-28 14:09:51
Comments on same subnet:
IP Type Details Datetime
141.98.11.116 botsattack
SSH bot
2025-07-08 13:05:44
141.98.11.35 botsattackproxy
Vulnerability Scanner
2025-01-23 13:58:46
141.98.11.179 attack
Malicious IP / Malware
2024-05-02 12:58:57
141.98.11.96 attack
Brute connect
2024-03-29 14:40:38
141.98.11.61 attack
Scan port
2022-07-04 12:56:10
141.98.11.51 spam
Lig
2022-06-25 06:43:55
141.98.11.65 attack
Scan Port
2022-03-25 13:51:43
141.98.11.94 attackbots
2020-05-02 07:51:03
141.98.11.106 attack
2020-04-30 08:23:33
141.98.11.113 attackbotsspam
[ER hit] Tried to deliver spam. Already well known.
2020-04-26 06:58:32
141.98.11.71 spam
Spammer
2020-04-11 07:30:34
141.98.11.12 attack
" "
2020-03-20 00:02:06
141.98.11.118 attackspambots
SpamScore above: 10.0
2020-03-17 07:26:00
141.98.11.18 attackbotsspam
Dec 17 16:21:10 grey postfix/smtpd\[5338\]: NOQUEUE: reject: RCPT from picayune.woinsta.com\[141.98.11.18\]: 554 5.7.1 Service unavailable\; Client host \[141.98.11.18\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[141.98.11.18\]\; from=\ to=\ proto=ESMTP helo=\
...
2019-12-18 04:16:19
141.98.11.21 attackbotsspam
Dec 16 22:15:14 grey postfix/smtpd\[10497\]: NOQUEUE: reject: RCPT from careful.woinsta.com\[141.98.11.21\]: 554 5.7.1 Service unavailable\; Client host \[141.98.11.21\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[141.98.11.21\]\; from=\ to=\ proto=ESMTP helo=\
...
2019-12-17 05:33:32
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.98.11.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1800
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;141.98.11.8.			IN	A

;; AUTHORITY SECTION:
.			236	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112800 1800 900 604800 86400

;; Query time: 169 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 28 14:09:48 CST 2019
;; MSG SIZE  rcvd: 115
Host info
Host 8.11.98.141.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 8.11.98.141.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
58.211.122.66 attackspambots
(sshd) Failed SSH login from 58.211.122.66 (CN/China/-): 5 in the last 3600 secs
2020-04-04 07:24:37
201.49.110.210 attackspam
Invalid user cgadmin from 201.49.110.210 port 43614
2020-04-04 07:27:22
80.211.128.151 attackbotsspam
$f2bV_matches
2020-04-04 07:12:59
92.242.207.18 attackspam
firewall-block, port(s): 445/tcp
2020-04-04 07:43:25
165.227.104.253 attackbotsspam
*Port Scan* detected from 165.227.104.253 (US/United States/New Jersey/Clifton/-). 4 hits in the last 10 seconds
2020-04-04 07:31:53
45.133.99.7 attackbots
none
2020-04-04 07:21:12
192.241.237.68 attackspambots
firewall-block, port(s): 554/tcp
2020-04-04 07:25:27
58.221.7.174 attackbots
Invalid user tkl from 58.221.7.174 port 36026
2020-04-04 07:12:18
36.72.118.232 attackspambots
20/4/3@17:40:35: FAIL: Alarm-Network address from=36.72.118.232
...
2020-04-04 07:11:41
194.55.132.250 attack
[2020-04-03 18:50:04] NOTICE[12114][C-00000fc5] chan_sip.c: Call from '' (194.55.132.250:58160) to extension '46842002301' rejected because extension not found in context 'public'.
[2020-04-03 18:50:04] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-03T18:50:04.682-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="46842002301",SessionID="0x7f020c0ca898",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/194.55.132.250/58160",ACLName="no_extension_match"
[2020-04-03 18:51:06] NOTICE[12114][C-00000fc8] chan_sip.c: Call from '' (194.55.132.250:57836) to extension '01146842002301' rejected because extension not found in context 'public'.
[2020-04-03 18:51:06] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-03T18:51:06.614-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146842002301",SessionID="0x7f020c0ca898",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/194
...
2020-04-04 07:30:50
134.209.99.220 attackbots
Apr  4 00:12:36 silence02 sshd[1060]: Failed password for root from 134.209.99.220 port 51530 ssh2
Apr  4 00:15:54 silence02 sshd[1314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.99.220
Apr  4 00:15:56 silence02 sshd[1314]: Failed password for invalid user test from 134.209.99.220 port 48868 ssh2
2020-04-04 07:42:21
212.64.69.247 attackspam
Apr  3 23:33:10 xeon sshd[43984]: Failed password for root from 212.64.69.247 port 43950 ssh2
2020-04-04 07:48:31
161.117.39.78 attack
Apr  3 23:19:25 svapp01 sshd[8373]: User r.r from 161.117.39.78 not allowed because not listed in AllowUsers
Apr  3 23:19:25 svapp01 sshd[8373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.117.39.78  user=r.r
Apr  3 23:19:27 svapp01 sshd[8373]: Failed password for invalid user r.r from 161.117.39.78 port 53612 ssh2
Apr  3 23:19:27 svapp01 sshd[8373]: Received disconnect from 161.117.39.78: 11: Bye Bye [preauth]
Apr  3 23:22:05 svapp01 sshd[9258]: User r.r from 161.117.39.78 not allowed because not listed in AllowUsers
Apr  3 23:22:05 svapp01 sshd[9258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.117.39.78  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=161.117.39.78
2020-04-04 07:11:22
217.61.6.112 attackspambots
SSH Brute-Forcing (server1)
2020-04-04 07:30:37
162.241.149.130 attackbotsspam
Invalid user rng from 162.241.149.130 port 46550
2020-04-04 07:20:40

Recently Reported IPs

167.114.24.189 151.50.110.118 62.210.91.62 186.105.132.253
179.49.115.202 178.207.12.10 168.232.131.25 137.74.100.75
137.74.100.69 106.52.54.18 201.133.29.42 157.140.223.161
77.40.2.122 254.198.166.105 60.168.240.7 37.240.198.76
51.38.236.195 204.201.133.198 31.184.198.138 31.173.178.6