Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: NTT America Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
[portscan] tcp/23 [TELNET]
*(RWIN=65535)(10151156)
2019-10-16 00:47:22
Comments on same subnet:
IP Type Details Datetime
204.42.253.132 attackbots
Tried our host z.
2020-09-13 23:49:10
204.42.253.132 attack
 UDP 204.42.253.132:51774 -> port 1900, len 121
2020-09-13 15:40:04
204.42.253.132 attack
 UDP 204.42.253.132:51774 -> port 1900, len 121
2020-09-13 07:25:16
204.42.253.130 attackspambots
Honeypot hit.
2020-09-01 22:07:50
204.42.253.132 attack
Port scan: Attack repeated for 24 hours
2020-08-24 08:10:08
204.42.253.130 attack
 UDP 204.42.253.130:14235 -> port 161, len 66
2020-08-13 03:12:38
204.42.253.130 attackbotsspam
Honeypot hit.
2020-07-28 20:09:11
204.42.253.130 attackbotsspam
scan z
2020-03-25 19:16:46
204.42.253.132 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-02 22:29:09
204.42.253.130 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-12-26 23:35:15
204.42.253.130 attack
UTC: 2019-12-25 pkts: 2 port: 161/udp
2019-12-26 14:06:54
204.42.253.132 attackbots
scan z
2019-12-09 01:15:49
204.42.253.130 attack
Scanning random ports - tries to find possible vulnerable services
2019-12-04 06:01:04
204.42.253.132 attack
Honeypot hit.
2019-11-24 02:41:41
204.42.253.132 attackspambots
[portscan] udp/1900 [ssdp]
*(RWIN=-)(11190859)
2019-11-19 19:58:18
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 204.42.253.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16398
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;204.42.253.139.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061000 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jun 10 16:13:10 CST 2019
;; MSG SIZE  rcvd: 118

Host info
139.253.42.204.in-addr.arpa domain name pointer www.telnetscanproject.org.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
139.253.42.204.in-addr.arpa	name = www.telnetscanproject.org.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
37.120.12.212 attackspam
Dec 15 01:10:14 mail sshd[22210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.120.12.212 
Dec 15 01:10:16 mail sshd[22210]: Failed password for invalid user borris from 37.120.12.212 port 60555 ssh2
Dec 15 01:15:26 mail sshd[22980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.120.12.212
2019-12-15 08:32:30
200.59.130.99 attack
Honeypot attack, port: 445, PTR: srvmail1.synthesis-rs.com.
2019-12-15 08:33:10
124.113.218.211 attackbots
Dec 14 23:50:31 grey postfix/smtpd\[3473\]: NOQUEUE: reject: RCPT from unknown\[124.113.218.211\]: 554 5.7.1 Service unavailable\; Client host \[124.113.218.211\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[124.113.218.211\]\; from=\ to=\ proto=SMTP helo=\
...
2019-12-15 08:57:52
51.91.56.133 attackspambots
Dec 14 14:45:54 web9 sshd\[28716\]: Invalid user teamspeak3 from 51.91.56.133
Dec 14 14:45:54 web9 sshd\[28716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.56.133
Dec 14 14:45:56 web9 sshd\[28716\]: Failed password for invalid user teamspeak3 from 51.91.56.133 port 53238 ssh2
Dec 14 14:51:29 web9 sshd\[29635\]: Invalid user ftpuser from 51.91.56.133
Dec 14 14:51:29 web9 sshd\[29635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.56.133
2019-12-15 08:54:53
54.39.145.31 attackspambots
Dec 14 14:06:36 hpm sshd\[13077\]: Invalid user passwordx from 54.39.145.31
Dec 14 14:06:36 hpm sshd\[13077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.ip-54-39-145.net
Dec 14 14:06:37 hpm sshd\[13077\]: Failed password for invalid user passwordx from 54.39.145.31 port 40350 ssh2
Dec 14 14:11:57 hpm sshd\[13693\]: Invalid user p@ssw0rd from 54.39.145.31
Dec 14 14:11:57 hpm sshd\[13693\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.ip-54-39-145.net
2019-12-15 08:23:59
170.233.52.20 attack
1576363848 - 12/14/2019 23:50:48 Host: 170.233.52.20/170.233.52.20 Port: 445 TCP Blocked
2019-12-15 08:42:02
75.98.144.15 attackspam
Dec 14 14:22:23 auw2 sshd\[30777\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=75-98-144-15.cpe.safelink.net  user=mysql
Dec 14 14:22:25 auw2 sshd\[30777\]: Failed password for mysql from 75.98.144.15 port 36275 ssh2
Dec 14 14:27:58 auw2 sshd\[31313\]: Invalid user marzulli from 75.98.144.15
Dec 14 14:27:58 auw2 sshd\[31313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=75-98-144-15.cpe.safelink.net
Dec 14 14:28:00 auw2 sshd\[31313\]: Failed password for invalid user marzulli from 75.98.144.15 port 40213 ssh2
2019-12-15 08:50:04
59.4.107.29 attack
Dec 15 00:43:44 vmd17057 sshd\[15846\]: Invalid user ax400 from 59.4.107.29 port 42534
Dec 15 00:43:44 vmd17057 sshd\[15846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.4.107.29
Dec 15 00:43:46 vmd17057 sshd\[15846\]: Failed password for invalid user ax400 from 59.4.107.29 port 42534 ssh2
...
2019-12-15 08:29:28
129.204.58.180 attack
Dec 14 23:50:59 tuxlinux sshd[57639]: Invalid user admin from 129.204.58.180 port 43499
Dec 14 23:50:59 tuxlinux sshd[57639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.58.180 
Dec 14 23:50:59 tuxlinux sshd[57639]: Invalid user admin from 129.204.58.180 port 43499
Dec 14 23:50:59 tuxlinux sshd[57639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.58.180 
...
2019-12-15 08:28:03
139.219.0.20 attackspam
Dec 15 02:36:38 sauna sshd[107175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.20
Dec 15 02:36:41 sauna sshd[107175]: Failed password for invalid user test from 139.219.0.20 port 46316 ssh2
...
2019-12-15 08:45:20
106.13.83.251 attack
Dec 15 01:41:56 server sshd\[15878\]: Invalid user backup from 106.13.83.251
Dec 15 01:41:56 server sshd\[15878\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.83.251 
Dec 15 01:41:58 server sshd\[15878\]: Failed password for invalid user backup from 106.13.83.251 port 40522 ssh2
Dec 15 01:53:46 server sshd\[19230\]: Invalid user pustoaica from 106.13.83.251
Dec 15 01:53:46 server sshd\[19230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.83.251 
...
2019-12-15 08:51:38
80.211.128.151 attack
Dec 15 00:55:51 icinga sshd[9562]: Failed password for mysql from 80.211.128.151 port 60400 ssh2
...
2019-12-15 08:46:55
149.28.90.116 attack
Dec 14 13:01:36 auw2 sshd\[21707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.90.116  user=lp
Dec 14 13:01:38 auw2 sshd\[21707\]: Failed password for lp from 149.28.90.116 port 59286 ssh2
Dec 14 13:07:13 auw2 sshd\[22349\]: Invalid user travelblog from 149.28.90.116
Dec 14 13:07:13 auw2 sshd\[22349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.90.116
Dec 14 13:07:16 auw2 sshd\[22349\]: Failed password for invalid user travelblog from 149.28.90.116 port 39584 ssh2
2019-12-15 08:53:33
122.84.233.91 attackbotsspam
Honeypot attack, port: 23, PTR: PTR record not found
2019-12-15 08:30:40
106.13.167.205 attack
Dec 15 00:55:20 ArkNodeAT sshd\[11023\]: Invalid user sys_admin from 106.13.167.205
Dec 15 00:55:20 ArkNodeAT sshd\[11023\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.167.205
Dec 15 00:55:22 ArkNodeAT sshd\[11023\]: Failed password for invalid user sys_admin from 106.13.167.205 port 59890 ssh2
2019-12-15 08:23:01

Recently Reported IPs

201.149.59.134 125.123.142.77 45.221.79.134 112.149.1.106
45.229.50.244 51.38.34.203 40.14.135.157 37.131.196.63
52.19.3.62 122.15.156.57 34.86.214.78 37.146.244.118
168.139.62.111 213.135.9.211 84.52.160.86 12.32.254.97
206.195.103.85 124.144.135.152 222.248.59.130 103.22.25.31