Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Turkey

Internet Service Provider: Turk Telekomunikasyon Anonim Sirketi

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspambots
Automatic report - Port Scan Attack
2019-10-25 21:14:04
Comments on same subnet:
IP Type Details Datetime
81.214.139.227 attackbotsspam
Unauthorized connection attempt from IP address 81.214.139.227 on Port 445(SMB)
2020-03-23 00:32:36
81.214.139.103 attackspam
Unauthorised access (Nov 17) SRC=81.214.139.103 LEN=44 TTL=48 ID=58738 TCP DPT=23 WINDOW=15417 SYN
2019-11-17 07:25:27
81.214.139.227 attackbots
Unauthorized connection attempt from IP address 81.214.139.227 on Port 445(SMB)
2019-09-18 00:30:13
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.214.139.98
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57490
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.214.139.98.			IN	A

;; AUTHORITY SECTION:
.			251	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102500 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 25 21:13:53 CST 2019
;; MSG SIZE  rcvd: 117
Host info
98.139.214.81.in-addr.arpa domain name pointer 81.214.139.98.dynamic.ttnet.com.tr.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
98.139.214.81.in-addr.arpa	name = 81.214.139.98.dynamic.ttnet.com.tr.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
182.61.21.155 attackspam
May 30 15:48:44 cdc sshd[25170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.21.155 
May 30 15:48:46 cdc sshd[25170]: Failed password for invalid user server from 182.61.21.155 port 44810 ssh2
2020-05-31 01:18:01
186.154.234.94 attackspambots
Port probing on unauthorized port 445
2020-05-31 01:23:02
159.89.131.172 attack
May 30 19:44:14 pkdns2 sshd\[17087\]: Invalid user silverline from 159.89.131.172May 30 19:44:16 pkdns2 sshd\[17087\]: Failed password for invalid user silverline from 159.89.131.172 port 60152 ssh2May 30 19:46:59 pkdns2 sshd\[17196\]: Invalid user Rupesh from 159.89.131.172May 30 19:47:01 pkdns2 sshd\[17196\]: Failed password for invalid user Rupesh from 159.89.131.172 port 43878 ssh2May 30 19:49:49 pkdns2 sshd\[17291\]: Failed password for root from 159.89.131.172 port 57774 ssh2May 30 19:52:35 pkdns2 sshd\[17437\]: Failed password for root from 159.89.131.172 port 35666 ssh2
...
2020-05-31 01:47:22
220.133.36.112 attack
(sshd) Failed SSH login from 220.133.36.112 (TW/Taiwan/220-133-36-112.HINET-IP.hinet.net): 5 in the last 3600 secs
2020-05-31 01:42:16
139.186.69.226 attackspam
May 30 12:02:46 ip-172-31-62-245 sshd\[24981\]: Failed password for root from 139.186.69.226 port 34884 ssh2\
May 30 12:04:39 ip-172-31-62-245 sshd\[25031\]: Failed password for root from 139.186.69.226 port 54644 ssh2\
May 30 12:06:31 ip-172-31-62-245 sshd\[25042\]: Failed password for root from 139.186.69.226 port 46172 ssh2\
May 30 12:08:26 ip-172-31-62-245 sshd\[25048\]: Invalid user status from 139.186.69.226\
May 30 12:08:28 ip-172-31-62-245 sshd\[25048\]: Failed password for invalid user status from 139.186.69.226 port 37704 ssh2\
2020-05-31 01:49:56
89.248.168.217 attack
1 Attack(s) Detected
[DoS Attack: Ascend Kill] from source: 89.248.168.217, port 35081, Friday, May 29, 2020 04:11:10
2020-05-31 01:19:44
51.255.199.33 attackspambots
May 30 19:23:58 minden010 sshd[25664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.199.33
May 30 19:24:00 minden010 sshd[25664]: Failed password for invalid user craig from 51.255.199.33 port 57064 ssh2
May 30 19:30:42 minden010 sshd[28950]: Failed password for root from 51.255.199.33 port 35904 ssh2
...
2020-05-31 01:56:32
61.187.149.133 attackspam
(ftpd) Failed FTP login from 61.187.149.133 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 30 16:38:13 ir1 pure-ftpd: (?@61.187.149.133) [WARNING] Authentication failed for user [anonymous]
2020-05-31 01:54:46
134.209.186.72 attackspambots
$f2bV_matches
2020-05-31 01:43:30
45.55.86.19 attack
May 31 03:00:49 web1 sshd[9575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.86.19  user=root
May 31 03:00:51 web1 sshd[9575]: Failed password for root from 45.55.86.19 port 45491 ssh2
May 31 03:05:07 web1 sshd[10942]: Invalid user admin from 45.55.86.19 port 51857
May 31 03:05:07 web1 sshd[10942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.86.19
May 31 03:05:07 web1 sshd[10942]: Invalid user admin from 45.55.86.19 port 51857
May 31 03:05:09 web1 sshd[10942]: Failed password for invalid user admin from 45.55.86.19 port 51857 ssh2
May 31 03:08:40 web1 sshd[15064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.86.19  user=root
May 31 03:08:42 web1 sshd[15064]: Failed password for root from 45.55.86.19 port 54851 ssh2
May 31 03:12:12 web1 sshd[22164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.5
...
2020-05-31 01:46:24
88.250.254.90 attackbotsspam
Automatic report - Port Scan Attack
2020-05-31 01:45:25
212.92.111.192 attack
RDPBrutePap
2020-05-31 01:42:33
182.23.8.114 attackspambots
20/5/30@08:08:54: FAIL: Alarm-Network address from=182.23.8.114
...
2020-05-31 01:32:44
138.68.46.165 attack
May 30 14:08:28 debian-2gb-nbg1-2 kernel: \[13099289.243371\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=138.68.46.165 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=11881 PROTO=TCP SPT=47906 DPT=20294 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-31 01:48:12
79.11.152.147 attackbots
[MK-Root1] Blocked by UFW
2020-05-31 01:30:37

Recently Reported IPs

103.42.126.254 172.99.119.12 192.241.129.226 41.232.65.52
37.47.27.173 113.172.24.93 51.15.149.58 194.228.59.9
118.244.213.168 61.91.54.58 171.80.3.227 178.27.138.152
180.68.18.100 103.141.138.134 217.112.143.73 220.170.144.23
213.87.159.84 195.231.1.123 159.203.47.205 183.53.156.135