Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: AT&T Corp.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Sep 19 13:35:04 vps sshd[2625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.139.154.249 
Sep 19 13:35:06 vps sshd[2625]: Failed password for invalid user test from 107.139.154.249 port 42048 ssh2
Sep 19 14:21:22 vps sshd[4968]: Failed password for root from 107.139.154.249 port 45854 ssh2
...
2020-09-20 00:53:21
attackbots
Sep 19 07:33:58 melroy-server sshd[13224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.139.154.249 
Sep 19 07:34:00 melroy-server sshd[13224]: Failed password for invalid user admin from 107.139.154.249 port 55958 ssh2
...
2020-09-19 16:41:28
attackspam
Sep 18 16:54:54 XXX sshd[50175]: Invalid user android from 107.139.154.249 port 59600
2020-09-19 02:44:31
attackspambots
SSH Brute-Force Attack
2020-09-18 18:45:39
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.139.154.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55515
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;107.139.154.249.		IN	A

;; AUTHORITY SECTION:
.			409	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091800 1800 900 604800 86400

;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 18 18:45:35 CST 2020
;; MSG SIZE  rcvd: 119
Host info
249.154.139.107.in-addr.arpa domain name pointer 107-139-154-249.lightspeed.cicril.sbcglobal.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
249.154.139.107.in-addr.arpa	name = 107-139-154-249.lightspeed.cicril.sbcglobal.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
144.217.105.209 attack
Invalid user bad from 144.217.105.209 port 58148
2020-06-06 01:27:30
185.132.1.52 attackbotsspam
Jun  5 15:39:38 XXX sshd[61089]: Invalid user test07 from 185.132.1.52 port 4701
2020-06-06 01:16:46
185.232.65.105 attack
Unauthorized connection attempt detected from IP address 185.232.65.105 to port 8080
2020-06-06 01:15:53
161.35.103.140 attack
Invalid user user from 161.35.103.140 port 58528
2020-06-06 01:23:41
144.91.75.5 attackspambots
Invalid user admin from 144.91.75.5 port 51424
2020-06-06 01:27:57
209.141.41.4 attack
 TCP (SYN) 209.141.41.4:55101 -> port 22, len 40
2020-06-06 01:10:30
222.252.118.47 attackspambots
Invalid user admin from 222.252.118.47 port 53914
2020-06-06 01:09:25
163.172.42.21 attack
Jun  5 10:53:29 debian sshd[12279]: Unable to negotiate with 163.172.42.21 port 55414: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Jun  5 10:53:36 debian sshd[12295]: Unable to negotiate with 163.172.42.21 port 40750: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
...
2020-06-06 01:23:15
128.199.158.182 attackspambots
Automatic report - Banned IP Access
2020-06-06 01:00:03
1.202.76.226 attack
failed root login
2020-06-06 01:03:04
149.202.45.11 attackspam
149.202.45.11 - - [05/Jun/2020:18:20:48 +0100] "POST /wp-login.php HTTP/1.1" 200 2020 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.202.45.11 - - [05/Jun/2020:18:20:49 +0100] "POST /wp-login.php HTTP/1.1" 200 2019 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.202.45.11 - - [05/Jun/2020:18:20:49 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-06-06 01:27:11
138.121.16.111 attackbots
Invalid user admin from 138.121.16.111 port 44172
2020-06-06 01:28:57
164.52.24.171 attackspambots
20/6/5@07:59:24: FAIL: Alarm-Network address from=164.52.24.171
...
2020-06-06 00:59:39
120.132.12.162 attackbots
Jun  5 13:50:29 mail sshd[23897]: Failed password for root from 120.132.12.162 port 46476 ssh2
...
2020-06-06 00:51:44
103.242.56.122 attack
Jun  5 11:48:55 ny01 sshd[12157]: Failed password for root from 103.242.56.122 port 61834 ssh2
Jun  5 11:53:51 ny01 sshd[12754]: Failed password for root from 103.242.56.122 port 35999 ssh2
2020-06-06 00:57:55

Recently Reported IPs

6.94.191.245 200.52.67.82 154.202.14.120 180.253.165.24
189.28.166.226 195.123.239.36 109.104.128.134 94.66.221.176
110.80.61.104 166.170.222.106 196.14.29.148 235.238.224.179
81.3.6.162 193.123.208.235 139.99.91.43 128.14.141.119
165.200.149.26 66.187.162.130 238.165.179.123 250.233.180.221