Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
114.104.139.68 attackspam
Lines containing failures of 114.104.139.68
Sep 19 03:18:58 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:00 neweola postfix/smtpd[29829]: NOQUEUE: reject: RCPT from unknown[114.104.139.68]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Sep 19 03:19:00 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6
Sep 19 03:19:02 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 auth=0/1 commands=3/4
Sep 19 03:19:04 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:07 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:07 neweol........
------------------------------
2020-09-20 01:18:48
114.104.139.68 attackbotsspam
Lines containing failures of 114.104.139.68
Sep 19 03:18:58 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:00 neweola postfix/smtpd[29829]: NOQUEUE: reject: RCPT from unknown[114.104.139.68]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Sep 19 03:19:00 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6
Sep 19 03:19:02 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 auth=0/1 commands=3/4
Sep 19 03:19:04 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:07 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:07 neweol........
------------------------------
2020-09-19 17:07:47
114.104.139.223 attackbotsspam
Email rejected due to spam filtering
2020-02-25 04:47:01
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.104.139.120
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8097
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.104.139.120.		IN	A

;; AUTHORITY SECTION:
.			60	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 14:34:30 CST 2022
;; MSG SIZE  rcvd: 108
Host info
Host 120.139.104.114.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 120.139.104.114.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
178.62.79.227 attackspam
sshd jail - ssh hack attempt
2020-04-08 18:00:00
51.83.73.160 attack
$f2bV_matches
2020-04-08 17:23:54
122.51.187.52 attackbotsspam
$f2bV_matches
2020-04-08 17:29:53
49.234.12.123 attackspambots
Apr  8 12:05:19 pkdns2 sshd\[18305\]: Invalid user ts3server from 49.234.12.123Apr  8 12:05:20 pkdns2 sshd\[18305\]: Failed password for invalid user ts3server from 49.234.12.123 port 40870 ssh2Apr  8 12:08:40 pkdns2 sshd\[18404\]: Failed password for root from 49.234.12.123 port 49212 ssh2Apr  8 12:11:44 pkdns2 sshd\[18550\]: Invalid user ts3sleep from 49.234.12.123Apr  8 12:11:45 pkdns2 sshd\[18550\]: Failed password for invalid user ts3sleep from 49.234.12.123 port 57554 ssh2Apr  8 12:14:58 pkdns2 sshd\[18657\]: Invalid user ns2 from 49.234.12.123
...
2020-04-08 17:53:51
180.76.189.196 attackbotsspam
Apr  8 04:56:49 scw-6657dc sshd[23661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.189.196
Apr  8 04:56:49 scw-6657dc sshd[23661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.189.196
Apr  8 04:56:51 scw-6657dc sshd[23661]: Failed password for invalid user ts3server from 180.76.189.196 port 39856 ssh2
...
2020-04-08 17:36:39
66.70.189.209 attack
Bruteforce detected by fail2ban
2020-04-08 17:23:28
213.230.67.32 attackbots
Apr  8 08:39:05 rotator sshd\[6989\]: Invalid user ts from 213.230.67.32Apr  8 08:39:07 rotator sshd\[6989\]: Failed password for invalid user ts from 213.230.67.32 port 64718 ssh2Apr  8 08:43:07 rotator sshd\[7750\]: Invalid user gpadmin from 213.230.67.32Apr  8 08:43:09 rotator sshd\[7750\]: Failed password for invalid user gpadmin from 213.230.67.32 port 40265 ssh2Apr  8 08:47:13 rotator sshd\[8516\]: Invalid user ubuntu from 213.230.67.32Apr  8 08:47:15 rotator sshd\[8516\]: Failed password for invalid user ubuntu from 213.230.67.32 port 15811 ssh2
...
2020-04-08 17:28:56
182.72.207.148 attack
Apr  8 10:38:04 sso sshd[13408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.72.207.148
Apr  8 10:38:06 sso sshd[13408]: Failed password for invalid user user from 182.72.207.148 port 40478 ssh2
...
2020-04-08 17:20:03
200.35.189.92 attackbots
SSH login attempts.
2020-04-08 17:59:29
49.158.22.135 attackbots
Apr  8 05:48:21 ws22vmsma01 sshd[245325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.158.22.135
Apr  8 05:48:23 ws22vmsma01 sshd[245325]: Failed password for invalid user admin from 49.158.22.135 port 35814 ssh2
...
2020-04-08 17:46:32
193.56.28.179 attack
Unauthorized connection attempt detected from IP address 193.56.28.179 to port 25 [T]
2020-04-08 17:24:51
49.232.51.237 attack
2020-04-08T11:19:16.567483amanda2.illicoweb.com sshd\[24879\]: Invalid user admin from 49.232.51.237 port 46206
2020-04-08T11:19:16.573057amanda2.illicoweb.com sshd\[24879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.51.237
2020-04-08T11:19:18.628138amanda2.illicoweb.com sshd\[24879\]: Failed password for invalid user admin from 49.232.51.237 port 46206 ssh2
2020-04-08T11:24:44.487486amanda2.illicoweb.com sshd\[25061\]: Invalid user user from 49.232.51.237 port 51320
2020-04-08T11:24:44.491054amanda2.illicoweb.com sshd\[25061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.51.237
...
2020-04-08 17:51:52
139.199.80.75 attackspam
Apr  8 09:59:49 h2829583 sshd[21209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.80.75
2020-04-08 17:27:59
106.13.65.207 attackspambots
Apr  8 11:48:24 roki sshd[24623]: Invalid user user from 106.13.65.207
Apr  8 11:48:24 roki sshd[24623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.65.207
Apr  8 11:48:26 roki sshd[24623]: Failed password for invalid user user from 106.13.65.207 port 44708 ssh2
Apr  8 11:51:18 roki sshd[24821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.65.207  user=ubuntu
Apr  8 11:51:20 roki sshd[24821]: Failed password for ubuntu from 106.13.65.207 port 44050 ssh2
...
2020-04-08 17:51:29
13.231.224.163 attackspam
Apr  8 05:54:12 jane sshd[30637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.231.224.163 
Apr  8 05:54:14 jane sshd[30637]: Failed password for invalid user sysadmin from 13.231.224.163 port 47786 ssh2
...
2020-04-08 17:40:54

Recently Reported IPs

114.104.139.123 114.104.139.124 113.251.216.102 114.104.139.129
114.104.139.132 114.104.139.126 114.104.139.137 114.104.139.13
114.104.139.134 114.104.139.138 114.104.139.14 114.104.139.140
114.104.139.147 114.104.139.144 114.104.139.148 114.104.139.155
114.104.139.157 113.251.216.118 114.104.139.158 114.104.139.160