Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
114.104.139.68 attackspam
Lines containing failures of 114.104.139.68
Sep 19 03:18:58 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:00 neweola postfix/smtpd[29829]: NOQUEUE: reject: RCPT from unknown[114.104.139.68]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Sep 19 03:19:00 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6
Sep 19 03:19:02 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 auth=0/1 commands=3/4
Sep 19 03:19:04 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:07 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:07 neweol........
------------------------------
2020-09-20 01:18:48
114.104.139.68 attackbotsspam
Lines containing failures of 114.104.139.68
Sep 19 03:18:58 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:00 neweola postfix/smtpd[29829]: NOQUEUE: reject: RCPT from unknown[114.104.139.68]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Sep 19 03:19:00 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6
Sep 19 03:19:02 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 auth=0/1 commands=3/4
Sep 19 03:19:04 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:07 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:07 neweol........
------------------------------
2020-09-19 17:07:47
114.104.139.223 attackbotsspam
Email rejected due to spam filtering
2020-02-25 04:47:01
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.104.139.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51893
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.104.139.140.		IN	A

;; AUTHORITY SECTION:
.			238	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 14:34:33 CST 2022
;; MSG SIZE  rcvd: 108
Host info
Host 140.139.104.114.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 140.139.104.114.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
213.167.46.166 attack
Oct 15 16:57:10 pkdns2 sshd\[30498\]: Invalid user lizhongwen from 213.167.46.166Oct 15 16:57:12 pkdns2 sshd\[30498\]: Failed password for invalid user lizhongwen from 213.167.46.166 port 43944 ssh2Oct 15 17:02:10 pkdns2 sshd\[30744\]: Invalid user !@\#$%2875226q1 from 213.167.46.166Oct 15 17:02:12 pkdns2 sshd\[30744\]: Failed password for invalid user !@\#$%2875226q1 from 213.167.46.166 port 54474 ssh2Oct 15 17:06:59 pkdns2 sshd\[30936\]: Invalid user 123456 from 213.167.46.166Oct 15 17:07:01 pkdns2 sshd\[30936\]: Failed password for invalid user 123456 from 213.167.46.166 port 36772 ssh2
...
2019-10-15 22:49:37
185.153.208.26 attackspambots
Oct 15 16:24:36 dedicated sshd[12726]: Invalid user eu from 185.153.208.26 port 45588
2019-10-15 23:00:06
203.113.14.154 attackspam
Port 1433 Scan
2019-10-15 22:50:11
41.38.73.242 attackspam
Oct 15 05:03:24 web9 sshd\[3464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.38.73.242  user=root
Oct 15 05:03:26 web9 sshd\[3464\]: Failed password for root from 41.38.73.242 port 8238 ssh2
Oct 15 05:08:15 web9 sshd\[4121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.38.73.242  user=root
Oct 15 05:08:18 web9 sshd\[4121\]: Failed password for root from 41.38.73.242 port 64191 ssh2
Oct 15 05:13:15 web9 sshd\[4761\]: Invalid user com from 41.38.73.242
2019-10-15 23:13:30
113.172.143.156 attackbotsspam
2019-10-15T11:42:29.475141abusebot-6.cloudsearch.cf sshd\[28231\]: Invalid user admin from 113.172.143.156 port 43736
2019-10-15 23:06:21
119.28.42.97 attack
port scan and connect, tcp 1433 (ms-sql-s)
2019-10-15 22:55:44
138.68.82.220 attackbotsspam
Oct 15 16:01:19 ovpn sshd\[19752\]: Invalid user peter from 138.68.82.220
Oct 15 16:01:19 ovpn sshd\[19752\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
Oct 15 16:01:21 ovpn sshd\[19752\]: Failed password for invalid user peter from 138.68.82.220 port 50250 ssh2
Oct 15 16:10:01 ovpn sshd\[21380\]: Invalid user admin from 138.68.82.220
Oct 15 16:10:01 ovpn sshd\[21380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
2019-10-15 22:48:20
47.180.89.23 attackbots
Mar  2 20:17:54 vtv3 sshd\[26464\]: Invalid user zf from 47.180.89.23 port 60515
Mar  2 20:17:54 vtv3 sshd\[26464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.180.89.23
Mar  2 20:17:56 vtv3 sshd\[26464\]: Failed password for invalid user zf from 47.180.89.23 port 60515 ssh2
Mar  2 20:20:19 vtv3 sshd\[27621\]: Invalid user demo3 from 47.180.89.23 port 49402
Mar  2 20:20:19 vtv3 sshd\[27621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.180.89.23
Mar  5 06:40:32 vtv3 sshd\[26225\]: Invalid user bot from 47.180.89.23 port 42352
Mar  5 06:40:32 vtv3 sshd\[26225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.180.89.23
Mar  5 06:40:33 vtv3 sshd\[26225\]: Failed password for invalid user bot from 47.180.89.23 port 42352 ssh2
Mar  5 06:45:56 vtv3 sshd\[28413\]: Invalid user bl from 47.180.89.23 port 59513
Mar  5 06:45:56 vtv3 sshd\[28413\]: pam_unix\(sshd:auth\): auth
2019-10-15 23:12:56
45.115.99.38 attackspambots
Oct 15 04:08:57 php1 sshd\[8938\]: Invalid user pass123 from 45.115.99.38
Oct 15 04:08:57 php1 sshd\[8938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.115.99.38
Oct 15 04:08:59 php1 sshd\[8938\]: Failed password for invalid user pass123 from 45.115.99.38 port 59818 ssh2
Oct 15 04:13:47 php1 sshd\[9469\]: Invalid user dagifi1980 from 45.115.99.38
Oct 15 04:13:47 php1 sshd\[9469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.115.99.38
2019-10-15 23:01:47
5.117.237.40 attackbotsspam
[portscan] Port scan
2019-10-15 22:49:17
159.65.8.65 attackbots
2019-10-15T14:25:42.093519abusebot-3.cloudsearch.cf sshd\[25635\]: Invalid user cvsadmin from 159.65.8.65 port 56844
2019-10-15 22:50:37
222.186.173.142 attackspam
Oct 15 15:02:03 work-partkepr sshd\[4891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.142  user=root
Oct 15 15:02:05 work-partkepr sshd\[4891\]: Failed password for root from 222.186.173.142 port 8286 ssh2
...
2019-10-15 23:02:32
157.230.249.220 attackspambots
Oct 14 15:28:55 myhostname sshd[15863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.249.220  user=r.r
Oct 14 15:28:57 myhostname sshd[15863]: Failed password for r.r from 157.230.249.220 port 60542 ssh2
Oct 14 15:28:57 myhostname sshd[15863]: Received disconnect from 157.230.249.220 port 60542:11: Bye Bye [preauth]
Oct 14 15:28:57 myhostname sshd[15863]: Disconnected from 157.230.249.220 port 60542 [preauth]
Oct 14 15:40:46 myhostname sshd[15915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.249.220  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=157.230.249.220
2019-10-15 23:22:08
96.57.82.166 attackspam
Oct 15 14:58:33 thevastnessof sshd[19549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.57.82.166
...
2019-10-15 23:06:51
177.189.186.187 attackspambots
Invalid user vagrant from 177.189.186.187 port 37874
2019-10-15 23:05:52

Recently Reported IPs

114.104.139.14 114.104.139.147 114.104.139.144 114.104.139.148
114.104.139.155 114.104.139.157 113.251.216.118 114.104.139.158
114.104.139.160 114.104.139.166 114.104.139.165 114.104.139.163
114.104.139.17 114.104.139.173 114.104.139.175 114.104.139.172
114.104.139.177 114.104.139.151 114.104.139.181 114.104.139.179