Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
114.104.139.68 attackspam
Lines containing failures of 114.104.139.68
Sep 19 03:18:58 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:00 neweola postfix/smtpd[29829]: NOQUEUE: reject: RCPT from unknown[114.104.139.68]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Sep 19 03:19:00 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6
Sep 19 03:19:02 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 auth=0/1 commands=3/4
Sep 19 03:19:04 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:07 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:07 neweol........
------------------------------
2020-09-20 01:18:48
114.104.139.68 attackbotsspam
Lines containing failures of 114.104.139.68
Sep 19 03:18:58 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:00 neweola postfix/smtpd[29829]: NOQUEUE: reject: RCPT from unknown[114.104.139.68]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Sep 19 03:19:00 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6
Sep 19 03:19:02 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 auth=0/1 commands=3/4
Sep 19 03:19:04 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:07 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:07 neweol........
------------------------------
2020-09-19 17:07:47
114.104.139.223 attackbotsspam
Email rejected due to spam filtering
2020-02-25 04:47:01
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.104.139.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59557
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.104.139.19.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 14:34:39 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 19.139.104.114.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 19.139.104.114.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
106.13.67.22 attack
SSH Bruteforce attack
2019-10-11 18:40:55
218.92.0.207 attackspam
2019-10-11T10:33:24.444268abusebot-7.cloudsearch.cf sshd\[4186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.207  user=root
2019-10-11 18:48:12
193.112.23.81 attackspambots
Oct 10 23:14:20 auw2 sshd\[1364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.23.81  user=root
Oct 10 23:14:22 auw2 sshd\[1364\]: Failed password for root from 193.112.23.81 port 47951 ssh2
Oct 10 23:18:42 auw2 sshd\[1782\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.23.81  user=root
Oct 10 23:18:45 auw2 sshd\[1782\]: Failed password for root from 193.112.23.81 port 36850 ssh2
Oct 10 23:23:09 auw2 sshd\[2157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.23.81  user=root
2019-10-11 18:19:38
31.184.218.68 attack
firewall-block, port(s): 8888/tcp, 8889/tcp, 8891/tcp, 8892/tcp
2019-10-11 18:22:28
111.230.227.17 attackbots
Automatic report - Banned IP Access
2019-10-11 18:21:42
50.227.195.3 attackbots
Oct 11 10:11:52 web8 sshd\[15316\]: Invalid user QWERTY@2020 from 50.227.195.3
Oct 11 10:11:52 web8 sshd\[15316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.227.195.3
Oct 11 10:11:54 web8 sshd\[15316\]: Failed password for invalid user QWERTY@2020 from 50.227.195.3 port 53466 ssh2
Oct 11 10:15:26 web8 sshd\[17155\]: Invalid user 1234Root from 50.227.195.3
Oct 11 10:15:26 web8 sshd\[17155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.227.195.3
2019-10-11 18:44:21
81.22.45.49 attackspambots
10/11/2019-06:30:46.503553 81.22.45.49 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-10-11 18:35:16
218.92.0.155 attack
SSH Bruteforce attack
2019-10-11 18:48:46
182.253.71.242 attackspambots
Oct 11 09:28:19 venus sshd\[31793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.71.242  user=root
Oct 11 09:28:22 venus sshd\[31793\]: Failed password for root from 182.253.71.242 port 57641 ssh2
Oct 11 09:36:18 venus sshd\[31873\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.71.242  user=root
...
2019-10-11 18:52:17
78.136.224.2 attack
Oct  9 14:25:26 our-server-hostname postfix/smtpd[27722]: connect from unknown[78.136.224.2]
Oct x@x
Oct x@x
Oct  9 14:25:29 our-server-hostname postfix/smtpd[27722]: lost connection after RCPT from unknown[78.136.224.2]
Oct  9 14:25:29 our-server-hostname postfix/smtpd[27722]: disconnect from unknown[78.136.224.2]
Oct  9 15:19:47 our-server-hostname postfix/smtpd[29852]: connect from unknown[78.136.224.2]
Oct x@x
Oct  9 15:19:50 our-server-hostname postfix/smtpd[29852]: lost connection after RCPT from unknown[78.136.224.2]
Oct  9 15:19:50 our-server-hostname postfix/smtpd[29852]: disconnect from unknown[78.136.224.2]
Oct  9 16:31:33 our-server-hostname postfix/smtpd[30171]: connect from unknown[78.136.224.2]
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct  9 16:31:41 our-server-hostname postfix/smtpd[30171]: lost connection after RCPT from unknown[78.136.224.2]
Oct  9 16:31:41 our-server-hostname postfix/smtpd[30171]:........
-------------------------------
2019-10-11 18:22:00
200.70.56.204 attackbots
Oct 11 12:22:42 MK-Soft-VM6 sshd[2557]: Failed password for root from 200.70.56.204 port 56798 ssh2
...
2019-10-11 18:50:01
149.202.210.31 attackbotsspam
Automatic report - Banned IP Access
2019-10-11 18:55:24
166.62.80.109 attackspambots
Automatic report - Banned IP Access
2019-10-11 18:23:36
24.198.94.143 attackbotsspam
Automatic report - Port Scan Attack
2019-10-11 18:34:42
217.74.39.213 attackbotsspam
[portscan] Port scan
2019-10-11 18:49:30

Recently Reported IPs

114.104.139.183 114.104.139.185 114.104.139.197 113.251.216.132
114.104.139.200 114.104.139.20 114.104.139.191 114.104.139.192
114.104.139.202 114.104.139.205 114.104.139.198 114.104.140.189
114.104.140.20 114.104.140.193 114.104.140.201 114.104.140.207
113.251.218.84 114.104.140.200 114.104.140.196 114.104.140.186