Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
114.104.139.68 attackspam
Lines containing failures of 114.104.139.68
Sep 19 03:18:58 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:00 neweola postfix/smtpd[29829]: NOQUEUE: reject: RCPT from unknown[114.104.139.68]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Sep 19 03:19:00 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6
Sep 19 03:19:02 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 auth=0/1 commands=3/4
Sep 19 03:19:04 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:07 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:07 neweol........
------------------------------
2020-09-20 01:18:48
114.104.139.68 attackbotsspam
Lines containing failures of 114.104.139.68
Sep 19 03:18:58 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:00 neweola postfix/smtpd[29829]: NOQUEUE: reject: RCPT from unknown[114.104.139.68]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Sep 19 03:19:00 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6
Sep 19 03:19:02 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 auth=0/1 commands=3/4
Sep 19 03:19:04 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:07 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:07 neweol........
------------------------------
2020-09-19 17:07:47
114.104.139.223 attackbotsspam
Email rejected due to spam filtering
2020-02-25 04:47:01
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.104.139.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54648
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.104.139.9.			IN	A

;; AUTHORITY SECTION:
.			24	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031501 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 16 03:42:54 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 9.139.104.114.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 9.139.104.114.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
112.85.42.176 attackspambots
$f2bV_matches_ltvn
2019-12-17 01:30:31
176.103.174.198 attack
3389BruteforceFW21
2019-12-17 01:32:02
111.72.193.216 attackbots
2019-12-16 08:44:16 H=(ylmf-pc) [111.72.193.216]:53318 I=[192.147.25.65]:25 rejected EHLO or HELO ylmf-pc: CHECK_HELO: ylmf-pc
2019-12-16 08:44:16 H=(ylmf-pc) [111.72.193.216]:53310 I=[192.147.25.65]:25 rejected EHLO or HELO ylmf-pc: CHECK_HELO: ylmf-pc
2019-12-16 08:44:17 H=(ylmf-pc) [111.72.193.216]:57336 I=[192.147.25.65]:25 rejected EHLO or HELO ylmf-pc: CHECK_HELO: ylmf-pc
...
2019-12-17 01:19:58
187.176.191.4 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-12-17 01:10:46
185.156.177.22 attack
RDP brute force attack detected by fail2ban
2019-12-17 01:07:58
150.136.155.136 attack
Dec 16 14:44:17 vtv3 sshd[30587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.155.136 
Dec 16 14:44:19 vtv3 sshd[30587]: Failed password for invalid user mangano from 150.136.155.136 port 20682 ssh2
Dec 16 14:50:41 vtv3 sshd[1621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.155.136 
Dec 16 15:05:39 vtv3 sshd[8549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.155.136 
Dec 16 15:05:41 vtv3 sshd[8549]: Failed password for invalid user heyleigh from 150.136.155.136 port 60931 ssh2
Dec 16 15:13:41 vtv3 sshd[12475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.155.136 
Dec 16 15:26:19 vtv3 sshd[18559]: Failed password for root from 150.136.155.136 port 44696 ssh2
Dec 16 15:32:38 vtv3 sshd[21569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.155.136 
Dec 16 15:3
2019-12-17 01:14:09
94.152.193.15 attackspam
Dec 16 15:44:20 grey postfix/smtpd\[19741\]: NOQUEUE: reject: RCPT from 5115.niebieski.net\[94.152.193.15\]: 554 5.7.1 Service unavailable\; Client host \[94.152.193.15\] blocked using dnsbl.cobion.com\; from=\ to=\ proto=ESMTP helo=\
...
2019-12-17 01:16:10
106.51.73.204 attack
Dec 16 04:58:36 hpm sshd\[32504\]: Invalid user orien from 106.51.73.204
Dec 16 04:58:36 hpm sshd\[32504\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.73.204
Dec 16 04:58:38 hpm sshd\[32504\]: Failed password for invalid user orien from 106.51.73.204 port 47401 ssh2
Dec 16 05:06:08 hpm sshd\[809\]: Invalid user webmaster from 106.51.73.204
Dec 16 05:06:08 hpm sshd\[809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.73.204
2019-12-17 01:24:56
138.197.189.136 attack
Dec 16 22:13:17 gw1 sshd[28026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.136
Dec 16 22:13:19 gw1 sshd[28026]: Failed password for invalid user balma from 138.197.189.136 port 56918 ssh2
...
2019-12-17 01:15:50
50.235.204.10 attackspam
Unauthorized connection attempt detected from IP address 50.235.204.10 to port 445
2019-12-17 01:43:33
39.82.87.144 attackspam
Brute-force attempt banned
2019-12-17 01:47:07
51.89.176.237 attackspam
3389BruteforceFW21
2019-12-17 01:38:04
40.92.41.56 attackspambots
Dec 16 20:01:24 debian-2gb-vpn-nbg1-1 kernel: [894053.899479] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.56 DST=78.46.192.101 LEN=52 TOS=0x02 PREC=0x00 TTL=104 ID=9530 DF PROTO=TCP SPT=6554 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0
2019-12-17 01:09:50
62.210.245.227 attackbots
fraudulent SSH attempt
2019-12-17 01:44:42
36.71.232.153 attackspam
Unauthorized connection attempt detected from IP address 36.71.232.153 to port 445
2019-12-17 01:27:32

Recently Reported IPs

114.104.139.220 17.150.90.188 114.104.140.25 114.104.141.101
114.104.141.141 114.104.142.13 114.104.183.231 114.104.183.91
114.104.184.129 131.31.199.40 58.134.39.141 114.104.184.93
114.104.19.155 114.104.19.245 114.104.204.253 114.104.226.17
114.104.226.184 131.191.108.99 114.104.226.39 114.105.168.223