Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: Beijing

Country: China

Internet Service Provider: V6Yun (Beijing) Network Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attack
Jul 20 23:39:07 journals sshd\[56826\]: Invalid user access from 139.198.124.14
Jul 20 23:39:07 journals sshd\[56826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.124.14
Jul 20 23:39:09 journals sshd\[56826\]: Failed password for invalid user access from 139.198.124.14 port 48420 ssh2
Jul 20 23:43:42 journals sshd\[57436\]: Invalid user postgres from 139.198.124.14
Jul 20 23:43:42 journals sshd\[57436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.124.14
...
2020-07-21 05:36:20
attackbotsspam
Invalid user tia from 139.198.124.14 port 48120
2020-07-14 18:43:16
attackspambots
Jul  6 04:26:26 gw1 sshd[23681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.124.14
Jul  6 04:26:28 gw1 sshd[23681]: Failed password for invalid user bird from 139.198.124.14 port 33594 ssh2
...
2020-07-06 08:32:55
attackspam
Jun 27 20:56:28 webhost01 sshd[4753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.124.14
Jun 27 20:56:30 webhost01 sshd[4753]: Failed password for invalid user dev from 139.198.124.14 port 43218 ssh2
...
2020-06-28 01:22:51
attackbots
Jun 22 15:06:46 eventyay sshd[23640]: Failed password for root from 139.198.124.14 port 55768 ssh2
Jun 22 15:10:02 eventyay sshd[23734]: Failed password for root from 139.198.124.14 port 35082 ssh2
Jun 22 15:13:02 eventyay sshd[23831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.124.14
...
2020-06-22 22:16:50
attackspam
$f2bV_matches
2020-05-01 18:03:06
attackbotsspam
Bruteforce detected by fail2ban
2020-05-01 07:08:29
attackspambots
SSH bruteforce
2020-04-16 03:15:25
attackspam
Apr  9 05:54:02 silence02 sshd[17443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.124.14
Apr  9 05:54:04 silence02 sshd[17443]: Failed password for invalid user admins from 139.198.124.14 port 60058 ssh2
Apr  9 05:56:42 silence02 sshd[17595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.124.14
2020-04-09 12:14:23
attackspam
Mar 27 20:40:47 ns382633 sshd\[24073\]: Invalid user uyo from 139.198.124.14 port 53182
Mar 27 20:40:47 ns382633 sshd\[24073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.124.14
Mar 27 20:40:49 ns382633 sshd\[24073\]: Failed password for invalid user uyo from 139.198.124.14 port 53182 ssh2
Mar 27 20:44:34 ns382633 sshd\[24481\]: Invalid user ntb from 139.198.124.14 port 49826
Mar 27 20:44:34 ns382633 sshd\[24481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.124.14
2020-03-28 04:44:35
attackspam
Mar 11 20:09:48 mail sshd[24213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.124.14  user=root
Mar 11 20:09:50 mail sshd[24213]: Failed password for root from 139.198.124.14 port 48230 ssh2
Mar 11 20:14:49 mail sshd[24901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.124.14  user=root
Mar 11 20:14:52 mail sshd[24901]: Failed password for root from 139.198.124.14 port 45354 ssh2
Mar 11 20:16:47 mail sshd[25158]: Invalid user guest from 139.198.124.14
...
2020-03-12 05:24:40
attack
Unauthorized connection attempt detected from IP address 139.198.124.14 to port 2220 [J]
2020-02-23 16:19:50
attackbotsspam
Feb  6 21:22:02 sd-53420 sshd\[31217\]: Invalid user xei from 139.198.124.14
Feb  6 21:22:02 sd-53420 sshd\[31217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.124.14
Feb  6 21:22:04 sd-53420 sshd\[31217\]: Failed password for invalid user xei from 139.198.124.14 port 58170 ssh2
Feb  6 21:24:15 sd-53420 sshd\[31444\]: Invalid user jfs from 139.198.124.14
Feb  6 21:24:15 sd-53420 sshd\[31444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.124.14
...
2020-02-07 04:24:18
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.198.124.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23203
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.198.124.14.			IN	A

;; AUTHORITY SECTION:
.			364	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020601 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 04:24:15 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 14.124.198.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 14.124.198.139.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
142.44.211.57 attackbots
Aug  8 20:17:58 Ubuntu-1404-trusty-64-minimal sshd\[14947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.211.57  user=root
Aug  8 20:18:00 Ubuntu-1404-trusty-64-minimal sshd\[14947\]: Failed password for root from 142.44.211.57 port 52606 ssh2
Aug  8 20:28:28 Ubuntu-1404-trusty-64-minimal sshd\[19963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.211.57  user=root
Aug  8 20:28:30 Ubuntu-1404-trusty-64-minimal sshd\[19963\]: Failed password for root from 142.44.211.57 port 36136 ssh2
Aug  8 20:32:13 Ubuntu-1404-trusty-64-minimal sshd\[26460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.211.57  user=root
2020-08-09 03:19:03
138.99.93.224 attackspam
Dovecot Invalid User Login Attempt.
2020-08-09 03:22:05
54.38.81.231 attackbotsspam
xmlrpc attack
2020-08-09 03:33:16
121.162.235.44 attack
2020-08-08T20:34:08.202685amanda2.illicoweb.com sshd\[17030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.162.235.44  user=root
2020-08-08T20:34:10.255963amanda2.illicoweb.com sshd\[17030\]: Failed password for root from 121.162.235.44 port 34866 ssh2
2020-08-08T20:38:25.183197amanda2.illicoweb.com sshd\[17521\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.162.235.44  user=root
2020-08-08T20:38:27.518122amanda2.illicoweb.com sshd\[17521\]: Failed password for root from 121.162.235.44 port 44162 ssh2
2020-08-08T20:42:34.356466amanda2.illicoweb.com sshd\[17786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.162.235.44  user=root
...
2020-08-09 03:37:27
72.249.235.194 attackspambots
Dovecot Invalid User Login Attempt.
2020-08-09 03:41:24
64.225.119.164 attack
2020-08-08T12:22:21.493874xentho-1 sshd[1805399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.119.164  user=root
2020-08-08T12:22:23.390926xentho-1 sshd[1805399]: Failed password for root from 64.225.119.164 port 43024 ssh2
2020-08-08T12:23:16.280747xentho-1 sshd[1805413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.119.164  user=root
2020-08-08T12:23:18.728040xentho-1 sshd[1805413]: Failed password for root from 64.225.119.164 port 55972 ssh2
2020-08-08T12:24:10.589917xentho-1 sshd[1805427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.119.164  user=root
2020-08-08T12:24:12.450128xentho-1 sshd[1805427]: Failed password for root from 64.225.119.164 port 40690 ssh2
2020-08-08T12:25:04.628839xentho-1 sshd[1805433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.119.164  user=root
2020-08-08T
...
2020-08-09 03:24:50
148.235.82.68 attack
firewall-block, port(s): 21878/tcp
2020-08-09 03:36:28
84.241.7.77 attack
Aug  8 13:57:50 Ubuntu-1404-trusty-64-minimal sshd\[29307\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.241.7.77  user=root
Aug  8 13:57:51 Ubuntu-1404-trusty-64-minimal sshd\[29307\]: Failed password for root from 84.241.7.77 port 43518 ssh2
Aug  8 14:13:33 Ubuntu-1404-trusty-64-minimal sshd\[8932\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.241.7.77  user=root
Aug  8 14:13:35 Ubuntu-1404-trusty-64-minimal sshd\[8932\]: Failed password for root from 84.241.7.77 port 45012 ssh2
Aug  8 14:20:46 Ubuntu-1404-trusty-64-minimal sshd\[14151\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.241.7.77  user=root
2020-08-09 03:11:19
61.84.196.50 attackspambots
Aug  8 20:49:45 vps1 sshd[10338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.84.196.50  user=root
Aug  8 20:49:48 vps1 sshd[10338]: Failed password for invalid user root from 61.84.196.50 port 58150 ssh2
Aug  8 20:51:23 vps1 sshd[10353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.84.196.50  user=root
Aug  8 20:51:25 vps1 sshd[10353]: Failed password for invalid user root from 61.84.196.50 port 51874 ssh2
Aug  8 20:52:58 vps1 sshd[10368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.84.196.50  user=root
Aug  8 20:52:59 vps1 sshd[10368]: Failed password for invalid user root from 61.84.196.50 port 45110 ssh2
Aug  8 20:54:38 vps1 sshd[10379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.84.196.50  user=root
...
2020-08-09 03:12:13
45.143.223.121 attackbots
Aug  8 14:09:45 nopemail postfix/smtpd[19517]: NOQUEUE: reject: RCPT from unknown[45.143.223.121]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=
...
2020-08-09 03:26:51
222.186.175.169 attackbots
Aug  8 21:45:18 server sshd[14962]: Failed none for root from 222.186.175.169 port 43978 ssh2
Aug  8 21:45:19 server sshd[14962]: Failed password for root from 222.186.175.169 port 43978 ssh2
Aug  8 21:45:23 server sshd[14962]: Failed password for root from 222.186.175.169 port 43978 ssh2
2020-08-09 03:48:23
45.187.152.19 attack
2020-08-09T01:09:54.218052billing sshd[20386]: Failed password for root from 45.187.152.19 port 53272 ssh2
2020-08-09T01:13:00.727739billing sshd[27513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.187.152.19  user=root
2020-08-09T01:13:02.707157billing sshd[27513]: Failed password for root from 45.187.152.19 port 38928 ssh2
...
2020-08-09 03:37:55
219.75.134.27 attackbots
detected by Fail2Ban
2020-08-09 03:46:59
112.172.147.34 attackbotsspam
SSH Brute-Force attacks
2020-08-09 03:19:22
61.219.11.153 attack
08/08/2020-15:00:31.303611 61.219.11.153 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 63
2020-08-09 03:38:45

Recently Reported IPs

209.138.137.249 36.229.108.85 79.74.223.162 118.227.10.90
196.142.254.244 34.247.37.37 188.102.69.14 123.122.178.96
45.132.93.4 77.150.250.218 35.188.185.154 196.74.169.84
112.120.76.111 187.82.133.26 31.242.167.201 183.154.121.40
145.254.247.27 212.83.183.39 210.250.154.107 88.9.243.255