Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Beijing

Region: Beijing

Country: China

Internet Service Provider: V6Yun (Beijing) Network Co. Ltd

Hostname: unknown

Organization: Shenzhen Tencent Computer Systems Company Limited

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
Aug 18 07:15:45 eventyay sshd[23722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.8
Aug 18 07:15:47 eventyay sshd[23722]: Failed password for invalid user tecnici from 139.199.14.8 port 44112 ssh2
Aug 18 07:19:01 eventyay sshd[23976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.8
...
2019-08-18 20:18:37
attack
Jul  6 16:03:16 localhost sshd[26243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.8
Jul  6 16:03:18 localhost sshd[26243]: Failed password for invalid user nextcloud from 139.199.14.8 port 40738 ssh2
Jul  6 16:18:45 localhost sshd[26496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.8
Jul  6 16:18:47 localhost sshd[26496]: Failed password for invalid user ram from 139.199.14.8 port 35138 ssh2
...
2019-07-07 04:26:17
Comments on same subnet:
IP Type Details Datetime
139.199.14.128 attack
Oct 10 14:59:17 con01 sshd[2993577]: Failed password for invalid user frank from 139.199.14.128 port 40462 ssh2
Oct 10 15:03:19 con01 sshd[3000067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct 10 15:03:21 con01 sshd[3000067]: Failed password for root from 139.199.14.128 port 58116 ssh2
Oct 10 15:07:29 con01 sshd[3005598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct 10 15:07:32 con01 sshd[3005598]: Failed password for root from 139.199.14.128 port 47538 ssh2
...
2020-10-11 03:39:28
139.199.14.128 attack
Oct 10 13:23:30 con01 sshd[2837241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct 10 13:23:33 con01 sshd[2837241]: Failed password for root from 139.199.14.128 port 57812 ssh2
Oct 10 13:27:38 con01 sshd[2843894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct 10 13:27:40 con01 sshd[2843894]: Failed password for root from 139.199.14.128 port 47240 ssh2
Oct 10 13:31:50 con01 sshd[2850480]: Invalid user louise from 139.199.14.128 port 36664
...
2020-10-10 19:32:09
139.199.14.128 attackspambots
Oct  4 08:46:04 pixelmemory sshd[114755]: Failed password for root from 139.199.14.128 port 55956 ssh2
Oct  4 08:49:35 pixelmemory sshd[135052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct  4 08:49:37 pixelmemory sshd[135052]: Failed password for root from 139.199.14.128 port 36716 ssh2
Oct  4 08:53:15 pixelmemory sshd[139265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct  4 08:53:17 pixelmemory sshd[139265]: Failed password for root from 139.199.14.128 port 45722 ssh2
...
2020-10-05 06:46:13
139.199.14.128 attackspambots
2020-10-04T03:11:55.088931Z 7474e83e79ed New connection: 139.199.14.128:39700 (172.17.0.5:2222) [session: 7474e83e79ed]
2020-10-04T03:19:53.709557Z 630dc3796768 New connection: 139.199.14.128:56288 (172.17.0.5:2222) [session: 630dc3796768]
2020-10-04 22:48:44
139.199.14.128 attackbots
2020-10-04T03:11:55.088931Z 7474e83e79ed New connection: 139.199.14.128:39700 (172.17.0.5:2222) [session: 7474e83e79ed]
2020-10-04T03:19:53.709557Z 630dc3796768 New connection: 139.199.14.128:56288 (172.17.0.5:2222) [session: 630dc3796768]
2020-10-04 14:36:18
139.199.14.128 attackspambots
Automatic Fail2ban report - Trying login SSH
2020-09-30 03:33:43
139.199.14.128 attack
Automatic Fail2ban report - Trying login SSH
2020-09-29 19:39:16
139.199.14.128 attackspam
Sep 10 14:09:55 ns41 sshd[23049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
2020-09-10 23:35:28
139.199.14.128 attack
Sep 10 03:31:39 firewall sshd[19772]: Failed password for root from 139.199.14.128 port 51398 ssh2
Sep 10 03:32:59 firewall sshd[19797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Sep 10 03:33:01 firewall sshd[19797]: Failed password for root from 139.199.14.128 port 37322 ssh2
...
2020-09-10 15:03:26
139.199.14.128 attackspambots
Sep  9 20:55:47 MainVPS sshd[30261]: Invalid user vnc from 139.199.14.128 port 56124
Sep  9 20:55:47 MainVPS sshd[30261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
Sep  9 20:55:47 MainVPS sshd[30261]: Invalid user vnc from 139.199.14.128 port 56124
Sep  9 20:55:49 MainVPS sshd[30261]: Failed password for invalid user vnc from 139.199.14.128 port 56124 ssh2
Sep  9 20:58:11 MainVPS sshd[14177]: Invalid user ghost from 139.199.14.128 port 56134
...
2020-09-10 05:41:28
139.199.14.128 attackspambots
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-09 22:40:39
139.199.14.128 attackspambots
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-09 16:24:44
139.199.14.128 attackspam
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-09 08:33:48
139.199.14.128 attack
Aug 31 22:06:14 instance-2 sshd[11472]: Failed password for root from 139.199.14.128 port 35256 ssh2
Aug 31 22:09:03 instance-2 sshd[11474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128 
Aug 31 22:09:05 instance-2 sshd[11474]: Failed password for invalid user zihang from 139.199.14.128 port 41212 ssh2
2020-09-01 06:36:13
139.199.14.128 attack
Aug 22 23:38:37 mout sshd[25036]: Invalid user aline from 139.199.14.128 port 38290
2020-08-23 05:39:13
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.14.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60677
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.14.8.			IN	A

;; AUTHORITY SECTION:
.			2767	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019051000 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat May 11 00:55:40 +08 2019
;; MSG SIZE  rcvd: 116

Host info
Host 8.14.199.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 8.14.199.139.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
158.69.222.2 attack
Apr 21 07:12:00 meumeu sshd[11795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.222.2 
Apr 21 07:12:02 meumeu sshd[11795]: Failed password for invalid user joora from 158.69.222.2 port 43682 ssh2
Apr 21 07:15:14 meumeu sshd[12129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.222.2 
...
2019-11-30 18:54:39
203.129.226.99 attackbotsspam
Nov 30 06:06:11 ldap01vmsma01 sshd[56580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.129.226.99
Nov 30 06:06:13 ldap01vmsma01 sshd[56580]: Failed password for invalid user duryonna from 203.129.226.99 port 61970 ssh2
...
2019-11-30 18:45:49
167.114.251.164 attackspam
2019-11-30T08:01:14.672398abusebot-5.cloudsearch.cf sshd\[6396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.ip-167-114-251.eu  user=root
2019-11-30 18:25:40
95.90.163.17 attack
Nov 30 09:48:21 MK-Soft-VM8 sshd[17464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.90.163.17 
Nov 30 09:48:22 MK-Soft-VM8 sshd[17464]: Failed password for invalid user dietpi from 95.90.163.17 port 49806 ssh2
...
2019-11-30 18:48:47
195.154.179.110 attackspambots
11/30/2019-07:24:25.850065 195.154.179.110 Protocol: 17 ET VOIP Modified Sipvicious Asterisk PBX User-Agent
2019-11-30 18:44:59
72.177.199.212 attackbotsspam
*Port Scan* detected from 72.177.199.212 (US/United States/072-177-199-212.res.spectrum.com). 4 hits in the last 120 seconds
2019-11-30 18:21:39
149.56.96.78 attack
Apr 21 09:17:37 meumeu sshd[25476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.96.78 
Apr 21 09:17:39 meumeu sshd[25476]: Failed password for invalid user user from 149.56.96.78 port 5874 ssh2
Apr 21 09:21:02 meumeu sshd[25786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.96.78 
...
2019-11-30 18:20:15
196.220.185.135 attackspambots
CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2019-11-30 18:41:03
82.64.185.26 attack
Invalid user pi from 82.64.185.26 port 59668
2019-11-30 18:33:13
64.31.35.218 attack
\[2019-11-30 03:34:34\] NOTICE\[2754\] chan_sip.c: Registration from '"700" \' failed for '64.31.35.218:5158' - Wrong password
\[2019-11-30 03:34:34\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-30T03:34:34.361-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="700",SessionID="0x7f26c47b21a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.31.35.218/5158",Challenge="62ec4db3",ReceivedChallenge="62ec4db3",ReceivedHash="5599ffce9e29426afaf9cb8f2be92989"
\[2019-11-30 03:34:34\] NOTICE\[2754\] chan_sip.c: Registration from '"700" \' failed for '64.31.35.218:5158' - Wrong password
\[2019-11-30 03:34:34\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-30T03:34:34.471-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="700",SessionID="0x7f26c4276ea8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.31.3
2019-11-30 18:21:56
49.234.67.23 attackspambots
Nov 30 13:38:56 microserver sshd[36854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.67.23  user=root
Nov 30 13:38:58 microserver sshd[36854]: Failed password for root from 49.234.67.23 port 46874 ssh2
Nov 30 13:47:32 microserver sshd[38098]: Invalid user guest from 49.234.67.23 port 47146
Nov 30 13:47:32 microserver sshd[38098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.67.23
Nov 30 13:47:34 microserver sshd[38098]: Failed password for invalid user guest from 49.234.67.23 port 47146 ssh2
Nov 30 14:00:24 microserver sshd[39998]: Invalid user test123 from 49.234.67.23 port 58682
Nov 30 14:00:24 microserver sshd[39998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.67.23
Nov 30 14:00:26 microserver sshd[39998]: Failed password for invalid user test123 from 49.234.67.23 port 58682 ssh2
Nov 30 14:03:51 microserver sshd[40198]: Invalid user omega from 49.234.67.23
2019-11-30 18:31:06
106.13.15.153 attackspambots
Aug 21 18:37:33 meumeu sshd[8035]: Failed password for invalid user putty from 106.13.15.153 port 49590 ssh2
Aug 21 18:39:55 meumeu sshd[8288]: Failed password for invalid user karen from 106.13.15.153 port 36630 ssh2
Aug 21 18:42:15 meumeu sshd[8527]: Failed password for invalid user lbchao from 106.13.15.153 port 51906 ssh2
...
2019-11-30 18:53:03
185.40.41.28 attackbotsspam
[portscan] Port scan
2019-11-30 18:50:35
116.228.4.10 attackbotsspam
3389BruteforceFW23
2019-11-30 18:48:03
209.17.97.34 attackspambots
209.17.97.34 was recorded 5 times by 5 hosts attempting to connect to the following ports: 993,5061,1025,62078,67. Incident counter (4h, 24h, all-time): 5, 56, 993
2019-11-30 18:19:52

Recently Reported IPs

184.194.118.62 179.107.57.170 94.164.122.118 183.89.3.27
165.22.70.111 178.124.145.75 112.140.160.254 83.20.68.120
58.205.149.199 212.88.119.186 36.99.79.81 184.20.181.40
213.211.79.177 83.106.16.169 37.201.217.50 144.247.17.93
185.126.218.243 72.225.246.177 181.9.130.101 46.109.11.45