139.199.167.14

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: V6Yun (Beijing) Network Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Aug 20 06:07:46 vps647732 sshd[29947]: Failed password for mysql from 139.199.167.14 port 57914 ssh2 Aug 20 06:11:56 vps647732 sshd[30160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.167.14 ...	2019-08-20 12:28:34

Type

Details

Datetime

attack

Aug 20 06:07:46 vps647732 sshd[29947]: Failed password for mysql from 139.199.167.14 port 57914 ssh2
Aug 20 06:11:56 vps647732 sshd[30160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.167.14
...

2019-08-20 12:28:34

Comments on same subnet:

IP	Type	Details	Datetime
139.199.167.135	attack	Brute force SMTP login attempted. ...	2019-08-10 01:43:33

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.167.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58483
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.167.14.			IN	A

;; AUTHORITY SECTION:
.			196	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081902 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Aug 20 12:28:28 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 14.167.199.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 14.167.199.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.123.65.35	attackbotsspam	$f2bV_matches	2020-05-06 13:43:42
125.124.117.106	attack	May 6 05:48:29 server sshd[22897]: Failed password for root from 125.124.117.106 port 55738 ssh2 May 6 05:53:35 server sshd[23218]: Failed password for root from 125.124.117.106 port 36556 ssh2 May 6 05:56:10 server sshd[23488]: Failed password for invalid user alberto from 125.124.117.106 port 41082 ssh2	2020-05-06 13:22:28
107.175.83.200	attackbotsspam	2020-05-06T05:50:09.371934vps751288.ovh.net sshd\[23960\]: Invalid user dashboard from 107.175.83.200 port 43580 2020-05-06T05:50:09.380236vps751288.ovh.net sshd\[23960\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.83.200 2020-05-06T05:50:11.206713vps751288.ovh.net sshd\[23960\]: Failed password for invalid user dashboard from 107.175.83.200 port 43580 ssh2 2020-05-06T05:56:41.760244vps751288.ovh.net sshd\[24004\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.83.200 user=root 2020-05-06T05:56:44.068387vps751288.ovh.net sshd\[24004\]: Failed password for root from 107.175.83.200 port 50348 ssh2	2020-05-06 13:00:14
222.186.180.223	attack	May 6 07:50:36 meumeu sshd[5559]: Failed password for root from 222.186.180.223 port 25044 ssh2 May 6 07:50:52 meumeu sshd[5559]: error: maximum authentication attempts exceeded for root from 222.186.180.223 port 25044 ssh2 [preauth] May 6 07:51:00 meumeu sshd[5612]: Failed password for root from 222.186.180.223 port 46392 ssh2 ...	2020-05-06 13:51:18
192.241.135.34	attackspam	SSH Brute-Force Attack	2020-05-06 13:24:23
209.17.96.114	attackbots	srv02 Mass scanning activity detected Target: 9000 ..	2020-05-06 13:21:50
91.121.49.238	attack	odoo8 ...	2020-05-06 13:40:48
122.54.247.83	attackbots	May 6 06:56:36 pve1 sshd[3642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.54.247.83 May 6 06:56:38 pve1 sshd[3642]: Failed password for invalid user nico from 122.54.247.83 port 56806 ssh2 ...	2020-05-06 13:52:47
218.232.135.95	attack	May 6 01:41:12 ny01 sshd[17710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.232.135.95 May 6 01:41:15 ny01 sshd[17710]: Failed password for invalid user delta from 218.232.135.95 port 32822 ssh2 May 6 01:43:03 ny01 sshd[17952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.232.135.95	2020-05-06 13:55:01
209.97.160.105	attackspam	SSH Brute-Force Attack	2020-05-06 13:02:27
103.233.118.226	attack	May 6 06:48:22 web01.agentur-b-2.de postfix/smtpd[99172]: NOQUEUE: reject: RCPT from unknown[103.233.118.226]: 554 5.7.1 Service unavailable; Client host [103.233.118.226] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/103.233.118.226; from= to= proto=ESMTP helo= May 6 06:48:22 web01.agentur-b-2.de postfix/smtpd[99172]: NOQUEUE: reject: RCPT from unknown[103.233.118.226]: 554 5.7.1 Service unavailable; Client host [103.233.118.226] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/103.233.118.226; from= to= proto=ESMTP helo= May 6 06:48:31 web01.agentur-b-2.de postfix/smtpd[99172]: NOQUEUE: reject: RCPT from unknown[103.233.118.226]: 554 5.7.1 Service unavailable; Client host [103.233.118.226] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / htt	2020-05-06 13:12:08
37.61.238.8	attack	xmlrpc attack	2020-05-06 13:00:37
182.161.70.238	attackspam	SSH login attempts.	2020-05-06 13:56:14
113.167.64.43	attackbots	Unauthorised access (May 6) SRC=113.167.64.43 LEN=52 TTL=108 ID=2577 DF TCP DPT=445 WINDOW=8192 SYN	2020-05-06 13:16:50
14.177.133.159	attack	" "	2020-05-06 13:22:57

Recently Reported IPs

241.117.61.245	160.60.189.189	89.83.20.3	48.147.148.16
85.8.53.246	12.4.37.197	169.1.25.138	86.187.142.84
213.124.13.186	126.184.122.209	102.234.158.160	220.143.27.136
93.118.242.137	172.217.10.229	119.155.78.39	18.196.127.19
162.241.38.136	178.33.50.135	167.249.54.209	90.214.47.13