Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Shanghai

Region: Shanghai

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.205.102.197
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48445
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.205.102.197.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021301 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 12:33:40 CST 2025
;; MSG SIZE  rcvd: 108
Host info
Host 197.102.205.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 197.102.205.139.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.186.175.215 attackbotsspam
Nov 20 17:37:23 minden010 sshd[12827]: Failed password for root from 222.186.175.215 port 6856 ssh2
Nov 20 17:37:33 minden010 sshd[12827]: Failed password for root from 222.186.175.215 port 6856 ssh2
Nov 20 17:37:36 minden010 sshd[12827]: Failed password for root from 222.186.175.215 port 6856 ssh2
Nov 20 17:37:36 minden010 sshd[12827]: error: maximum authentication attempts exceeded for root from 222.186.175.215 port 6856 ssh2 [preauth]
...
2019-11-21 00:43:42
213.154.2.26 attackbots
Unauthorized connection attempt from IP address 213.154.2.26 on Port 445(SMB)
2019-11-21 00:47:10
103.95.12.132 attack
Nov 20 17:18:35 nextcloud sshd\[14778\]: Invalid user boocock from 103.95.12.132
Nov 20 17:18:35 nextcloud sshd\[14778\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.95.12.132
Nov 20 17:18:38 nextcloud sshd\[14778\]: Failed password for invalid user boocock from 103.95.12.132 port 52720 ssh2
...
2019-11-21 00:37:08
113.106.8.55 attackbots
Nov 20 07:02:54 mockhub sshd[11202]: Failed password for root from 113.106.8.55 port 40460 ssh2
Nov 20 07:06:53 mockhub sshd[11320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.106.8.55
...
2019-11-21 01:01:25
129.213.63.120 attackspam
k+ssh-bruteforce
2019-11-21 01:12:02
77.81.230.143 attackbotsspam
Nov 20 17:52:07 MK-Soft-VM7 sshd[21660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.81.230.143 
Nov 20 17:52:08 MK-Soft-VM7 sshd[21660]: Failed password for invalid user admin from 77.81.230.143 port 51008 ssh2
...
2019-11-21 01:02:57
178.236.60.227 attackbots
Unauthorised access (Nov 20) SRC=178.236.60.227 LEN=52 TTL=116 ID=25064 DF TCP DPT=445 WINDOW=8192 SYN 
Unauthorised access (Nov 19) SRC=178.236.60.227 LEN=52 TTL=117 ID=101 DF TCP DPT=445 WINDOW=8192 SYN 
Unauthorised access (Nov 18) SRC=178.236.60.227 LEN=52 TTL=117 ID=15428 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-21 00:54:13
14.253.40.198 attackspam
2019-11-20 15:35:27 H=(static.vnpt.vn) [14.253.40.198]:27881 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=14.253.40.198)
2019-11-20 15:35:28 unexpected disconnection while reading SMTP command from (static.vnpt.vn) [14.253.40.198]:27881 I=[10.100.18.22]:25 (error: Connection reset by peer)
2019-11-20 15:41:21 H=(static.vnpt.vn) [14.253.40.198]:28428 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=14.253.40.198)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.253.40.198
2019-11-21 00:54:30
1.160.5.71 attack
Fail2Ban Ban Triggered
2019-11-21 00:56:18
111.230.13.11 attackspam
Nov 20 17:20:29 vps58358 sshd\[25136\]: Invalid user 123123 from 111.230.13.11Nov 20 17:20:31 vps58358 sshd\[25136\]: Failed password for invalid user 123123 from 111.230.13.11 port 41792 ssh2Nov 20 17:25:31 vps58358 sshd\[25169\]: Invalid user electro from 111.230.13.11Nov 20 17:25:33 vps58358 sshd\[25169\]: Failed password for invalid user electro from 111.230.13.11 port 45550 ssh2Nov 20 17:30:22 vps58358 sshd\[25191\]: Invalid user aaaaaaaa from 111.230.13.11Nov 20 17:30:23 vps58358 sshd\[25191\]: Failed password for invalid user aaaaaaaa from 111.230.13.11 port 49294 ssh2
...
2019-11-21 00:51:53
198.54.127.55 attackspam
Asking for Money
2019-11-21 01:14:09
197.221.254.96 attack
2019-11-20 14:13:49 H=(16.96.telone.co.zw) [197.221.254.96]:6050 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.96)
2019-11-20 14:13:49 unexpected disconnection while reading SMTP command from (16.96.telone.co.zw) [197.221.254.96]:6050 I=[10.100.18.22]:25 (error: Connection reset by peer)
2019-11-20 15:33:34 H=(16.96.telone.co.zw) [197.221.254.96]:6523 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.96)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.221.254.96
2019-11-21 00:42:21
103.119.133.25 attack
Nov 20 17:02:28 cp sshd[11321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.119.133.25
2019-11-21 01:00:55
79.35.193.222 attackspambots
2019-11-20 14:47:44 H=host222-193-dynamic.35-79-r.retail.telecomhostnamealia.hostname [79.35.193.222]:19285 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=79.35.193.222)
2019-11-20 14:47:45 unexpected disconnection while reading SMTP command from host222-193-dynamic.35-79-r.retail.telecomhostnamealia.hostname [79.35.193.222]:19285 I=[10.100.18.23]:25 (error: Connection reset by peer)
2019-11-20 15:41:25 H=host222-193-dynamic.35-79-r.retail.telecomhostnamealia.hostname [79.35.193.222]:27990 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=79.35.193.222)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=79.35.193.222
2019-11-21 00:36:41
180.76.134.238 attack
Nov 20 11:54:19 linuxvps sshd\[36089\]: Invalid user mysql from 180.76.134.238
Nov 20 11:54:19 linuxvps sshd\[36089\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.134.238
Nov 20 11:54:21 linuxvps sshd\[36089\]: Failed password for invalid user mysql from 180.76.134.238 port 57076 ssh2
Nov 20 11:59:13 linuxvps sshd\[38972\]: Invalid user server from 180.76.134.238
Nov 20 11:59:13 linuxvps sshd\[38972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.134.238
2019-11-21 01:08:22

Recently Reported IPs

80.115.79.171 52.72.60.26 109.252.102.30 31.12.213.181
34.185.202.0 49.55.113.247 46.194.99.30 200.17.136.144
140.203.89.181 31.71.77.180 18.248.90.177 161.17.224.130
235.12.90.26 206.49.119.251 132.219.220.66 244.98.180.76
42.56.222.129 239.53.59.87 57.13.90.228 218.60.235.249