139.213.14.34 - IPInfo

Basic Info

City: unknown

Region: Jilin

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: CHINA UNICOM China169 Backbone

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.213.148.249	attack	Unauthorised access (Aug 3) SRC=139.213.148.249 LEN=44 TTL=49 ID=1926 TCP DPT=8080 WINDOW=9327 SYN	2019-08-04 06:22:43

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.213.14.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60076
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.213.14.34.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061300 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jun 13 19:33:06 CST 2019
;; MSG SIZE  rcvd: 117

Host info

34.14.213.139.in-addr.arpa domain name pointer 34.14.213.139.adsl-pool.jlccptt.net.cn.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
34.14.213.139.in-addr.arpa	name = 34.14.213.139.adsl-pool.jlccptt.net.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
212.83.183.57	attack	"fail2ban match"	2020-06-09 17:50:51
167.114.192.224	attackbots	SSH brute-force: detected 1 distinct username(s) / 37 distinct password(s) within a 24-hour window.	2020-06-09 17:47:41
123.25.121.215	attackbotsspam	20/6/8@23:50:01: FAIL: Alarm-Network address from=123.25.121.215 20/6/8@23:50:02: FAIL: Alarm-Network address from=123.25.121.215 ...	2020-06-09 18:05:13
62.171.144.195	attackbotsspam	[2020-06-09 05:35:01] NOTICE[1288] chan_sip.c: Registration from '' failed for '62.171.144.195:42629' - Wrong password [2020-06-09 05:35:01] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-09T05:35:01.760-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2192",SessionID="0x7f4d74373c98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.171.144.195/42629",Challenge="11d44bb1",ReceivedChallenge="11d44bb1",ReceivedHash="ad71b2143bc36ad3cbfa65093551e4b3" [2020-06-09 05:36:26] NOTICE[1288] chan_sip.c: Registration from '' failed for '62.171.144.195:52481' - Wrong password [2020-06-09 05:36:26] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-09T05:36:26.694-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2193",SessionID="0x7f4d74411058",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.171.144 ...	2020-06-09 18:00:43
167.71.224.129	attackbots	2020-06-09T10:30:22.872041rocketchat.forhosting.nl sshd[5512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.224.129 2020-06-09T10:30:22.869756rocketchat.forhosting.nl sshd[5512]: Invalid user tsbot from 167.71.224.129 port 46996 2020-06-09T10:30:24.481636rocketchat.forhosting.nl sshd[5512]: Failed password for invalid user tsbot from 167.71.224.129 port 46996 ssh2 ...	2020-06-09 17:40:06
106.54.65.228	attackbots	$f2bV_matches	2020-06-09 17:52:10
202.51.98.226	attackbotsspam	Triggered by Fail2Ban at Ares web server	2020-06-09 17:48:58
203.171.25.198	attackbotsspam	20/6/8@23:50:20: FAIL: Alarm-Network address from=203.171.25.198 ...	2020-06-09 17:44:20
128.199.163.233	attackbots	Jun 9 10:18:14 debian kernel: [589651.272738] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=128.199.163.233 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=23657 PROTO=TCP SPT=47438 DPT=28355 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-09 17:58:34
134.175.119.208	attackbots	Jun 9 11:22:59 vps sshd[533737]: Failed password for root from 134.175.119.208 port 37042 ssh2 Jun 9 11:24:49 vps sshd[540263]: Invalid user musli from 134.175.119.208 port 34254 Jun 9 11:24:49 vps sshd[540263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.119.208 Jun 9 11:24:51 vps sshd[540263]: Failed password for invalid user musli from 134.175.119.208 port 34254 ssh2 Jun 9 11:26:39 vps sshd[550647]: Invalid user dr from 134.175.119.208 port 59696 ...	2020-06-09 17:35:04
106.12.171.65	attackbots	Jun 9 09:13:00 ns3164893 sshd[22019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.171.65 Jun 9 09:13:02 ns3164893 sshd[22019]: Failed password for invalid user tester from 106.12.171.65 port 39246 ssh2 ...	2020-06-09 17:37:08
190.115.80.11	attackspam	Jun 9 07:32:44 xeon sshd[42041]: Failed password for root from 190.115.80.11 port 53428 ssh2	2020-06-09 18:10:17
94.102.51.95	attackbotsspam	06/09/2020-05:27:34.685241 94.102.51.95 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-06-09 17:35:31
85.230.193.193	attack	Jun 9 09:31:35 Ubuntu-1404-trusty-64-minimal sshd\[28754\]: Invalid user admin from 85.230.193.193 Jun 9 09:31:35 Ubuntu-1404-trusty-64-minimal sshd\[28754\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.230.193.193 Jun 9 09:31:36 Ubuntu-1404-trusty-64-minimal sshd\[28754\]: Failed password for invalid user admin from 85.230.193.193 port 48794 ssh2 Jun 9 09:39:54 Ubuntu-1404-trusty-64-minimal sshd\[2858\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.230.193.193 user=root Jun 9 09:39:56 Ubuntu-1404-trusty-64-minimal sshd\[2858\]: Failed password for root from 85.230.193.193 port 40244 ssh2	2020-06-09 17:57:01
102.128.169.9	attackbotsspam	DATE:2020-06-09 05:50:25, IP:102.128.169.9, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-06-09 17:38:56

Recently Reported IPs

222.252.63.172	133.31.117.47	212.118.253.118	141.57.241.109
94.6.158.5	93.84.84.54	2.76.21.166	95.80.234.232
23.129.64.193	216.104.39.91	46.196.35.45	12.169.132.191
17.187.174.206	217.7.26.193	89.210.121.4	158.172.93.126
27.255.57.244	213.164.39.170	234.248.63.137	98.199.89.139