Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: international Center for Information Systems and Audit (ICISA)Noida

Hostname: unknown

Organization: unknown

Usage Type: Government

Comments:
Type Details Datetime
attack
RDP Brute-Force (honeypot 5)
2020-05-20 02:35:42
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.139.54.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10827
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.139.54.242.			IN	A

;; AUTHORITY SECTION:
.			202	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051901 1800 900 604800 86400

;; Query time: 94 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 20 02:35:39 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 242.54.139.14.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 242.54.139.14.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
109.252.255.162 attack
postfix
2020-01-14 22:18:35
110.53.234.187 attackbotsspam
ICMP MH Probe, Scan /Distributed -
2020-01-14 22:08:05
117.247.200.233 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-01-14 22:15:21
113.24.87.202 attackspam
port scan and connect, tcp 8443 (https-alt)
2020-01-14 22:06:42
177.66.118.20 attackspam
postfix
2020-01-14 21:36:09
182.245.138.38 attack
port scan and connect, tcp 8888 (sun-answerbook)
2020-01-14 22:17:02
69.94.158.79 attackbotsspam
Jan 14 14:04:39 grey postfix/smtpd\[21068\]: NOQUEUE: reject: RCPT from few.swingthelamp.com\[69.94.158.79\]: 554 5.7.1 Service unavailable\; Client host \[69.94.158.79\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[69.94.158.79\]\; from=\ to=\ proto=ESMTP helo=\
...
2020-01-14 21:51:23
165.22.69.88 attack
Unauthorized connection attempt detected from IP address 165.22.69.88 to port 443 [J]
2020-01-14 22:09:06
138.68.20.158 attackbotsspam
Jan 14 14:04:15 hosting180 sshd[19146]: Invalid user vision from 138.68.20.158 port 51668
...
2020-01-14 22:12:01
112.85.42.174 attack
20/1/14@08:49:38: FAIL: IoT-SSH address from=112.85.42.174
...
2020-01-14 21:53:34
118.122.253.20 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-01-14 21:41:34
222.186.3.249 attack
Jan 14 13:59:03 icinga sshd[36805]: Failed password for root from 222.186.3.249 port 45453 ssh2
Jan 14 14:04:50 icinga sshd[42038]: Failed password for root from 222.186.3.249 port 38707 ssh2
Jan 14 14:04:53 icinga sshd[42038]: Failed password for root from 222.186.3.249 port 38707 ssh2
...
2020-01-14 21:36:35
177.25.150.104 attackspam
1579007090 - 01/14/2020 14:04:50 Host: 177.25.150.104/177.25.150.104 Port: 22 TCP Blocked
2020-01-14 21:41:06
152.67.67.89 attack
ssh brute force
2020-01-14 21:46:38
124.123.104.77 attackbotsspam
Jan 14 15:45:39 vtv3 sshd[23576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.123.104.77 
Jan 14 15:45:40 vtv3 sshd[23576]: Failed password for invalid user demo from 124.123.104.77 port 7629 ssh2
Jan 14 15:48:02 vtv3 sshd[24470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.123.104.77 
Jan 14 15:59:27 vtv3 sshd[30007]: Failed password for root from 124.123.104.77 port 7770 ssh2
Jan 14 16:04:40 vtv3 sshd[32535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.123.104.77 
Jan 14 16:04:42 vtv3 sshd[32535]: Failed password for invalid user raf from 124.123.104.77 port 8774 ssh2
Jan 14 16:16:40 vtv3 sshd[5823]: Failed password for root from 124.123.104.77 port 8824 ssh2
Jan 14 16:21:52 vtv3 sshd[8166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.123.104.77 
Jan 14 16:21:55 vtv3 sshd[8166]: Failed password for invalid user shock f
2020-01-14 21:47:07

Recently Reported IPs

34.223.253.192 188.165.204.87 54.36.61.97 200.125.239.22
85.16.171.131 197.156.72.66 210.75.7.85 83.220.239.21
45.65.229.159 197.248.97.125 141.138.169.210 14.242.200.251
49.235.56.155 36.90.62.141 85.29.140.54 36.52.137.88
186.114.153.106 135.208.249.177 217.121.143.176 63.83.75.32