Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: CNC Group HuNan JiShou network

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbotsspam
2019-12-03T22:25:12.900125shield sshd\[26921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.239.14  user=root
2019-12-03T22:25:14.653548shield sshd\[26921\]: Failed password for root from 58.20.239.14 port 36338 ssh2
2019-12-03T22:32:13.639624shield sshd\[29234\]: Invalid user tokumitsu from 58.20.239.14 port 38122
2019-12-03T22:32:13.644284shield sshd\[29234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.239.14
2019-12-03T22:32:14.860608shield sshd\[29234\]: Failed password for invalid user tokumitsu from 58.20.239.14 port 38122 ssh2
2019-12-04 06:36:34
attackbotsspam
Nov 24 07:54:29 mail sshd[1175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.239.14 
Nov 24 07:54:30 mail sshd[1175]: Failed password for invalid user admin from 58.20.239.14 port 56122 ssh2
Nov 24 07:57:04 mail sshd[1724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.239.14
2019-11-24 15:16:43
attackbots
Nov 21 20:21:06 areeb-Workstation sshd[5553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.239.14
Nov 21 20:21:09 areeb-Workstation sshd[5553]: Failed password for invalid user glowmusic from 58.20.239.14 port 39492 ssh2
...
2019-11-22 02:50:43
attackspambots
Nov 20 15:14:33 TORMINT sshd\[14657\]: Invalid user pi from 58.20.239.14
Nov 20 15:14:33 TORMINT sshd\[14657\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.239.14
Nov 20 15:14:36 TORMINT sshd\[14657\]: Failed password for invalid user pi from 58.20.239.14 port 44772 ssh2
...
2019-11-21 04:28:41
attack
Nov  6 22:41:10 venus sshd\[11921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.239.14  user=root
Nov  6 22:41:12 venus sshd\[11921\]: Failed password for root from 58.20.239.14 port 49384 ssh2
Nov  6 22:45:17 venus sshd\[11981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.239.14  user=root
...
2019-11-07 07:08:57
attackbotsspam
detected by Fail2Ban
2019-11-02 22:12:49
attackbotsspam
Lines containing failures of 58.20.239.14
Oct 21 16:42:03 shared09 sshd[2622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.239.14  user=r.r
Oct 21 16:42:05 shared09 sshd[2622]: Failed password for r.r from 58.20.239.14 port 45792 ssh2
Oct 21 16:42:05 shared09 sshd[2622]: Received disconnect from 58.20.239.14 port 45792:11: Bye Bye [preauth]
Oct 21 16:42:05 shared09 sshd[2622]: Disconnected from authenticating user r.r 58.20.239.14 port 45792 [preauth]
Oct 21 16:57:00 shared09 sshd[7347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.239.14  user=r.r
Oct 21 16:57:02 shared09 sshd[7347]: Failed password for r.r from 58.20.239.14 port 50286 ssh2
Oct 21 16:57:02 shared09 sshd[7347]: Received disconnect from 58.20.239.14 port 50286:11: Bye Bye [preauth]
Oct 21 16:57:02 shared09 sshd[7347]: Disconnected from authenticating user r.r 58.20.239.14 port 50286 [preauth]
Oct 21 17:01:19........
------------------------------
2019-10-26 05:17:41
attackspam
ssh brute force
2019-10-24 18:09:16
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.20.239.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12132
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;58.20.239.14.			IN	A

;; AUTHORITY SECTION:
.			390	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102400 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 24 18:09:13 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 14.239.20.58.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 14.239.20.58.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
110.53.234.226 attack
ICMP MH Probe, Scan /Distributed -
2020-01-14 21:45:50
222.186.169.194 attackbots
2020-01-14T14:14:43.101719vps751288.ovh.net sshd\[2791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194  user=root
2020-01-14T14:14:44.921227vps751288.ovh.net sshd\[2791\]: Failed password for root from 222.186.169.194 port 40152 ssh2
2020-01-14T14:14:48.396294vps751288.ovh.net sshd\[2791\]: Failed password for root from 222.186.169.194 port 40152 ssh2
2020-01-14T14:14:50.948951vps751288.ovh.net sshd\[2791\]: Failed password for root from 222.186.169.194 port 40152 ssh2
2020-01-14T14:14:54.248306vps751288.ovh.net sshd\[2791\]: Failed password for root from 222.186.169.194 port 40152 ssh2
2020-01-14 21:33:37
110.53.234.235 attackspambots
ICMP MH Probe, Scan /Distributed -
2020-01-14 21:32:30
138.197.143.221 attack
ssh brute force
2020-01-14 21:31:40
110.53.234.220 attack
ICMP MH Probe, Scan /Distributed -
2020-01-14 21:50:47
112.85.42.188 attackbotsspam
01/14/2020-09:10:02.201691 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan
2020-01-14 22:11:15
151.20.85.226 attackspambots
Unauthorized connection attempt detected from IP address 151.20.85.226 to port 85
2020-01-14 21:59:36
112.85.42.178 attackbots
Jan 14 14:29:06 MK-Soft-VM4 sshd[14600]: Failed password for root from 112.85.42.178 port 12429 ssh2
Jan 14 14:29:13 MK-Soft-VM4 sshd[14600]: Failed password for root from 112.85.42.178 port 12429 ssh2
...
2020-01-14 21:46:20
222.186.173.226 attack
Jan 14 14:21:51 icinga sshd[23679]: Failed password for root from 222.186.173.226 port 65182 ssh2
Jan 14 14:22:04 icinga sshd[23679]: error: maximum authentication attempts exceeded for root from 222.186.173.226 port 65182 ssh2 [preauth]
...
2020-01-14 21:34:29
64.52.87.2 attackbotsspam
Unauthorized connection attempt detected from IP address 64.52.87.2 to port 2220 [J]
2020-01-14 21:30:12
14.47.110.94 attack
Triggered by Fail2Ban at Vostok web server
2020-01-14 22:01:09
177.25.150.104 attackspam
1579007090 - 01/14/2020 14:04:50 Host: 177.25.150.104/177.25.150.104 Port: 22 TCP Blocked
2020-01-14 21:41:06
117.50.93.75 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-01-14 21:50:18
200.106.100.55 attackbotsspam
Jan 14 14:04:03 mail postfix/smtpd\[21742\]: warning: unknown\[200.106.100.55\]: SASL PLAIN authentication failed: Connection lost to authentication server
Jan 14 14:04:15 mail postfix/smtpd\[24529\]: warning: unknown\[200.106.100.55\]: SASL PLAIN authentication failed: Connection lost to authentication server
Jan 14 14:04:32 mail postfix/smtpd\[23752\]: warning: unknown\[200.106.100.55\]: SASL PLAIN authentication failed: Connection lost to authentication server
2020-01-14 21:55:31
104.218.48.106 attackbotsspam
this ip attack my router.
2020-01-14 21:51:47

Recently Reported IPs

69.182.100.103 101.171.38.44 154.9.199.159 67.106.54.220
60.44.91.178 224.64.47.46 45.107.235.178 129.146.32.163
98.210.4.74 128.225.114.254 10.255.202.5 237.43.21.107
193.110.134.55 81.5.204.53 156.126.248.147 194.36.84.58
35.122.209.226 160.100.65.155 27.40.43.185 23.36.16.4