139.198.121.89

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: V6Yun (Beijing) Network Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Invalid user webmaster from 139.198.121.89 port 59958	2019-08-17 08:02:56

Comments on same subnet:

IP	Type	Details	Datetime
139.198.121.63	attackspambots	Oct 8 22:27:10 ip-172-31-61-156 sshd[13374]: Failed password for root from 139.198.121.63 port 47259 ssh2 Oct 8 22:27:08 ip-172-31-61-156 sshd[13374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.121.63 user=root Oct 8 22:27:10 ip-172-31-61-156 sshd[13374]: Failed password for root from 139.198.121.63 port 47259 ssh2 Oct 8 22:30:57 ip-172-31-61-156 sshd[13564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.121.63 user=root Oct 8 22:30:59 ip-172-31-61-156 sshd[13564]: Failed password for root from 139.198.121.63 port 50485 ssh2 ...	2020-10-09 06:41:58
139.198.121.63	attackbotsspam	Oct 8 10:40:08 vserver sshd\[28831\]: Failed password for root from 139.198.121.63 port 40971 ssh2Oct 8 10:42:09 vserver sshd\[28858\]: Failed password for root from 139.198.121.63 port 57813 ssh2Oct 8 10:44:12 vserver sshd\[28873\]: Failed password for root from 139.198.121.63 port 46495 ssh2Oct 8 10:46:12 vserver sshd\[28902\]: Failed password for root from 139.198.121.63 port 35046 ssh2 ...	2020-10-08 23:04:08
139.198.121.63	attack	$f2bV_matches	2020-10-08 14:59:31
139.198.121.63	attackbots	Sep 29 00:38:15 * sshd[28450]: Failed password for root from 139.198.121.63 port 52780 ssh2	2020-09-29 07:07:26
139.198.121.63	attackbotsspam	Sep 28 17:05:52 inter-technics sshd[25974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.121.63 user=root Sep 28 17:05:54 inter-technics sshd[25974]: Failed password for root from 139.198.121.63 port 55654 ssh2 Sep 28 17:09:52 inter-technics sshd[26424]: Invalid user sysadmin from 139.198.121.63 port 60126 Sep 28 17:09:52 inter-technics sshd[26424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.121.63 Sep 28 17:09:52 inter-technics sshd[26424]: Invalid user sysadmin from 139.198.121.63 port 60126 Sep 28 17:09:54 inter-technics sshd[26424]: Failed password for invalid user sysadmin from 139.198.121.63 port 60126 ssh2 ...	2020-09-28 23:38:06
139.198.121.63	attackbots	Sep 28 09:21:29 OPSO sshd\[17263\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.121.63 user=root Sep 28 09:21:32 OPSO sshd\[17263\]: Failed password for root from 139.198.121.63 port 51659 ssh2 Sep 28 09:25:08 OPSO sshd\[17975\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.121.63 user=root Sep 28 09:25:11 OPSO sshd\[17975\]: Failed password for root from 139.198.121.63 port 53844 ssh2 Sep 28 09:28:45 OPSO sshd\[18636\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.121.63 user=root	2020-09-28 15:40:38
139.198.121.63	attackspam	Automatic Fail2ban report - Trying login SSH	2020-09-19 20:59:59
139.198.121.63	attackbots	Sep 19 03:46:27 ip-172-31-42-142 sshd\[12084\]: Invalid user testftp from 139.198.121.63\ Sep 19 03:46:30 ip-172-31-42-142 sshd\[12084\]: Failed password for invalid user testftp from 139.198.121.63 port 36929 ssh2\ Sep 19 03:50:41 ip-172-31-42-142 sshd\[12135\]: Invalid user postgres from 139.198.121.63\ Sep 19 03:50:43 ip-172-31-42-142 sshd\[12135\]: Failed password for invalid user postgres from 139.198.121.63 port 42828 ssh2\ Sep 19 03:55:03 ip-172-31-42-142 sshd\[12175\]: Failed password for root from 139.198.121.63 port 48515 ssh2\	2020-09-19 12:54:55
139.198.121.63	attackspambots	Sep 18 19:04:39 rocket sshd[31765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.121.63 Sep 18 19:04:40 rocket sshd[31765]: Failed password for invalid user bk from 139.198.121.63 port 39243 ssh2 ...	2020-09-19 04:33:59
139.198.121.63	attackbots	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-09-09 23:17:52
139.198.121.63	attack	Sep 9 08:24:14 root sshd[486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.121.63 ...	2020-09-09 16:56:41
139.198.121.63	attackspambots	2020-08-10T21:30:46.447365shield sshd\[21209\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.121.63 user=root 2020-08-10T21:30:48.526114shield sshd\[21209\]: Failed password for root from 139.198.121.63 port 44537 ssh2 2020-08-10T21:33:09.430499shield sshd\[21970\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.121.63 user=root 2020-08-10T21:33:11.467207shield sshd\[21970\]: Failed password for root from 139.198.121.63 port 35195 ssh2 2020-08-10T21:35:28.735875shield sshd\[22488\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.121.63 user=root	2020-08-11 05:58:48
139.198.121.63	attackspam	Aug 5 06:08:58 vps647732 sshd[7100]: Failed password for root from 139.198.121.63 port 41443 ssh2 ...	2020-08-05 12:19:49
139.198.121.63	attack	Aug 2 08:33:11 minden010 sshd[760]: Failed password for root from 139.198.121.63 port 47746 ssh2 Aug 2 08:37:25 minden010 sshd[2565]: Failed password for root from 139.198.121.63 port 54426 ssh2 ...	2020-08-02 15:45:03
139.198.121.63	attackbots	malicious Brute-Force reported by https://www.patrick-binder.de ...	2020-07-27 00:40:34

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.198.121.89
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51418
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.198.121.89.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081601 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 17 08:02:52 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 89.121.198.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 89.121.198.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.53.20.179	attackbots	Sep 16 07:00:47 pornomens sshd\[32222\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.20.179 user=root Sep 16 07:00:50 pornomens sshd\[32222\]: Failed password for root from 106.53.20.179 port 39102 ssh2 Sep 16 07:04:50 pornomens sshd\[32265\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.20.179 user=root ...	2020-09-16 14:40:01
185.100.87.206	attackbots	Sep 16 04:00:36 santamaria sshd\[22224\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.100.87.206 user=root Sep 16 04:00:38 santamaria sshd\[22224\]: Failed password for root from 185.100.87.206 port 42879 ssh2 Sep 16 04:00:40 santamaria sshd\[22224\]: Failed password for root from 185.100.87.206 port 42879 ssh2 ...	2020-09-16 14:19:08
165.227.203.162	attack	$f2bV_matches	2020-09-16 14:25:02
201.141.39.150	attackbots	Unauthorized connection attempt from IP address 201.141.39.150 on Port 445(SMB)	2020-09-16 14:23:08
1.171.97.246	attackbots	Sep 16 02:01:49 ssh2 sshd[67552]: Connection from 1.171.97.246 port 50266 on 192.240.101.3 port 22 Sep 16 02:01:50 ssh2 sshd[67552]: User root from 1-171-97-246.dynamic-ip.hinet.net not allowed because not listed in AllowUsers Sep 16 02:01:50 ssh2 sshd[67552]: Failed password for invalid user root from 1.171.97.246 port 50266 ssh2 ...	2020-09-16 14:28:20
112.85.42.89	attackbotsspam	Sep 16 05:43:30 ncomp sshd[14912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root Sep 16 05:43:31 ncomp sshd[14912]: Failed password for root from 112.85.42.89 port 46934 ssh2 Sep 16 05:44:27 ncomp sshd[14924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root Sep 16 05:44:29 ncomp sshd[14924]: Failed password for root from 112.85.42.89 port 59739 ssh2	2020-09-16 14:20:22
168.181.49.39	attack	detected by Fail2Ban	2020-09-16 14:39:18
196.28.226.146	attackspambots	RDP Bruteforce	2020-09-16 14:49:06
157.245.64.140	attackspam	s2.hscode.pl - SSH Attack	2020-09-16 15:22:58
156.54.164.97	attackspambots	Sep 16 08:12:00 nuernberg-4g-01 sshd[16726]: Failed password for root from 156.54.164.97 port 50031 ssh2 Sep 16 08:15:48 nuernberg-4g-01 sshd[17951]: Failed password for root from 156.54.164.97 port 55448 ssh2	2020-09-16 14:37:14
179.209.101.93	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-16 14:41:32
164.163.222.32	attackbots	Unauthorized connection attempt from IP address 164.163.222.32 on Port 445(SMB)	2020-09-16 14:31:50
104.140.188.2	attack	21/tcp 5060/tcp 3389/tcp... [2020-07-14/09-14]43pkt,9pt.(tcp),1pt.(udp)	2020-09-16 14:17:26
60.50.171.88	attack	TCP (SYN) 60.50.171.88:60132 -> port 23, len 40	2020-09-16 15:25:21
168.62.59.74	spam	Received: from cmp ([168.62.59.74]) by mrelayeu.kundenserver.de (mreue010 [212.227.15.167]) with ESMTPSA (Nemesis) id 1MF3U0-1kGBy40Hvc-00FVgp for ; Wed, 16 Sep 2020 08:33:36 +0200 Date: Tue, 15 Sep 2020 21:33:34 -0900 To: brascom@info.com.ph	2020-09-16 15:13:27

Recently Reported IPs

103.217.111.242	201.211.139.211	181.221.181.45	111.121.45.76
103.99.149.90	60.251.46.164	182.18.132.77	219.254.25.39
180.247.28.110	59.127.1.126	188.170.75.146	120.92.92.149
193.56.28.158	27.72.43.211	91.229.219.29	181.45.98.103
162.62.26.121	43.252.240.165	67.163.131.76	178.62.108.43