Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: V6Yun (Beijing) Network Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
2019-08-17T15:24:51.579082enmeeting.mahidol.ac.th sshd\[5379\]: Invalid user zoom from 139.198.189.62 port 36834
2019-08-17T15:24:51.598029enmeeting.mahidol.ac.th sshd\[5379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.62
2019-08-17T15:24:53.854063enmeeting.mahidol.ac.th sshd\[5379\]: Failed password for invalid user zoom from 139.198.189.62 port 36834 ssh2
...
2019-08-17 16:39:00
Comments on same subnet:
IP Type Details Datetime
139.198.189.40 attackbots
Invalid user erpnext from 139.198.189.40 port 55024
2020-04-30 17:47:47
139.198.189.36 attackspam
Feb 20 18:44:07 gw1 sshd[10076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36
Feb 20 18:44:09 gw1 sshd[10076]: Failed password for invalid user test from 139.198.189.36 port 41696 ssh2
...
2020-02-21 04:20:52
139.198.189.36 attackspambots
Feb  9 10:58:20 MK-Soft-VM3 sshd[4644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36 
Feb  9 10:58:21 MK-Soft-VM3 sshd[4644]: Failed password for invalid user vuw from 139.198.189.36 port 43024 ssh2
...
2020-02-09 20:19:19
139.198.189.36 attack
Unauthorized connection attempt detected from IP address 139.198.189.36 to port 2220 [J]
2020-02-05 03:48:44
139.198.189.36 attack
Unauthorized connection attempt detected from IP address 139.198.189.36 to port 2220 [J]
2020-01-07 15:34:34
139.198.189.36 attackspam
Invalid user strautman from 139.198.189.36 port 57658
2020-01-01 05:41:59
139.198.189.36 attackbotsspam
Dec 25 17:04:46 [munged] sshd[23845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36
2019-12-26 00:34:15
139.198.189.36 attackspambots
Dec 21 15:55:45 MK-Soft-VM5 sshd[29395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36 
Dec 21 15:55:47 MK-Soft-VM5 sshd[29395]: Failed password for invalid user ssssssssss from 139.198.189.36 port 37692 ssh2
...
2019-12-21 23:56:46
139.198.189.36 attack
Dec 15 21:40:39 vserver sshd\[7380\]: Invalid user zhen from 139.198.189.36Dec 15 21:40:42 vserver sshd\[7380\]: Failed password for invalid user zhen from 139.198.189.36 port 42566 ssh2Dec 15 21:47:37 vserver sshd\[7420\]: Invalid user silver from 139.198.189.36Dec 15 21:47:38 vserver sshd\[7420\]: Failed password for invalid user silver from 139.198.189.36 port 59582 ssh2
...
2019-12-16 05:25:40
139.198.189.36 attack
--- report ---
Dec 14 07:13:15 sshd: Connection from 139.198.189.36 port 40850
Dec 14 07:13:17 sshd: Invalid user admin from 139.198.189.36
Dec 14 07:13:17 sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36
Dec 14 07:13:19 sshd: Failed password for invalid user admin from 139.198.189.36 port 40850 ssh2
Dec 14 07:13:19 sshd: Received disconnect from 139.198.189.36: 11: Bye Bye [preauth]
2019-12-14 19:53:11
139.198.189.36 attackbots
T: f2b ssh aggressive 3x
2019-12-09 19:29:34
139.198.189.36 attackspam
Dec  9 00:44:42 plusreed sshd[20036]: Invalid user etc from 139.198.189.36
...
2019-12-09 13:46:14
139.198.189.36 attackbotsspam
2019-12-07T12:45:39.207929abusebot-7.cloudsearch.cf sshd\[12170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36  user=root
2019-12-07 20:48:01
139.198.189.36 attackbotsspam
Dec  3 10:54:39 localhost sshd\[5459\]: Invalid user hartin from 139.198.189.36 port 60884
Dec  3 10:54:39 localhost sshd\[5459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36
Dec  3 10:54:41 localhost sshd\[5459\]: Failed password for invalid user hartin from 139.198.189.36 port 60884 ssh2
Dec  3 11:03:36 localhost sshd\[5780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36  user=daemon
Dec  3 11:03:39 localhost sshd\[5780\]: Failed password for daemon from 139.198.189.36 port 39044 ssh2
...
2019-12-03 19:11:39
139.198.189.36 attackspam
Dec  1 10:31:13 wbs sshd\[1778\]: Invalid user control from 139.198.189.36
Dec  1 10:31:13 wbs sshd\[1778\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36
Dec  1 10:31:15 wbs sshd\[1778\]: Failed password for invalid user control from 139.198.189.36 port 34866 ssh2
Dec  1 10:38:18 wbs sshd\[2413\]: Invalid user gouhara from 139.198.189.36
Dec  1 10:38:18 wbs sshd\[2413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36
2019-12-02 04:53:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.198.189.62
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3486
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.198.189.62.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081700 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 17 16:38:49 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 62.189.198.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 62.189.198.139.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.186.175.169 attackbots
Jan 23 20:13:06 MK-Soft-VM7 sshd[22346]: Failed password for root from 222.186.175.169 port 63418 ssh2
Jan 23 20:13:10 MK-Soft-VM7 sshd[22346]: Failed password for root from 222.186.175.169 port 63418 ssh2
...
2020-01-24 03:14:57
223.29.207.214 attackspambots
Jan 23 19:12:31 game-panel sshd[22532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.29.207.214
Jan 23 19:12:32 game-panel sshd[22532]: Failed password for invalid user vivek from 223.29.207.214 port 58684 ssh2
Jan 23 19:15:41 game-panel sshd[22705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.29.207.214
2020-01-24 03:21:09
192.169.139.6 attackbots
xmlrpc attack
2020-01-24 03:41:38
106.12.192.107 attack
Unauthorized connection attempt detected from IP address 106.12.192.107 to port 2220 [J]
2020-01-24 03:30:56
185.209.0.32 attackspambots
firewall-block, port(s): 3502/tcp, 5009/tcp
2020-01-24 03:12:03
116.89.84.80 attack
Unauthorized connection attempt detected from IP address 116.89.84.80 to port 2220 [J]
2020-01-24 03:40:59
106.12.174.227 attack
Jan 23 17:05:17 * sshd[1835]: Failed password for git from 106.12.174.227 port 57796 ssh2
Jan 23 17:06:12 * sshd[1948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.174.227
2020-01-24 03:30:24
142.93.241.93 attackspambots
Unauthorized connection attempt detected from IP address 142.93.241.93 to port 2220 [J]
2020-01-24 03:49:03
2604:a880:400:d0::77b:6001 attackspambots
xmlrpc attack
2020-01-24 03:10:49
51.68.208.183 attackbotsspam
Port scan on 1 port(s): 445
2020-01-24 03:11:40
49.233.153.71 attack
Unauthorized connection attempt detected from IP address 49.233.153.71 to port 2220 [J]
2020-01-24 03:23:55
45.227.253.36 attackbots
21 attempts against mh_ha-misbehave-ban on sonic
2020-01-24 03:34:18
110.49.71.244 attackbots
Jan 23 21:01:26 server sshd\[921\]: Invalid user services from 110.49.71.244
Jan 23 21:01:26 server sshd\[921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.71.244 
Jan 23 21:01:28 server sshd\[921\]: Failed password for invalid user services from 110.49.71.244 port 48054 ssh2
Jan 23 21:29:54 server sshd\[7453\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.71.244  user=root
Jan 23 21:29:55 server sshd\[7453\]: Failed password for root from 110.49.71.244 port 51604 ssh2
...
2020-01-24 03:46:08
222.186.30.248 attack
detected by Fail2Ban
2020-01-24 03:25:43
192.161.172.150 attackspam
Jan 23 19:04:28 game-panel sshd[22091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.161.172.150
Jan 23 19:04:30 game-panel sshd[22091]: Failed password for invalid user ts3 from 192.161.172.150 port 44589 ssh2
Jan 23 19:07:19 game-panel sshd[22208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.161.172.150
2020-01-24 03:24:18

Recently Reported IPs

211.141.124.24 186.236.102.46 117.247.194.21 45.235.87.126
64.79.101.52 182.91.145.93 182.70.52.9 189.68.36.209
182.61.31.140 180.248.122.124 182.61.21.155 118.32.228.191
193.252.168.92 60.219.116.20 73.217.98.87 191.53.118.142
167.71.215.72 79.113.164.105 152.71.231.32 54.36.150.133