Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Beijing

Region: Beijing

Country: China

Internet Service Provider: V6Yun (Beijing) Network Co. Ltd

Hostname: unknown

Organization: Shenzhen Tencent Computer Systems Company Limited

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
$f2bV_matches
2020-01-12 00:20:35
attackspambots
Nov 27 14:50:02 legacy sshd[22145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2
Nov 27 14:50:04 legacy sshd[22145]: Failed password for invalid user mazenc from 139.199.113.2 port 49862 ssh2
Nov 27 14:58:51 legacy sshd[22467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2
...
2019-11-27 22:04:13
attackspambots
Nov 20 14:20:12 Tower sshd[39321]: Connection from 139.199.113.2 port 41876 on 192.168.10.220 port 22
Nov 20 14:20:14 Tower sshd[39321]: Invalid user guest from 139.199.113.2 port 41876
Nov 20 14:20:14 Tower sshd[39321]: error: Could not get shadow information for NOUSER
Nov 20 14:20:14 Tower sshd[39321]: Failed password for invalid user guest from 139.199.113.2 port 41876 ssh2
Nov 20 14:20:14 Tower sshd[39321]: Received disconnect from 139.199.113.2 port 41876:11: Bye Bye [preauth]
Nov 20 14:20:14 Tower sshd[39321]: Disconnected from invalid user guest 139.199.113.2 port 41876 [preauth]
2019-11-21 05:21:58
attackbotsspam
$f2bV_matches
2019-11-14 04:32:41
attack
2019-11-11T07:00:30.865399abusebot-3.cloudsearch.cf sshd\[22861\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2  user=root
2019-11-11 16:50:08
attackbots
Nov  7 23:43:17 MK-Soft-VM7 sshd[29706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2 
Nov  7 23:43:19 MK-Soft-VM7 sshd[29706]: Failed password for invalid user biology from 139.199.113.2 port 55403 ssh2
...
2019-11-08 07:35:35
attack
Nov  4 15:29:27 meumeu sshd[32164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2 
Nov  4 15:29:29 meumeu sshd[32164]: Failed password for invalid user www from 139.199.113.2 port 56788 ssh2
Nov  4 15:35:51 meumeu sshd[690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2 
...
2019-11-04 23:06:30
attackspam
Nov  3 21:04:34 sachi sshd\[17453\]: Invalid user onetwo from 139.199.113.2
Nov  3 21:04:34 sachi sshd\[17453\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2
Nov  3 21:04:36 sachi sshd\[17453\]: Failed password for invalid user onetwo from 139.199.113.2 port 62797 ssh2
Nov  3 21:09:18 sachi sshd\[17940\]: Invalid user kendall from 139.199.113.2
Nov  3 21:09:19 sachi sshd\[17940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2
2019-11-04 15:20:27
attackbots
Invalid user Riina from 139.199.113.2 port 54491
2019-10-29 06:03:16
attack
Oct 27 05:49:09 www sshd\[89536\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2  user=root
Oct 27 05:49:11 www sshd\[89536\]: Failed password for root from 139.199.113.2 port 37414 ssh2
Oct 27 05:54:40 www sshd\[89608\]: Invalid user backuper from 139.199.113.2
...
2019-10-27 14:29:57
attackbots
Oct 23 08:18:35 TORMINT sshd\[2155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2  user=root
Oct 23 08:18:37 TORMINT sshd\[2155\]: Failed password for root from 139.199.113.2 port 33803 ssh2
Oct 23 08:23:58 TORMINT sshd\[2430\]: Invalid user mailserver from 139.199.113.2
Oct 23 08:23:58 TORMINT sshd\[2430\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2
...
2019-10-23 20:34:28
attack
2019-10-21T22:49:43.364815lon01.zurich-datacenter.net sshd\[27381\]: Invalid user usuario1 from 139.199.113.2 port 23162
2019-10-21T22:49:43.369403lon01.zurich-datacenter.net sshd\[27381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2
2019-10-21T22:49:45.377711lon01.zurich-datacenter.net sshd\[27381\]: Failed password for invalid user usuario1 from 139.199.113.2 port 23162 ssh2
2019-10-21T22:55:08.253089lon01.zurich-datacenter.net sshd\[27517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2  user=root
2019-10-21T22:55:10.211575lon01.zurich-datacenter.net sshd\[27517\]: Failed password for root from 139.199.113.2 port 10645 ssh2
...
2019-10-22 06:26:44
attackbotsspam
Oct 11 11:40:27 mail sshd[25154]: Failed password for root from 139.199.113.2 port 23811 ssh2
Oct 11 11:44:35 mail sshd[26514]: Failed password for root from 139.199.113.2 port 56851 ssh2
2019-10-11 19:09:11
attackbots
2019-10-06T04:30:01.890204abusebot-4.cloudsearch.cf sshd\[8518\]: Invalid user P4sswort123 from 139.199.113.2 port 62316
2019-10-06T04:30:01.894062abusebot-4.cloudsearch.cf sshd\[8518\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2
2019-10-06 12:49:00
attackspam
2019-10-01T08:16:47.7157301495-001 sshd\[6545\]: Invalid user 12345 from 139.199.113.2 port 33017
2019-10-01T08:16:47.7190181495-001 sshd\[6545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2
2019-10-01T08:16:49.7476871495-001 sshd\[6545\]: Failed password for invalid user 12345 from 139.199.113.2 port 33017 ssh2
2019-10-01T08:21:31.6794391495-001 sshd\[6964\]: Invalid user brazil1 from 139.199.113.2 port 10844
2019-10-01T08:21:31.6863161495-001 sshd\[6964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2
2019-10-01T08:21:33.7048771495-001 sshd\[6964\]: Failed password for invalid user brazil1 from 139.199.113.2 port 10844 ssh2
...
2019-10-02 03:26:44
attackspambots
Sep 27 22:48:50 apollo sshd\[10709\]: Invalid user djlhc111com from 139.199.113.2Sep 27 22:48:53 apollo sshd\[10709\]: Failed password for invalid user djlhc111com from 139.199.113.2 port 61989 ssh2Sep 27 23:08:04 apollo sshd\[10791\]: Invalid user beaver from 139.199.113.2
...
2019-09-28 07:52:00
attack
2019-09-23T07:02:02.131826abusebot-5.cloudsearch.cf sshd\[31660\]: Invalid user dstserver from 139.199.113.2 port 13640
2019-09-23 15:17:55
attack
Sep  5 13:50:57 markkoudstaal sshd[24445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2
Sep  5 13:50:59 markkoudstaal sshd[24445]: Failed password for invalid user webcam from 139.199.113.2 port 22096 ssh2
Sep  5 13:56:38 markkoudstaal sshd[24939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2
2019-09-05 20:09:42
attackbots
Brute force SMTP login attempted.
...
2019-08-10 01:53:44
attack
Jul 13 19:45:51 vps647732 sshd[8005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2
Jul 13 19:45:54 vps647732 sshd[8005]: Failed password for invalid user jenkins from 139.199.113.2 port 30174 ssh2
...
2019-07-14 07:48:06
attackspam
Jul 12 22:05:32 vps647732 sshd[28758]: Failed password for root from 139.199.113.2 port 13067 ssh2
Jul 12 22:10:17 vps647732 sshd[28965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2
...
2019-07-13 04:40:04
attackspam
Jun 27 06:52:16 MK-Soft-VM3 sshd\[5802\]: Invalid user test from 139.199.113.2 port 50971
Jun 27 06:52:16 MK-Soft-VM3 sshd\[5802\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.2
Jun 27 06:52:18 MK-Soft-VM3 sshd\[5802\]: Failed password for invalid user test from 139.199.113.2 port 50971 ssh2
...
2019-06-27 14:55:35
Comments on same subnet:
IP Type Details Datetime
139.199.113.140 attackspam
Feb 12 08:26:55 xeon sshd[34309]: Failed password for root from 139.199.113.140 port 52310 ssh2
2020-02-12 19:11:15
139.199.113.140 attackspam
Feb  9 00:05:04 dedicated sshd[18470]: Invalid user ehz from 139.199.113.140 port 45070
2020-02-09 07:07:17
139.199.113.140 attackbotsspam
Feb  4 16:54:17 v22018076622670303 sshd\[20656\]: Invalid user weblogic from 139.199.113.140 port 37650
Feb  4 16:54:17 v22018076622670303 sshd\[20656\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140
Feb  4 16:54:19 v22018076622670303 sshd\[20656\]: Failed password for invalid user weblogic from 139.199.113.140 port 37650 ssh2
...
2020-02-05 01:02:58
139.199.113.140 attackbotsspam
Invalid user alban from 139.199.113.140 port 48772
2020-01-19 03:16:17
139.199.113.140 attackspam
Unauthorized connection attempt detected from IP address 139.199.113.140 to port 2220 [J]
2020-01-17 04:09:07
139.199.113.140 attackspambots
Jan 14 00:41:51 dedicated sshd[5361]: Invalid user buero from 139.199.113.140 port 41044
2020-01-14 07:59:47
139.199.113.140 attackspambots
Dec 27 02:01:40 server sshd\[9494\]: Invalid user sonoyama from 139.199.113.140
Dec 27 02:01:40 server sshd\[9494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140 
Dec 27 02:01:41 server sshd\[9494\]: Failed password for invalid user sonoyama from 139.199.113.140 port 44750 ssh2
Dec 27 02:19:32 server sshd\[12790\]: Invalid user admin from 139.199.113.140
Dec 27 02:19:32 server sshd\[12790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140 
...
2019-12-27 07:57:34
139.199.113.140 attack
Invalid user asterisk from 139.199.113.140 port 59708
2019-12-24 21:37:54
139.199.113.140 attack
2019-12-18T07:30:19.480353centos sshd\[8732\]: Invalid user gnuhealth from 139.199.113.140 port 48482
2019-12-18T07:30:19.487851centos sshd\[8732\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140
2019-12-18T07:30:21.139555centos sshd\[8732\]: Failed password for invalid user gnuhealth from 139.199.113.140 port 48482 ssh2
2019-12-18 14:57:22
139.199.113.140 attackspambots
Dec 15 08:53:48 cp sshd[13927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140
2019-12-15 16:44:43
139.199.113.140 attackbotsspam
Dec  4 09:13:31 [host] sshd[25665]: Invalid user cowlishaw from 139.199.113.140
Dec  4 09:13:31 [host] sshd[25665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140
Dec  4 09:13:33 [host] sshd[25665]: Failed password for invalid user cowlishaw from 139.199.113.140 port 59044 ssh2
2019-12-04 16:36:35
139.199.113.140 attackspam
Nov 30 00:39:44 kapalua sshd\[22436\]: Invalid user test from 139.199.113.140
Nov 30 00:39:44 kapalua sshd\[22436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140
Nov 30 00:39:46 kapalua sshd\[22436\]: Failed password for invalid user test from 139.199.113.140 port 59022 ssh2
Nov 30 00:47:13 kapalua sshd\[22916\]: Invalid user yoyo from 139.199.113.140
Nov 30 00:47:13 kapalua sshd\[22916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140
2019-11-30 18:59:25
139.199.113.236 attackbotsspam
Nov 25 04:32:45 sachi sshd\[21528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.236  user=root
Nov 25 04:32:47 sachi sshd\[21528\]: Failed password for root from 139.199.113.236 port 39898 ssh2
Nov 25 04:32:53 sachi sshd\[21546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.236  user=root
Nov 25 04:32:55 sachi sshd\[21546\]: Failed password for root from 139.199.113.236 port 40194 ssh2
Nov 25 04:32:57 sachi sshd\[21552\]: Invalid user pi from 139.199.113.236
2019-11-26 04:15:41
139.199.113.140 attack
SSH Bruteforce attempt
2019-11-24 05:52:59
139.199.113.140 attackbotsspam
SSH Brute Force, server-1 sshd[27285]: Failed password for invalid user admin from 139.199.113.140 port 53166 ssh2
2019-11-23 19:00:46
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.113.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22092
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.113.2.			IN	A

;; AUTHORITY SECTION:
.			1375	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040501 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Apr 06 08:25:12 +08 2019
;; MSG SIZE  rcvd: 117

Host info
Host 2.113.199.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 2.113.199.139.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
197.15.71.178 attackbots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/197.15.71.178/ 
 
 TN - 1H : (1)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TN 
 NAME ASN : ASN37671 
 
 IP : 197.15.71.178 
 
 CIDR : 197.15.64.0/19 
 
 PREFIX COUNT : 36 
 
 UNIQUE IP COUNT : 202240 
 
 
 ATTACKS DETECTED ASN37671 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-12 07:23:18 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-12 20:45:15
185.176.27.38 attack
11/12/2019-13:51:51.687514 185.176.27.38 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-11-12 20:59:48
124.127.43.203 attack
Port 1433 Scan
2019-11-12 21:14:04
182.180.167.249 normal
ASALAM-O-ALIKUM
2019-11-12 21:09:11
200.77.186.161 attack
2019-11-12 00:23:24 H=(littleblackdress.it) [200.77.186.161]:34984 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-11-12 00:23:25 H=(littleblackdress.it) [200.77.186.161]:34984 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-11-12 00:23:27 H=(littleblackdress.it) [200.77.186.161]:34984 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/200.77.186.161)
...
2019-11-12 20:37:58
166.62.100.99 attack
php WP PHPmyadamin ABUSE blocked for 12h
2019-11-12 20:56:21
78.48.82.237 attackbotsspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/78.48.82.237/ 
 
 DE - 1H : (78)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : DE 
 NAME ASN : ASN6805 
 
 IP : 78.48.82.237 
 
 CIDR : 78.48.0.0/13 
 
 PREFIX COUNT : 42 
 
 UNIQUE IP COUNT : 7555584 
 
 
 ATTACKS DETECTED ASN6805 :  
  1H - 1 
  3H - 3 
  6H - 4 
 12H - 4 
 24H - 5 
 
 DateTime : 2019-11-12 07:22:47 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-12 21:01:11
39.42.91.106 attack
Automatic report - Port Scan Attack
2019-11-12 20:45:38
192.99.10.122 attack
192.99.10.122 was recorded 31 times by 24 hosts attempting to connect to the following ports: 8545. Incident counter (4h, 24h, all-time): 31, 236, 1765
2019-11-12 20:31:58
123.30.168.123 attackspambots
Wordpress bruteforce
2019-11-12 20:31:33
118.25.101.161 attack
Automatic report - Banned IP Access
2019-11-12 21:12:21
27.5.132.158 attack
ROBOT - HACK
2019-11-12 21:05:34
49.48.40.187 attackbots
Honeypot attack, port: 23, PTR: mx-ll-49.48.40-187.dynamic.3bb.in.th.
2019-11-12 20:49:33
115.58.131.54 attackbots
Honeypot attack, port: 23, PTR: hn.kd.ny.adsl.
2019-11-12 20:44:22
222.186.190.2 attackspam
Nov 12 13:58:44 mail sshd[14078]: Failed password for root from 222.186.190.2 port 24656 ssh2
Nov 12 13:58:48 mail sshd[14078]: Failed password for root from 222.186.190.2 port 24656 ssh2
Nov 12 13:58:51 mail sshd[14078]: Failed password for root from 222.186.190.2 port 24656 ssh2
Nov 12 13:58:55 mail sshd[14078]: Failed password for root from 222.186.190.2 port 24656 ssh2
2019-11-12 21:05:39

Recently Reported IPs

102.165.32.79 201.25.191.204 13.66.192.66 218.75.132.59
200.150.82.138 52.207.188.89 176.107.130.72 134.175.189.129
143.255.140.25 86.96.197.226 96.44.29.46 187.72.33.125
118.24.247.237 202.146.213.3 114.6.68.30 185.220.101.56
104.198.93.19 113.53.230.34 106.12.104.181 118.25.190.197