Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Invalid user netkrash from 139.199.174.58 port 33222
2020-01-02 07:49:29
attackbotsspam
Dec 31 10:21:01 server sshd\[23037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58  user=root
Dec 31 10:21:03 server sshd\[23037\]: Failed password for root from 139.199.174.58 port 54096 ssh2
Dec 31 10:40:52 server sshd\[27494\]: Invalid user kito from 139.199.174.58
Dec 31 10:40:52 server sshd\[27494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58 
Dec 31 10:40:55 server sshd\[27494\]: Failed password for invalid user kito from 139.199.174.58 port 32994 ssh2
...
2019-12-31 16:51:17
attackspambots
Dec 25 19:12:21 dedicated sshd[5800]: Invalid user ragndi from 139.199.174.58 port 43244
2019-12-26 02:33:04
attack
Dec 14 16:25:48 pi sshd\[21545\]: Failed password for invalid user altenhofen from 139.199.174.58 port 35024 ssh2
Dec 14 16:32:18 pi sshd\[21863\]: Invalid user bannon from 139.199.174.58 port 50204
Dec 14 16:32:18 pi sshd\[21863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58
Dec 14 16:32:20 pi sshd\[21863\]: Failed password for invalid user bannon from 139.199.174.58 port 50204 ssh2
Dec 14 16:38:56 pi sshd\[22142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58  user=root
...
2019-12-15 01:06:46
attackbots
Dec 12 23:10:12 zeus sshd[21080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58 
Dec 12 23:10:14 zeus sshd[21080]: Failed password for invalid user egbert from 139.199.174.58 port 47538 ssh2
Dec 12 23:15:36 zeus sshd[21273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58 
Dec 12 23:15:38 zeus sshd[21273]: Failed password for invalid user madonna from 139.199.174.58 port 35314 ssh2
2019-12-13 07:26:51
attack
Nov 20 09:33:39 cp sshd[11762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58
2019-11-20 17:17:18
attackbots
2019-10-18T05:56:01.1089401240 sshd\[12049\]: Invalid user admin from 139.199.174.58 port 42918
2019-10-18T05:56:01.1114851240 sshd\[12049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58
2019-10-18T05:56:03.6715071240 sshd\[12049\]: Failed password for invalid user admin from 139.199.174.58 port 42918 ssh2
...
2019-10-18 12:55:41
attack
Oct 14 06:43:18 [munged] sshd[27851]: Failed password for root from 139.199.174.58 port 46828 ssh2
2019-10-14 18:49:29
attack
'Fail2Ban'
2019-09-30 20:06:02
attack
Sep 26 02:38:59 hpm sshd\[25039\]: Invalid user user from 139.199.174.58
Sep 26 02:38:59 hpm sshd\[25039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58
Sep 26 02:39:01 hpm sshd\[25039\]: Failed password for invalid user user from 139.199.174.58 port 42358 ssh2
Sep 26 02:41:59 hpm sshd\[25457\]: Invalid user informix from 139.199.174.58
Sep 26 02:41:59 hpm sshd\[25457\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58
2019-09-26 20:49:49
attack
Aug 24 04:26:46 web9 sshd\[24523\]: Invalid user lembi from 139.199.174.58
Aug 24 04:26:46 web9 sshd\[24523\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58
Aug 24 04:26:48 web9 sshd\[24523\]: Failed password for invalid user lembi from 139.199.174.58 port 35910 ssh2
Aug 24 04:30:25 web9 sshd\[25283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58  user=root
Aug 24 04:30:27 web9 sshd\[25283\]: Failed password for root from 139.199.174.58 port 34466 ssh2
2019-08-24 22:40:37
attackspambots
Aug 15 22:50:10 tdfoods sshd\[2986\]: Invalid user drug from 139.199.174.58
Aug 15 22:50:10 tdfoods sshd\[2986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58
Aug 15 22:50:12 tdfoods sshd\[2986\]: Failed password for invalid user drug from 139.199.174.58 port 47290 ssh2
Aug 15 22:55:52 tdfoods sshd\[3525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58  user=root
Aug 15 22:55:54 tdfoods sshd\[3525\]: Failed password for root from 139.199.174.58 port 37686 ssh2
2019-08-16 17:01:34
attackspam
Brute force SMTP login attempted.
...
2019-08-10 01:41:41
attackspambots
2019-07-20T14:34:02.633185stark.klein-stark.info sshd\[18980\]: Invalid user teamspeak from 139.199.174.58 port 35172
2019-07-20T14:34:02.639546stark.klein-stark.info sshd\[18980\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58
2019-07-20T14:34:04.713426stark.klein-stark.info sshd\[18980\]: Failed password for invalid user teamspeak from 139.199.174.58 port 35172 ssh2
...
2019-07-21 00:39:36
attack
Invalid user danger from 139.199.174.58 port 57266
2019-07-20 16:10:48
attackspambots
Invalid user sunsun from 139.199.174.58 port 47526
2019-07-20 09:17:53
attack
$f2bV_matches
2019-07-18 14:38:53
attackbots
Jul 16 19:34:15 MK-Soft-Root1 sshd\[15346\]: Invalid user bwadmin from 139.199.174.58 port 37954
Jul 16 19:34:15 MK-Soft-Root1 sshd\[15346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.174.58
Jul 16 19:34:18 MK-Soft-Root1 sshd\[15346\]: Failed password for invalid user bwadmin from 139.199.174.58 port 37954 ssh2
...
2019-07-17 02:04:16
attack
Invalid user backuppc from 139.199.174.58 port 41394
2019-07-14 13:44:26
attackbotsspam
Invalid user usuario from 139.199.174.58 port 33930
2019-06-29 05:58:51
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.174.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9840
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.174.58.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062801 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 29 05:58:46 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 58.174.199.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 58.174.199.139.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
107.175.33.240 attackbots
Invalid user hum from 107.175.33.240 port 36320
2020-07-25 14:08:02
94.102.56.216 attackbotsspam
[Fri Jul 24 02:19:15 2020] - DDoS Attack From IP: 94.102.56.216 Port: 42831
2020-07-25 14:15:51
152.136.137.227 attackspambots
Jul 25 01:07:42 NPSTNNYC01T sshd[24653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.137.227
Jul 25 01:07:44 NPSTNNYC01T sshd[24653]: Failed password for invalid user ooo from 152.136.137.227 port 57950 ssh2
Jul 25 01:14:17 NPSTNNYC01T sshd[25338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.137.227
...
2020-07-25 13:43:51
205.185.125.216 attackspambots
xmlrpc attack
2020-07-25 14:16:12
121.241.244.92 attackbots
Jul 25 05:37:05 localhost sshd[73725]: Invalid user richards from 121.241.244.92 port 60070
Jul 25 05:37:05 localhost sshd[73725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.241.244.92
Jul 25 05:37:05 localhost sshd[73725]: Invalid user richards from 121.241.244.92 port 60070
Jul 25 05:37:07 localhost sshd[73725]: Failed password for invalid user richards from 121.241.244.92 port 60070 ssh2
Jul 25 05:46:13 localhost sshd[74912]: Invalid user its from 121.241.244.92 port 58221
...
2020-07-25 14:09:32
190.32.21.250 attackspambots
Jul 24 22:59:56 server1 sshd\[14243\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.32.21.250 
Jul 24 22:59:59 server1 sshd\[14243\]: Failed password for invalid user asing from 190.32.21.250 port 55210 ssh2
Jul 24 23:04:29 server1 sshd\[15489\]: Invalid user user from 190.32.21.250
Jul 24 23:04:29 server1 sshd\[15489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.32.21.250 
Jul 24 23:04:30 server1 sshd\[15489\]: Failed password for invalid user user from 190.32.21.250 port 33533 ssh2
...
2020-07-25 13:42:38
34.93.237.166 attackbots
2020-07-25T05:03:24.612239vps1033 sshd[13299]: Invalid user shield from 34.93.237.166 port 51490
2020-07-25T05:03:24.623126vps1033 sshd[13299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.237.93.34.bc.googleusercontent.com
2020-07-25T05:03:24.612239vps1033 sshd[13299]: Invalid user shield from 34.93.237.166 port 51490
2020-07-25T05:03:27.034012vps1033 sshd[13299]: Failed password for invalid user shield from 34.93.237.166 port 51490 ssh2
2020-07-25T05:08:14.990129vps1033 sshd[23462]: Invalid user nathaly from 34.93.237.166 port 59128
...
2020-07-25 14:02:30
111.229.148.198 attackbotsspam
Unauthorized connection attempt detected from IP address 111.229.148.198 to port 11332
2020-07-25 13:27:35
13.233.85.98 attack
xmlrpc attack
2020-07-25 14:20:33
31.167.9.2 attack
Jul 24 22:18:53 dignus sshd[1727]: Failed password for invalid user xujun from 31.167.9.2 port 45652 ssh2
Jul 24 22:21:51 dignus sshd[2084]: Invalid user guest1 from 31.167.9.2 port 36998
Jul 24 22:21:51 dignus sshd[2084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.167.9.2
Jul 24 22:21:53 dignus sshd[2084]: Failed password for invalid user guest1 from 31.167.9.2 port 36998 ssh2
Jul 24 22:24:54 dignus sshd[2360]: Invalid user gh from 31.167.9.2 port 56564
...
2020-07-25 13:46:22
36.112.104.194 attack
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-07-25 13:28:15
168.62.174.233 attackspam
2020-07-25T06:04:54.311827shield sshd\[11191\]: Invalid user xff from 168.62.174.233 port 53886
2020-07-25T06:04:54.320549shield sshd\[11191\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.62.174.233
2020-07-25T06:04:56.292824shield sshd\[11191\]: Failed password for invalid user xff from 168.62.174.233 port 53886 ssh2
2020-07-25T06:09:52.633229shield sshd\[11584\]: Invalid user chan from 168.62.174.233 port 40572
2020-07-25T06:09:52.643292shield sshd\[11584\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.62.174.233
2020-07-25 14:18:37
192.144.218.46 attack
Jul 25 05:44:23 Invalid user rsy from 192.144.218.46 port 51388
2020-07-25 14:03:26
218.92.0.171 attackbotsspam
SSH Brute-Force attacks
2020-07-25 14:19:51
103.48.193.7 attackspambots
Jul 25 07:14:55 lnxded64 sshd[30806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.48.193.7
2020-07-25 14:10:32

Recently Reported IPs

91.46.70.195 201.46.61.92 191.240.89.0 125.86.176.213
154.157.41.181 2a01:388:2d7:150::1:378 97.81.153.39 77.247.110.154
187.120.134.103 200.33.90.51 191.53.221.50 71.66.168.146
117.44.76.102 80.81.64.214 114.239.38.159 5.127.61.129
185.204.19.53 107.150.125.15 95.252.66.228 218.89.187.52