Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: V6Yun (Beijing) Network Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Mar 22 01:58:20 Ubuntu-1404-trusty-64-minimal sshd\[32595\]: Invalid user dasusr1 from 139.199.193.202
Mar 22 01:58:20 Ubuntu-1404-trusty-64-minimal sshd\[32595\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
Mar 22 01:58:21 Ubuntu-1404-trusty-64-minimal sshd\[32595\]: Failed password for invalid user dasusr1 from 139.199.193.202 port 33424 ssh2
Mar 22 02:02:29 Ubuntu-1404-trusty-64-minimal sshd\[6984\]: Invalid user ts3 from 139.199.193.202
Mar 22 02:02:29 Ubuntu-1404-trusty-64-minimal sshd\[6984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
2020-03-22 09:15:24
attackspam
Mar 19 14:23:06 h1745522 sshd[1663]: Invalid user jboss from 139.199.193.202 port 43522
Mar 19 14:23:06 h1745522 sshd[1663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
Mar 19 14:23:06 h1745522 sshd[1663]: Invalid user jboss from 139.199.193.202 port 43522
Mar 19 14:23:08 h1745522 sshd[1663]: Failed password for invalid user jboss from 139.199.193.202 port 43522 ssh2
Mar 19 14:26:13 h1745522 sshd[1903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202  user=root
Mar 19 14:26:15 h1745522 sshd[1903]: Failed password for root from 139.199.193.202 port 50068 ssh2
Mar 19 14:29:16 h1745522 sshd[2072]: Invalid user mqm from 139.199.193.202 port 56616
Mar 19 14:29:17 h1745522 sshd[2072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
Mar 19 14:29:16 h1745522 sshd[2072]: Invalid user mqm from 139.199.193.202 port 56616
Mar 19
...
2020-03-20 01:42:56
attackspambots
fail2ban
2020-03-07 09:39:17
attack
Brute-force attempt banned
2020-03-03 22:08:22
attackspam
Unauthorized connection attempt detected from IP address 139.199.193.202 to port 2220 [J]
2020-02-01 02:22:20
attackspam
Unauthorized connection attempt detected from IP address 139.199.193.202 to port 2220 [J]
2020-01-25 21:17:37
attackspambots
2020-01-09T16:01:13.301811scmdmz1 sshd[21932]: Invalid user yvx from 139.199.193.202 port 41860
2020-01-09T16:01:13.304323scmdmz1 sshd[21932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
2020-01-09T16:01:13.301811scmdmz1 sshd[21932]: Invalid user yvx from 139.199.193.202 port 41860
2020-01-09T16:01:15.281543scmdmz1 sshd[21932]: Failed password for invalid user yvx from 139.199.193.202 port 41860 ssh2
2020-01-09T16:07:41.762178scmdmz1 sshd[22481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202  user=nobody
2020-01-09T16:07:43.673766scmdmz1 sshd[22481]: Failed password for nobody from 139.199.193.202 port 50214 ssh2
...
2020-01-10 00:03:00
attackbots
[ssh] SSH attack
2019-11-20 00:52:57
attackspam
Repeated brute force against a port
2019-11-17 07:29:02
attackbots
Nov 11 07:47:00 game-panel sshd[10745]: Failed password for games from 139.199.193.202 port 47512 ssh2
Nov 11 07:52:11 game-panel sshd[10887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
Nov 11 07:52:14 game-panel sshd[10887]: Failed password for invalid user ytruth2 from 139.199.193.202 port 54398 ssh2
2019-11-11 16:03:07
attackbotsspam
Nov 10 09:00:33 server sshd\[17771\]: Invalid user xv from 139.199.193.202
Nov 10 09:00:33 server sshd\[17771\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202 
Nov 10 09:00:34 server sshd\[17771\]: Failed password for invalid user xv from 139.199.193.202 port 44192 ssh2
Nov 10 09:27:10 server sshd\[24552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202  user=root
Nov 10 09:27:11 server sshd\[24552\]: Failed password for root from 139.199.193.202 port 40278 ssh2
...
2019-11-10 18:36:43
attack
Nov  7 10:48:34 MK-Soft-VM7 sshd[16670]: Failed password for root from 139.199.193.202 port 49150 ssh2
Nov  7 10:54:40 MK-Soft-VM7 sshd[16714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202 
...
2019-11-07 18:02:56
attack
2019-11-06T14:31:01.996660shield sshd\[25633\]: Invalid user cassidy from 139.199.193.202 port 44314
2019-11-06T14:31:02.002837shield sshd\[25633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
2019-11-06T14:31:04.256466shield sshd\[25633\]: Failed password for invalid user cassidy from 139.199.193.202 port 44314 ssh2
2019-11-06T14:36:34.498462shield sshd\[26005\]: Invalid user sg-1 from 139.199.193.202 port 51422
2019-11-06T14:36:34.502939shield sshd\[26005\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
2019-11-07 03:03:24
attackspam
Nov  6 12:58:50 server sshd\[13957\]: Invalid user gretchen from 139.199.193.202
Nov  6 12:58:50 server sshd\[13957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202 
Nov  6 12:58:51 server sshd\[13957\]: Failed password for invalid user gretchen from 139.199.193.202 port 50076 ssh2
Nov  6 13:06:27 server sshd\[16109\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202  user=root
Nov  6 13:06:29 server sshd\[16109\]: Failed password for root from 139.199.193.202 port 44888 ssh2
...
2019-11-06 18:36:58
attackspam
$f2bV_matches
2019-10-24 12:00:46
attackspambots
2019-10-19T13:09:43.725221abusebot-4.cloudsearch.cf sshd\[14061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202  user=root
2019-10-19 21:28:20
attackbotsspam
$f2bV_matches
2019-10-19 19:25:32
attackspam
Oct 12 01:22:49 vps01 sshd[27430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
Oct 12 01:22:51 vps01 sshd[27430]: Failed password for invalid user Legal1@3 from 139.199.193.202 port 42118 ssh2
2019-10-12 07:33:41
attack
Oct  3 05:40:49 kapalua sshd\[16944\]: Invalid user admin from 139.199.193.202
Oct  3 05:40:49 kapalua sshd\[16944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
Oct  3 05:40:51 kapalua sshd\[16944\]: Failed password for invalid user admin from 139.199.193.202 port 46874 ssh2
Oct  3 05:46:53 kapalua sshd\[17527\]: Invalid user carolina from 139.199.193.202
Oct  3 05:46:53 kapalua sshd\[17527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
2019-10-03 23:54:48
attack
2019-10-02T18:05:11.4692861495-001 sshd\[26405\]: Failed password for invalid user ubnt from 139.199.193.202 port 37884 ssh2
2019-10-02T18:17:37.9532931495-001 sshd\[27395\]: Invalid user hrd from 139.199.193.202 port 56946
2019-10-02T18:17:37.9617651495-001 sshd\[27395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
2019-10-02T18:17:39.9103071495-001 sshd\[27395\]: Failed password for invalid user hrd from 139.199.193.202 port 56946 ssh2
2019-10-02T18:20:40.6709391495-001 sshd\[27539\]: Invalid user aDmin from 139.199.193.202 port 54648
2019-10-02T18:20:40.6800301495-001 sshd\[27539\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
...
2019-10-03 06:44:45
attackbots
Sep 26 09:22:46 aat-srv002 sshd[12118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
Sep 26 09:22:48 aat-srv002 sshd[12118]: Failed password for invalid user isar from 139.199.193.202 port 49162 ssh2
Sep 26 09:27:15 aat-srv002 sshd[12225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
Sep 26 09:27:17 aat-srv002 sshd[12225]: Failed password for invalid user cricket from 139.199.193.202 port 50924 ssh2
...
2019-09-26 23:57:26
attack
Sep 17 07:31:25 www_kotimaassa_fi sshd[22969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
Sep 17 07:31:28 www_kotimaassa_fi sshd[22969]: Failed password for invalid user teamspeak3 from 139.199.193.202 port 59010 ssh2
...
2019-09-17 15:49:59
attackbots
Sep 15 03:18:56 friendsofhawaii sshd\[13665\]: Invalid user ll from 139.199.193.202
Sep 15 03:18:56 friendsofhawaii sshd\[13665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
Sep 15 03:18:58 friendsofhawaii sshd\[13665\]: Failed password for invalid user ll from 139.199.193.202 port 49556 ssh2
Sep 15 03:23:53 friendsofhawaii sshd\[14072\]: Invalid user plcmspip from 139.199.193.202
Sep 15 03:23:53 friendsofhawaii sshd\[14072\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.193.202
2019-09-15 21:35:09
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.193.202
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37769
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.193.202.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091500 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 15 21:34:42 CST 2019
;; MSG SIZE  rcvd: 119
Host info
Host 202.193.199.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 202.193.199.139.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
111.229.194.130 attackbots
SSH brute force
2020-08-25 08:05:40
142.44.185.242 attackspambots
Aug 25 01:03:56 vm0 sshd[32002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.185.242
Aug 25 01:03:58 vm0 sshd[32002]: Failed password for invalid user admin from 142.44.185.242 port 53040 ssh2
...
2020-08-25 07:48:26
88.99.164.132 attackbots
tried sql-injection
2020-08-25 08:01:15
51.75.207.61 attack
Aug 25 00:11:34 gamehost-one sshd[7959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.207.61 
Aug 25 00:11:36 gamehost-one sshd[7959]: Failed password for invalid user leo from 51.75.207.61 port 48126 ssh2
Aug 25 00:21:01 gamehost-one sshd[8692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.207.61 
...
2020-08-25 07:49:12
51.254.129.170 attackbotsspam
SSH Invalid Login
2020-08-25 07:53:00
186.179.100.165 attackspam
2020-08-2422:12:141kAIpB-0005Dy-AY\<=simone@gedacom.chH=\(localhost\)[113.173.189.162]:40081P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:simone@gedacom.chS=1951id=F9FC4A1912C6E85B8782CB73B761B08A@gedacom.chT="Onlymadeadecisiontogetacquaintedwithyou"forjnavy82909@gmail.com2020-08-2422:12:031kAIp0-0005DX-Ax\<=simone@gedacom.chH=\(localhost\)[113.173.108.226]:59317P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:simone@gedacom.chS=1904id=F6F345161DC9E754888DC47CB8757B17@gedacom.chT="Onlyneedasmallamountofyourinterest"forsethlaz19@gmail.com2020-08-2422:12:281kAIpP-0005FQ-Sm\<=simone@gedacom.chH=\(localhost\)[113.190.19.127]:48380P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:simone@gedacom.chS=4006id=ac4d71656e45906340be481b10c4fd2102d0fb078b@gedacom.chT="\\360\\237\\222\\246\\360\\237\\222\\245\\360\\237\\221\\204\\360\\237\\221\\221Tryingtofindyourtowngirlfriends\?"forlickyonone@icloud.comvernav@gmail.com2020-08-2422:11:461kAIoj-0005Ct-T
2020-08-25 08:09:07
110.78.114.236 attackspam
(sshd) Failed SSH login from 110.78.114.236 (TH/Thailand/-): 10 in the last 3600 secs
2020-08-25 07:54:05
106.13.166.122 attackspambots
Aug 25 01:30:24 [host] sshd[12114]: Invalid user f
Aug 25 01:30:24 [host] sshd[12114]: pam_unix(sshd:
Aug 25 01:30:26 [host] sshd[12114]: Failed passwor
2020-08-25 07:44:33
113.190.19.127 attackbotsspam
2020-08-2422:12:141kAIpB-0005Dy-AY\<=simone@gedacom.chH=\(localhost\)[113.173.189.162]:40081P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:simone@gedacom.chS=1951id=F9FC4A1912C6E85B8782CB73B761B08A@gedacom.chT="Onlymadeadecisiontogetacquaintedwithyou"forjnavy82909@gmail.com2020-08-2422:12:031kAIp0-0005DX-Ax\<=simone@gedacom.chH=\(localhost\)[113.173.108.226]:59317P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:simone@gedacom.chS=1904id=F6F345161DC9E754888DC47CB8757B17@gedacom.chT="Onlyneedasmallamountofyourinterest"forsethlaz19@gmail.com2020-08-2422:12:281kAIpP-0005FQ-Sm\<=simone@gedacom.chH=\(localhost\)[113.190.19.127]:48380P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:simone@gedacom.chS=4006id=ac4d71656e45906340be481b10c4fd2102d0fb078b@gedacom.chT="\\360\\237\\222\\246\\360\\237\\222\\245\\360\\237\\221\\204\\360\\237\\221\\221Tryingtofindyourtowngirlfriends\?"forlickyonone@icloud.comvernav@gmail.com2020-08-2422:11:461kAIoj-0005Ct-T
2020-08-25 08:11:09
202.29.220.182 attackbots
Invalid user butter from 202.29.220.182 port 40360
2020-08-25 12:01:30
188.253.2.168 attackbotsspam
REQUESTED PAGE: /v2/wp-includes/wlwmanifest.xml
2020-08-25 07:48:14
142.93.179.2 attackbots
2020-08-24T06:05:23.423813correo.[domain] sshd[17321]: Failed password for invalid user arijit from 142.93.179.2 port 44814 ssh2 2020-08-24T06:15:51.509983correo.[domain] sshd[18301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.179.2 user=root 2020-08-24T06:15:53.368971correo.[domain] sshd[18301]: Failed password for root from 142.93.179.2 port 42790 ssh2 ...
2020-08-25 07:56:57
74.82.218.75 attack
SSH BruteForce Attack
2020-08-25 07:56:14
92.222.75.80 attack
Aug 25 00:05:59 gamehost-one sshd[7472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.75.80 
Aug 25 00:06:01 gamehost-one sshd[7472]: Failed password for invalid user temp from 92.222.75.80 port 46653 ssh2
Aug 25 00:20:09 gamehost-one sshd[8610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.75.80 
...
2020-08-25 08:10:53
142.93.215.19 attackbots
Aug 24 18:15:55 firewall sshd[3211]: Invalid user blm from 142.93.215.19
Aug 24 18:15:56 firewall sshd[3211]: Failed password for invalid user blm from 142.93.215.19 port 53364 ssh2
Aug 24 18:20:17 firewall sshd[3417]: Invalid user melina from 142.93.215.19
...
2020-08-25 07:49:43

Recently Reported IPs

199.241.108.47 122.30.166.86 187.194.70.196 201.129.24.178
35.204.131.63 203.21.214.46 169.242.116.39 52.211.18.158
94.123.77.54 162.251.23.216 93.47.2.217 71.32.12.84
185.244.21.209 40.87.54.20 186.24.240.18 42.51.194.35
173.84.185.123 64.101.24.72 88.122.124.228 218.32.116.2