Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Beijing

Region: Beijing

Country: China

Internet Service Provider: V6Yun (Beijing) Network Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
Invalid user lj from 139.199.204.61 port 59399
2020-07-08 00:38:41
attack
$f2bV_matches
2020-07-01 15:31:27
attack
Jun 12 06:07:43 mail sshd\[7196\]: Invalid user admin from 139.199.204.61
Jun 12 06:07:43 mail sshd\[7196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61
Jun 12 06:07:45 mail sshd\[7196\]: Failed password for invalid user admin from 139.199.204.61 port 51298 ssh2
...
2020-06-12 12:32:46
attackbots
3x Failed Password
2020-06-04 07:44:50
attack
2020-05-21T14:17:58.392776galaxy.wi.uni-potsdam.de sshd[6363]: Invalid user qux from 139.199.204.61 port 52613
2020-05-21T14:17:58.397810galaxy.wi.uni-potsdam.de sshd[6363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61
2020-05-21T14:17:58.392776galaxy.wi.uni-potsdam.de sshd[6363]: Invalid user qux from 139.199.204.61 port 52613
2020-05-21T14:18:00.648807galaxy.wi.uni-potsdam.de sshd[6363]: Failed password for invalid user qux from 139.199.204.61 port 52613 ssh2
2020-05-21T14:20:24.503418galaxy.wi.uni-potsdam.de sshd[6655]: Invalid user ayc from 139.199.204.61 port 36425
2020-05-21T14:20:24.508443galaxy.wi.uni-potsdam.de sshd[6655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61
2020-05-21T14:20:24.503418galaxy.wi.uni-potsdam.de sshd[6655]: Invalid user ayc from 139.199.204.61 port 36425
2020-05-21T14:20:26.467316galaxy.wi.uni-potsdam.de sshd[6655]: Failed password for inval
...
2020-05-21 21:30:40
attackbotsspam
May  7 06:32:21 meumeu sshd[5261]: Failed password for git from 139.199.204.61 port 50579 ssh2
May  7 06:34:48 meumeu sshd[7852]: Failed password for root from 139.199.204.61 port 37583 ssh2
May  7 06:37:10 meumeu sshd[8193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61 
...
2020-05-07 16:55:31
attackspam
Apr 25 07:20:43 home sshd[12333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61
Apr 25 07:20:45 home sshd[12333]: Failed password for invalid user stpi from 139.199.204.61 port 52902 ssh2
Apr 25 07:25:30 home sshd[13011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61
...
2020-04-25 17:36:53
attackbotsspam
SSH login attempts.
2020-03-20 16:08:03
attackspambots
Mar 19 14:00:31 legacy sshd[18895]: Failed password for root from 139.199.204.61 port 46780 ssh2
Mar 19 14:01:46 legacy sshd[18917]: Failed password for root from 139.199.204.61 port 51702 ssh2
Mar 19 14:02:56 legacy sshd[18950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61
...
2020-03-19 22:15:07
attackspambots
2020-02-28T07:38:26.546338linuxbox-skyline sshd[45255]: Invalid user yangzhishuang from 139.199.204.61 port 49785
...
2020-02-28 22:41:02
attackbotsspam
Unauthorized connection attempt detected from IP address 139.199.204.61 to port 2220 [J]
2020-01-17 01:42:08
attackspam
Dec 31 16:24:55 [host] sshd[9262]: Invalid user brac from 139.199.204.61
Dec 31 16:24:55 [host] sshd[9262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61
Dec 31 16:24:57 [host] sshd[9262]: Failed password for invalid user brac from 139.199.204.61 port 37664 ssh2
2020-01-01 00:15:52
attackbots
Dec 31 07:52:05 localhost sshd[25617]: Failed password for invalid user guest from 139.199.204.61 port 33790 ssh2
Dec 31 08:14:40 localhost sshd[26307]: Failed password for invalid user rpm from 139.199.204.61 port 34852 ssh2
Dec 31 08:18:04 localhost sshd[26382]: Failed password for invalid user rayder from 139.199.204.61 port 45922 ssh2
2019-12-31 17:02:51
attack
3x Failed Password
2019-12-25 00:07:02
attackbots
Dec 22 17:57:56 jane sshd[2240]: Failed password for root from 139.199.204.61 port 47972 ssh2
...
2019-12-23 01:12:48
attack
Dec 21 22:36:15 auw2 sshd\[25564\]: Invalid user dhan from 139.199.204.61
Dec 21 22:36:15 auw2 sshd\[25564\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61
Dec 21 22:36:17 auw2 sshd\[25564\]: Failed password for invalid user dhan from 139.199.204.61 port 51071 ssh2
Dec 21 22:41:13 auw2 sshd\[26117\]: Invalid user mid from 139.199.204.61
Dec 21 22:41:13 auw2 sshd\[26117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61
2019-12-22 21:13:03
attackbotsspam
Dec 11 09:32:15 vpn01 sshd[20276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61
Dec 11 09:32:17 vpn01 sshd[20276]: Failed password for invalid user klingman from 139.199.204.61 port 41392 ssh2
...
2019-12-11 17:12:20
attack
Dec  4 10:34:05 sso sshd[12765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61
Dec  4 10:34:07 sso sshd[12765]: Failed password for invalid user athanassiadis from 139.199.204.61 port 46797 ssh2
...
2019-12-04 17:52:32
attackbotsspam
2019-12-04T04:58:00.900141abusebot-7.cloudsearch.cf sshd\[9380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61  user=root
2019-12-04 13:05:47
attack
Nov 24 04:39:32 meumeu sshd[24857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61 
Nov 24 04:39:34 meumeu sshd[24857]: Failed password for invalid user guest from 139.199.204.61 port 33169 ssh2
Nov 24 04:46:40 meumeu sshd[25789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61 
...
2019-11-30 21:48:29
attack
Nov 29 04:29:27 vps46666688 sshd[22863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61
Nov 29 04:29:29 vps46666688 sshd[22863]: Failed password for invalid user Abc@123 from 139.199.204.61 port 37033 ssh2
...
2019-11-29 15:30:48
attackbotsspam
Nov 23 08:30:31 sauna sshd[183357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61
Nov 23 08:30:33 sauna sshd[183357]: Failed password for invalid user ayyuce from 139.199.204.61 port 40361 ssh2
...
2019-11-23 14:43:23
attackspambots
Nov 23 07:54:06 sauna sshd[182803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61
Nov 23 07:54:08 sauna sshd[182803]: Failed password for invalid user dincent from 139.199.204.61 port 40791 ssh2
...
2019-11-23 13:56:06
attackbots
Nov  7 10:29:54 legacy sshd[3170]: Failed password for root from 139.199.204.61 port 60913 ssh2
Nov  7 10:33:58 legacy sshd[3279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.204.61
Nov  7 10:34:00 legacy sshd[3279]: Failed password for invalid user webusr from 139.199.204.61 port 51432 ssh2
...
2019-11-07 20:01:31
attackbotsspam
Automatic report - SSH Brute-Force Attack
2019-11-06 19:15:12
Comments on same subnet:
IP Type Details Datetime
139.199.204.198 attackbots
...
2019-11-20 17:18:08
139.199.204.198 attack
SSH Scan
2019-10-21 23:58:01
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.204.61
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28213
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.204.61.			IN	A

;; AUTHORITY SECTION:
.			374	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110600 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 06 19:15:08 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 61.204.199.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 61.204.199.139.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
144.34.210.56 attack
Invalid user iredadmin from 144.34.210.56 port 45106
2020-06-27 19:23:20
114.41.245.104 attackbotsspam
Honeypot attack, port: 445, PTR: 114-41-245-104.dynamic-ip.hinet.net.
2020-06-27 19:47:32
138.68.158.215 attack
138.68.158.215 - - [27/Jun/2020:12:47:46 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.158.215 - - [27/Jun/2020:12:47:47 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.158.215 - - [27/Jun/2020:12:47:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-27 19:55:46
88.214.26.91 attackbots
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-06-27T11:01:02Z and 2020-06-27T11:31:02Z
2020-06-27 19:52:05
45.141.84.44 attackbots
Jun 27 13:12:32 debian-2gb-nbg1-2 kernel: \[15515004.645899\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.44 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=16016 PROTO=TCP SPT=44948 DPT=9609 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-27 19:15:48
125.212.233.50 attack
5x Failed Password
2020-06-27 19:15:21
60.167.177.28 attack
bruteforce detected
2020-06-27 19:31:19
52.167.211.39 attackspambots
2020-06-26 UTC: (2x) - root(2x)
2020-06-27 19:39:38
36.22.187.34 attackspam
2020-06-26T23:33:00.624203hostname sshd[27214]: Invalid user lqy from 36.22.187.34 port 46076
2020-06-26T23:33:02.784823hostname sshd[27214]: Failed password for invalid user lqy from 36.22.187.34 port 46076 ssh2
2020-06-26T23:37:07.448447hostname sshd[30307]: Invalid user postgres from 36.22.187.34 port 55870
...
2020-06-27 19:19:48
150.109.151.206 attackspambots
 TCP (SYN) 150.109.151.206:44278 -> port 17799, len 44
2020-06-27 19:18:53
67.205.57.152 attackbotsspam
67.205.57.152 - - [27/Jun/2020:11:31:22 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
67.205.57.152 - - [27/Jun/2020:11:31:23 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
67.205.57.152 - - [27/Jun/2020:11:31:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-27 19:38:16
210.219.132.202 attackbotsspam
2020-06-26 22:47:59.216058-0500  localhost smtpd[42407]: NOQUEUE: reject: RCPT from unknown[210.219.132.202]: 554 5.7.1 Service unavailable; Client host [210.219.132.202] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/210.219.132.202 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[210.219.132.202]>
2020-06-27 19:49:40
35.222.194.118 attackbots
2020-06-26T16:34:30.850186hostname sshd[21927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.194.222.35.bc.googleusercontent.com  user=root
2020-06-26T16:34:32.618475hostname sshd[21927]: Failed password for root from 35.222.194.118 port 48152 ssh2
2020-06-26T16:37:59.903343hostname sshd[24809]: Invalid user user9 from 35.222.194.118 port 48450
...
2020-06-27 19:43:24
35.194.70.48 attack
2020-06-27T09:46:05+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)
2020-06-27 19:43:40
117.157.15.27 attackspam
SmallBizIT.US 6 packets to tcp(1433,6380,7002,8088,9200)
2020-06-27 19:34:29

Recently Reported IPs

125.89.255.2 87.123.39.91 129.204.130.77 177.131.163.206
190.177.55.59 197.253.124.218 173.29.207.62 92.48.232.45
176.250.58.199 41.225.16.234 154.83.17.188 97.100.46.232
111.200.197.227 115.120.0.0 150.95.217.109 51.75.124.215
80.116.3.55 154.221.31.118 113.192.123.17 59.126.223.157