139.199.23.242

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: V6Yun (Beijing) Network Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	May 31 22:03:42 server1 sshd\[1933\]: Invalid user P@sSW0RD\r from 139.199.23.242 May 31 22:03:42 server1 sshd\[1933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.242 May 31 22:03:44 server1 sshd\[1933\]: Failed password for invalid user P@sSW0RD\r from 139.199.23.242 port 49154 ssh2 May 31 22:08:32 server1 sshd\[3247\]: Invalid user PAsSwOrD\r from 139.199.23.242 May 31 22:08:32 server1 sshd\[3247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.242 ...	2020-06-01 12:13:51
attackbots	Apr 1 05:40:04 srv-ubuntu-dev3 sshd[110265]: Invalid user Aa#1234 from 139.199.23.242 Apr 1 05:40:04 srv-ubuntu-dev3 sshd[110265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.242 Apr 1 05:40:04 srv-ubuntu-dev3 sshd[110265]: Invalid user Aa#1234 from 139.199.23.242 Apr 1 05:40:05 srv-ubuntu-dev3 sshd[110265]: Failed password for invalid user Aa#1234 from 139.199.23.242 port 58422 ssh2 Apr 1 05:44:54 srv-ubuntu-dev3 sshd[111023]: Invalid user 123456 from 139.199.23.242 Apr 1 05:44:54 srv-ubuntu-dev3 sshd[111023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.242 Apr 1 05:44:54 srv-ubuntu-dev3 sshd[111023]: Invalid user 123456 from 139.199.23.242 Apr 1 05:44:56 srv-ubuntu-dev3 sshd[111023]: Failed password for invalid user 123456 from 139.199.23.242 port 36164 ssh2 Apr 1 05:49:48 srv-ubuntu-dev3 sshd[111844]: Invalid user Test!2# from 139.199.23.242 ...	2020-04-01 17:17:01
attackspambots	Mar 10 21:51:49 server sshd\[20163\]: Invalid user ishihara from 139.199.23.242 Mar 10 21:51:49 server sshd\[20163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.242 Mar 10 21:51:51 server sshd\[20163\]: Failed password for invalid user ishihara from 139.199.23.242 port 36998 ssh2 Mar 10 21:56:35 server sshd\[21132\]: Invalid user HTTP from 139.199.23.242 Mar 10 21:56:35 server sshd\[21132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.242 ...	2020-03-11 05:07:53

Type

Details

Datetime

attack

May 31 22:03:42 server1 sshd\[1933\]: Invalid user P@sSW0RD\r from 139.199.23.242
May 31 22:03:42 server1 sshd\[1933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.242 
May 31 22:03:44 server1 sshd\[1933\]: Failed password for invalid user P@sSW0RD\r from 139.199.23.242 port 49154 ssh2
May 31 22:08:32 server1 sshd\[3247\]: Invalid user PAsSwOrD\r from 139.199.23.242
May 31 22:08:32 server1 sshd\[3247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.242 
...

2020-06-01 12:13:51

attackbots

Apr  1 05:40:04 srv-ubuntu-dev3 sshd[110265]: Invalid user Aa#1234 from 139.199.23.242
Apr  1 05:40:04 srv-ubuntu-dev3 sshd[110265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.242
Apr  1 05:40:04 srv-ubuntu-dev3 sshd[110265]: Invalid user Aa#1234 from 139.199.23.242
Apr  1 05:40:05 srv-ubuntu-dev3 sshd[110265]: Failed password for invalid user Aa#1234 from 139.199.23.242 port 58422 ssh2
Apr  1 05:44:54 srv-ubuntu-dev3 sshd[111023]: Invalid user 123456 from 139.199.23.242
Apr  1 05:44:54 srv-ubuntu-dev3 sshd[111023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.242
Apr  1 05:44:54 srv-ubuntu-dev3 sshd[111023]: Invalid user 123456 from 139.199.23.242
Apr  1 05:44:56 srv-ubuntu-dev3 sshd[111023]: Failed password for invalid user 123456 from 139.199.23.242 port 36164 ssh2
Apr  1 05:49:48 srv-ubuntu-dev3 sshd[111844]: Invalid user Test!2# from 139.199.23.242
...

2020-04-01 17:17:01

attackspambots

Mar 10 21:51:49 server sshd\[20163\]: Invalid user ishihara from 139.199.23.242
Mar 10 21:51:49 server sshd\[20163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.242 
Mar 10 21:51:51 server sshd\[20163\]: Failed password for invalid user ishihara from 139.199.23.242 port 36998 ssh2
Mar 10 21:56:35 server sshd\[21132\]: Invalid user HTTP from 139.199.23.242
Mar 10 21:56:35 server sshd\[21132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.242 
...

2020-03-11 05:07:53

Comments on same subnet:

IP	Type	Details	Datetime
139.199.23.233	attack	Sep 16 16:56:48 124388 sshd[11455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.233 Sep 16 16:56:48 124388 sshd[11455]: Invalid user teacher from 139.199.23.233 port 47650 Sep 16 16:56:49 124388 sshd[11455]: Failed password for invalid user teacher from 139.199.23.233 port 47650 ssh2 Sep 16 17:00:26 124388 sshd[11757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.233 user=root Sep 16 17:00:28 124388 sshd[11757]: Failed password for root from 139.199.23.233 port 59268 ssh2	2020-09-17 22:43:02
139.199.23.233	attack	Sep 16 16:56:48 124388 sshd[11455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.233 Sep 16 16:56:48 124388 sshd[11455]: Invalid user teacher from 139.199.23.233 port 47650 Sep 16 16:56:49 124388 sshd[11455]: Failed password for invalid user teacher from 139.199.23.233 port 47650 ssh2 Sep 16 17:00:26 124388 sshd[11757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.233 user=root Sep 16 17:00:28 124388 sshd[11757]: Failed password for root from 139.199.23.233 port 59268 ssh2	2020-09-17 14:50:14
139.199.23.233	attackbots	Sep 16 16:56:48 124388 sshd[11455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.233 Sep 16 16:56:48 124388 sshd[11455]: Invalid user teacher from 139.199.23.233 port 47650 Sep 16 16:56:49 124388 sshd[11455]: Failed password for invalid user teacher from 139.199.23.233 port 47650 ssh2 Sep 16 17:00:26 124388 sshd[11757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.233 user=root Sep 16 17:00:28 124388 sshd[11757]: Failed password for root from 139.199.23.233 port 59268 ssh2	2020-09-17 05:59:04
139.199.23.233	attack	(sshd) Failed SSH login from 139.199.23.233 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 4 15:07:53 server sshd[22114]: Invalid user tom from 139.199.23.233 port 54698 Sep 4 15:07:55 server sshd[22114]: Failed password for invalid user tom from 139.199.23.233 port 54698 ssh2 Sep 4 15:13:05 server sshd[23634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.233 user=root Sep 4 15:13:07 server sshd[23634]: Failed password for root from 139.199.23.233 port 50300 ssh2 Sep 4 15:17:38 server sshd[24814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.233 user=root	2020-09-05 04:24:10
139.199.23.233	attackbotsspam	$f2bV_matches	2020-09-04 19:59:25
139.199.23.233	attack	Aug 23 23:27:53 XXX sshd[22170]: Invalid user limpa from 139.199.23.233 port 48952	2020-08-24 09:16:57
139.199.23.233	attack	Aug 11 12:45:42 webhost01 sshd[31780]: Failed password for root from 139.199.23.233 port 54928 ssh2 ...	2020-08-11 14:47:07
139.199.23.233	attackbotsspam	Aug 10 11:13:45 vm0 sshd[15252]: Failed password for root from 139.199.23.233 port 42618 ssh2 ...	2020-08-10 19:21:50
139.199.23.233	attack	$f2bV_matches	2020-08-04 17:17:26
139.199.23.233	attack	Aug 3 11:24:08 vps46666688 sshd[26944]: Failed password for root from 139.199.23.233 port 36018 ssh2 ...	2020-08-04 02:25:08
139.199.23.233	attack	Jul 31 14:03:39 amit sshd\[13562\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.233 user=root Jul 31 14:03:41 amit sshd\[13562\]: Failed password for root from 139.199.23.233 port 57458 ssh2 Jul 31 14:10:28 amit sshd\[18021\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.233 user=root ...	2020-07-31 21:07:05
139.199.23.233	attack	Jul 27 01:58:40 firewall sshd[27488]: Invalid user zain from 139.199.23.233 Jul 27 01:58:42 firewall sshd[27488]: Failed password for invalid user zain from 139.199.23.233 port 40494 ssh2 Jul 27 02:02:49 firewall sshd[27590]: Invalid user admin from 139.199.23.233 ...	2020-07-27 14:02:42
139.199.23.233	attackspam	Jun 17 18:25:41 gw1 sshd[21791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.233 Jun 17 18:25:44 gw1 sshd[21791]: Failed password for invalid user jenifer from 139.199.23.233 port 51916 ssh2 ...	2020-06-17 21:34:08
139.199.23.233	attackbots	Jun 14 18:16:17 ny01 sshd[23907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.233 Jun 14 18:16:20 ny01 sshd[23907]: Failed password for invalid user mysql from 139.199.23.233 port 49110 ssh2 Jun 14 18:21:16 ny01 sshd[24551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.23.233	2020-06-15 10:11:18
139.199.23.233	attackbotsspam	sshd	2020-06-13 23:39:02

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.23.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11102
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.23.242.			IN	A

;; AUTHORITY SECTION:
.			490	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031001 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 11 05:07:50 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 242.23.199.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 242.23.199.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.228.137.6	attackspambots	Invalid user water from 45.228.137.6 port 45969	2019-07-11 13:16:33
223.204.12.159	attackbots	Unauthorized connection attempt from IP address 223.204.12.159 on Port 445(SMB)	2019-07-11 13:17:28
84.1.150.12	attackbotsspam	Jul 11 06:02:57 * sshd[11912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.1.150.12 Jul 11 06:02:59 * sshd[11912]: Failed password for invalid user user from 84.1.150.12 port 59722 ssh2	2019-07-11 12:22:09
201.7.227.242	attack	DATE:2019-07-11 06:01:02, IP:201.7.227.242, PORT:ssh SSH brute force auth (ermes)	2019-07-11 13:11:47
180.124.123.236	attackbotsspam	CN - - SPAM FROM wpouw@stui.com	2019-07-11 13:00:33
115.165.0.224	attackbotsspam	Jul 11 04:25:06 marvibiene sshd[43889]: Invalid user admin from 115.165.0.224 port 41284 Jul 11 04:25:06 marvibiene sshd[43889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.165.0.224 Jul 11 04:25:06 marvibiene sshd[43889]: Invalid user admin from 115.165.0.224 port 41284 Jul 11 04:25:08 marvibiene sshd[43889]: Failed password for invalid user admin from 115.165.0.224 port 41284 ssh2 ...	2019-07-11 12:30:26
91.218.175.14	attack	Automatic report - Web App Attack	2019-07-11 12:34:38
221.237.164.20	attackbots	Brute forcing RDP port 3389	2019-07-11 13:08:52
117.196.80.253	attackbots	Unauthorized connection attempt from IP address 117.196.80.253 on Port 445(SMB)	2019-07-11 13:03:40
91.238.248.251	attackspambots	[portscan] Port scan	2019-07-11 12:34:18
61.41.159.29	attack	Jul 11 03:49:00 XXXXXX sshd[58988]: Invalid user anita from 61.41.159.29 port 39982	2019-07-11 13:11:03
176.126.83.22	attackbotsspam	\[2019-07-11 06:00:39\] NOTICE\[5109\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '176.126.83.22:1342' $callid: 594772244-171188596-661381393$ - Failed to authenticate \[2019-07-11 06:00:39\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-11T06:00:39.763+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="594772244-171188596-661381393",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/176.126.83.22/1342",Challenge="1562817639/e7b7e9042af6eb6ff5840551db30d5ff",Response="32acb31c2ac944806a34fb7446c46292",ExpectedResponse="" \[2019-07-11 06:00:39\] NOTICE\[9010\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '176.126.83.22:1342' $callid: 594772244-171188596-661381393$ - Failed to authenticate \[2019-07-11 06:00:39\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",	2019-07-11 12:44:03
99.198.226.62	attackbotsspam	Jul 11 06:59:01 hosting sshd[29417]: Invalid user analytics from 99.198.226.62 port 49452 Jul 11 06:59:01 hosting sshd[29417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=99.198.226.62 Jul 11 06:59:01 hosting sshd[29417]: Invalid user analytics from 99.198.226.62 port 49452 Jul 11 06:59:03 hosting sshd[29417]: Failed password for invalid user analytics from 99.198.226.62 port 49452 ssh2 Jul 11 07:01:41 hosting sshd[29782]: Invalid user fabiana from 99.198.226.62 port 52130 ...	2019-07-11 12:33:25
210.213.148.130	attackbots	firewall-block, port(s): 445/tcp	2019-07-11 12:49:30
123.16.61.152	attackbots	Unauthorized connection attempt from IP address 123.16.61.152 on Port 445(SMB)	2019-07-11 12:54:35

Recently Reported IPs

193.92.166.180	170.205.101.69	174.185.29.179	101.211.205.129
2.168.27.179	193.164.217.54	102.173.67.131	182.7.18.222
67.205.129.236	97.191.130.251	52.54.219.154	193.248.106.93
14.186.249.162	42.72.251.168	152.20.250.109	5.179.108.179
27.44.63.40	12.25.143.30	59.92.204.224	68.59.202.244