139.199.3.160 - IPInfo

Basic Info

City: Beijing

Region: Beijing

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: Shenzhen Tencent Computer Systems Company Limited

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.199.32.22	attackspam	$f2bV_matches	2020-10-14 02:11:32
139.199.32.22	attackbotsspam	fail2ban: brute force SSH detected	2020-10-13 17:24:33
139.199.32.22	attackspam	SSH Bruteforce Attempt on Honeypot	2020-10-12 23:33:50
139.199.32.22	attackbots	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "duncan" at 2020-10-12T06:16:36Z	2020-10-12 14:57:42
139.199.30.155	attack	"fail2ban match"	2020-10-12 05:46:56
139.199.30.155	attackbots	'Fail2Ban'	2020-10-11 21:54:03
139.199.30.155	attackbotsspam	Failed password for invalid user zjw from 139.199.30.155 port 51014 ssh2	2020-10-11 13:50:50
139.199.35.168	attackbots	bruteforce detected	2020-10-09 07:03:23
139.199.35.168	attackspambots	Oct 8 16:17:08 ms-srv sshd[54672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.168 user=root Oct 8 16:17:10 ms-srv sshd[54672]: Failed password for invalid user root from 139.199.35.168 port 34326 ssh2	2020-10-08 23:29:04
139.199.35.168	attack	2020-10-07 18:04:49.238980-0500 localhost sshd[92592]: Failed password for root from 139.199.35.168 port 49076 ssh2	2020-10-08 15:25:05
139.199.32.22	attack	Sep 21 15:22:47 eventyay sshd[22358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.32.22 Sep 21 15:22:49 eventyay sshd[22358]: Failed password for invalid user sftp from 139.199.32.22 port 39036 ssh2 Sep 21 15:25:41 eventyay sshd[22395]: Failed password for root from 139.199.32.22 port 44058 ssh2 ...	2020-09-21 22:10:09
139.199.32.22	attackbotsspam	2020-09-21T01:04:04.910546abusebot.cloudsearch.cf sshd[20975]: Invalid user mysql from 139.199.32.22 port 39816 2020-09-21T01:04:04.915784abusebot.cloudsearch.cf sshd[20975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.32.22 2020-09-21T01:04:04.910546abusebot.cloudsearch.cf sshd[20975]: Invalid user mysql from 139.199.32.22 port 39816 2020-09-21T01:04:07.088345abusebot.cloudsearch.cf sshd[20975]: Failed password for invalid user mysql from 139.199.32.22 port 39816 ssh2 2020-09-21T01:09:58.888117abusebot.cloudsearch.cf sshd[21034]: Invalid user teste from 139.199.32.22 port 49338 2020-09-21T01:09:58.895068abusebot.cloudsearch.cf sshd[21034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.32.22 2020-09-21T01:09:58.888117abusebot.cloudsearch.cf sshd[21034]: Invalid user teste from 139.199.32.22 port 49338 2020-09-21T01:10:01.664622abusebot.cloudsearch.cf sshd[21034]: Failed password for in ...	2020-09-21 13:57:29
139.199.32.22	attackspam	Sep 20 22:30:56 rocket sshd[16181]: Failed password for root from 139.199.32.22 port 40824 ssh2 Sep 20 22:36:38 rocket sshd[17050]: Failed password for root from 139.199.32.22 port 48566 ssh2 ...	2020-09-21 05:46:03
139.199.32.57	attackspambots	Brute-force attempt banned	2020-09-20 23:42:20
139.199.32.57	attackspam	SSH bruteforce	2020-09-20 15:31:47

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.3.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57205
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.3.160.			IN	A

;; AUTHORITY SECTION:
.			3364	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019032802 1800 900 604800 86400

;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 29 03:17:58 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 160.3.199.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 160.3.199.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
165.22.23.66	attackbots	Jul 19 07:59:48 ArkNodeAT sshd\[13960\]: Invalid user demo from 165.22.23.66 Jul 19 07:59:48 ArkNodeAT sshd\[13960\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.23.66 Jul 19 07:59:50 ArkNodeAT sshd\[13960\]: Failed password for invalid user demo from 165.22.23.66 port 52828 ssh2	2019-07-19 16:12:19
88.227.13.109	attackspam	Lines containing failures of 88.227.13.109 Jul 17 15:14:02 server-name sshd[15037]: Invalid user gpadmin from 88.227.13.109 port 48430 Jul 17 15:14:02 server-name sshd[15037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.227.13.109 Jul 17 15:14:04 server-name sshd[15037]: Failed password for invalid user gpadmin from 88.227.13.109 port 48430 ssh2 Jul 17 15:14:05 server-name sshd[15037]: Received disconnect from 88.227.13.109 port 48430:11: Bye Bye [preauth] Jul 17 15:14:05 server-name sshd[15037]: Disconnected from invalid user gpadmin 88.227.13.109 port 48430 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=88.227.13.109	2019-07-19 16:27:29
40.112.65.88	attackspambots	Jul 19 10:19:51 legacy sshd[29568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.112.65.88 Jul 19 10:19:53 legacy sshd[29568]: Failed password for invalid user sicher from 40.112.65.88 port 54204 ssh2 Jul 19 10:25:15 legacy sshd[29718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.112.65.88 ...	2019-07-19 16:27:59
37.34.186.150	attack	firewall-block, port(s): 23/tcp	2019-07-19 15:54:21
216.45.23.6	attackbotsspam	Jul 19 10:33:24 eventyay sshd[1762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.45.23.6 Jul 19 10:33:26 eventyay sshd[1762]: Failed password for invalid user intro1 from 216.45.23.6 port 38882 ssh2 Jul 19 10:38:48 eventyay sshd[3332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.45.23.6 ...	2019-07-19 16:43:08
203.95.193.192	attackspam	RDP brute forcing (d)	2019-07-19 15:58:50
140.143.236.53	attackspam	Jul 19 07:49:14 mail sshd\[19730\]: Invalid user student from 140.143.236.53\ Jul 19 07:49:16 mail sshd\[19730\]: Failed password for invalid user student from 140.143.236.53 port 52026 ssh2\ Jul 19 07:53:49 mail sshd\[19765\]: Invalid user testwww from 140.143.236.53\ Jul 19 07:53:51 mail sshd\[19765\]: Failed password for invalid user testwww from 140.143.236.53 port 41567 ssh2\ Jul 19 07:58:18 mail sshd\[19794\]: Invalid user wangy from 140.143.236.53\ Jul 19 07:58:20 mail sshd\[19794\]: Failed password for invalid user wangy from 140.143.236.53 port 59339 ssh2\	2019-07-19 16:44:46
50.67.178.164	attackbotsspam	Jul 19 10:26:16 legacy sshd[29779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.67.178.164 Jul 19 10:26:18 legacy sshd[29779]: Failed password for invalid user ftp_user from 50.67.178.164 port 36386 ssh2 Jul 19 10:33:41 legacy sshd[30044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.67.178.164 ...	2019-07-19 16:41:02
61.158.140.152	attackspambots	Jul 19 00:59:11 mailman dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=, method=PLAIN, rip=61.158.140.152, lip=[munged], TLS: Disconnected	2019-07-19 16:21:46
129.28.57.8	attackspambots	Jul 19 03:59:28 TORMINT sshd\[2574\]: Invalid user bbb from 129.28.57.8 Jul 19 03:59:28 TORMINT sshd\[2574\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.57.8 Jul 19 03:59:30 TORMINT sshd\[2574\]: Failed password for invalid user bbb from 129.28.57.8 port 52604 ssh2 ...	2019-07-19 16:15:17
178.128.55.52	attack	Jul 19 09:52:27 amit sshd\[23491\]: Invalid user zeus from 178.128.55.52 Jul 19 09:52:27 amit sshd\[23491\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.55.52 Jul 19 09:52:29 amit sshd\[23491\]: Failed password for invalid user zeus from 178.128.55.52 port 39304 ssh2 ...	2019-07-19 16:00:10
178.33.236.23	attack	Jul 19 10:04:05 MK-Soft-Root1 sshd\[27872\]: Invalid user prueba from 178.33.236.23 port 34298 Jul 19 10:04:05 MK-Soft-Root1 sshd\[27872\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.236.23 Jul 19 10:04:07 MK-Soft-Root1 sshd\[27872\]: Failed password for invalid user prueba from 178.33.236.23 port 34298 ssh2 ...	2019-07-19 16:26:29
61.19.72.46	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-19 04:34:26,880 INFO [amun_request_handler] PortScan Detected on Port: 445 (61.19.72.46)	2019-07-19 16:54:09
173.249.21.204	attackbotsspam	173.249.21.204 - - [19/Jul/2019:07:58:30 +0200] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 173.249.21.204 - - [19/Jul/2019:07:58:30 +0200] "GET /wp-login.php HTTP/1.1" 404 93 "http://netpixeldesign.net/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-07-19 16:37:10
179.197.82.192	attackspambots	RDP Bruteforce	2019-07-19 16:50:39

Recently Reported IPs

109.252.231.164	185.255.76.147	171.221.253.69	106.13.1.180
99.37.246.236	151.84.105.118	41.45.146.34	185.238.136.158
167.99.220.184	77.95.93.126	79.178.35.68	31.173.231.42
14.225.3.37	5.39.79.48	118.24.83.41	45.117.83.118
202.105.136.92	54.245.73.21	54.37.154.254	192.99.145.83