139.199.35.66 - IPInfo

Basic Info

City: Beijing

Region: Beijing

Country: China

Internet Service Provider: V6Yun (Beijing) Network Co. Ltd

Hostname: unknown

Organization: Shenzhen Tencent Computer Systems Company Limited

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Nov 25 12:00:55 localhost sshd\[77448\]: Invalid user furukawa from 139.199.35.66 port 40592 Nov 25 12:00:55 localhost sshd\[77448\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.66 Nov 25 12:00:57 localhost sshd\[77448\]: Failed password for invalid user furukawa from 139.199.35.66 port 40592 ssh2 Nov 25 12:09:06 localhost sshd\[77754\]: Invalid user b from 139.199.35.66 port 46498 Nov 25 12:09:06 localhost sshd\[77754\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.66 ...	2019-11-25 20:12:15
attackspam	SSH Brute Force, server-1 sshd[18227]: Failed password for root from 139.199.35.66 port 42478 ssh2	2019-11-22 08:27:18
attack	Nov 19 13:54:23 legacy sshd[17314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.66 Nov 19 13:54:24 legacy sshd[17314]: Failed password for invalid user Design123 from 139.199.35.66 port 52138 ssh2 Nov 19 13:59:44 legacy sshd[17437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.66 ...	2019-11-20 02:21:18
attackbots	Repeated brute force against a port	2019-11-12 18:56:49
attack	Nov 9 22:46:26 web1 sshd\[25838\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.66 user=root Nov 9 22:46:28 web1 sshd\[25838\]: Failed password for root from 139.199.35.66 port 51762 ssh2 Nov 9 22:50:33 web1 sshd\[26180\]: Invalid user niclas from 139.199.35.66 Nov 9 22:50:33 web1 sshd\[26180\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.66 Nov 9 22:50:35 web1 sshd\[26180\]: Failed password for invalid user niclas from 139.199.35.66 port 53034 ssh2	2019-11-10 16:52:03
attackbots	Automatic report - Banned IP Access	2019-11-10 08:30:36
attackbotsspam	$f2bV_matches	2019-11-08 08:05:05
attackbotsspam	5x Failed Password	2019-10-29 20:28:42
attackbots	Oct 15 18:39:21 sachi sshd\[3071\]: Invalid user login from 139.199.35.66 Oct 15 18:39:21 sachi sshd\[3071\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.66 Oct 15 18:39:22 sachi sshd\[3071\]: Failed password for invalid user login from 139.199.35.66 port 54904 ssh2 Oct 15 18:44:47 sachi sshd\[3540\]: Invalid user noc from 139.199.35.66 Oct 15 18:44:47 sachi sshd\[3540\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.66	2019-10-16 14:10:17
attackspam	2019-09-28T04:29:12.841174abusebot-2.cloudsearch.cf sshd\[31895\]: Invalid user z from 139.199.35.66 port 37436	2019-09-28 12:51:25
attack	Sep 7 15:27:02 OPSO sshd\[30871\]: Invalid user dbuser from 139.199.35.66 port 53690 Sep 7 15:27:02 OPSO sshd\[30871\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.66 Sep 7 15:27:05 OPSO sshd\[30871\]: Failed password for invalid user dbuser from 139.199.35.66 port 53690 ssh2 Sep 7 15:32:12 OPSO sshd\[31860\]: Invalid user sysadmin from 139.199.35.66 port 57634 Sep 7 15:32:12 OPSO sshd\[31860\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.66	2019-09-07 21:40:09
attackspam	Sep 6 15:29:34 pornomens sshd\[22741\]: Invalid user support from 139.199.35.66 port 56070 Sep 6 15:29:34 pornomens sshd\[22741\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.66 Sep 6 15:29:35 pornomens sshd\[22741\]: Failed password for invalid user support from 139.199.35.66 port 56070 ssh2 ...	2019-09-06 21:40:47
attackbots	Sep 4 00:27:07 markkoudstaal sshd[17015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.66 Sep 4 00:27:09 markkoudstaal sshd[17015]: Failed password for invalid user secretar from 139.199.35.66 port 53762 ssh2 Sep 4 00:32:03 markkoudstaal sshd[17557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.66	2019-09-04 06:32:37
attack	SSH Brute-Force on port 22	2019-07-31 18:24:11
attack	Jul 30 08:35:19 mail sshd\[23114\]: Invalid user mpws from 139.199.35.66 port 57922 Jul 30 08:35:19 mail sshd\[23114\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.66 ...	2019-07-30 16:54:49
attack	Invalid user dw from 139.199.35.66 port 57110	2019-07-13 19:21:48
attackbots	Jul 10 20:58:01 apollo sshd\[30088\]: Invalid user ishihara from 139.199.35.66Jul 10 20:58:03 apollo sshd\[30088\]: Failed password for invalid user ishihara from 139.199.35.66 port 57974 ssh2Jul 10 21:08:10 apollo sshd\[30194\]: Invalid user lefty from 139.199.35.66 ...	2019-07-11 04:26:14
attackspambots	20 attempts against mh-ssh on field.magehost.pro	2019-06-23 21:48:08
attack	20 attempts against mh-ssh on lunar.magehost.pro	2019-06-23 17:35:33

Comments on same subnet:

IP	Type	Details	Datetime
139.199.35.168	attackbots	bruteforce detected	2020-10-09 07:03:23
139.199.35.168	attackspambots	Oct 8 16:17:08 ms-srv sshd[54672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.168 user=root Oct 8 16:17:10 ms-srv sshd[54672]: Failed password for invalid user root from 139.199.35.168 port 34326 ssh2	2020-10-08 23:29:04
139.199.35.168	attack	2020-10-07 18:04:49.238980-0500 localhost sshd[92592]: Failed password for root from 139.199.35.168 port 49076 ssh2	2020-10-08 15:25:05

Type

Details

Datetime

139.199.35.168

attackbots

bruteforce detected

2020-10-09 07:03:23

139.199.35.168

attackspambots

Oct  8 16:17:08 ms-srv sshd[54672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.168  user=root
Oct  8 16:17:10 ms-srv sshd[54672]: Failed password for invalid user root from 139.199.35.168 port 34326 ssh2

2020-10-08 23:29:04

139.199.35.168

attack

2020-10-07 18:04:49.238980-0500  localhost sshd[92592]: Failed password for root from 139.199.35.168 port 49076 ssh2

2020-10-08 15:25:05

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.35.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2148
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.35.66.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062300 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jun 23 17:35:20 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 66.35.199.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 66.35.199.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
68.183.193.148	attackspambots	20 attempts against mh-ssh on cloud	2020-04-27 06:21:24
132.232.52.86	attack	Invalid user eve from 132.232.52.86 port 40702	2020-04-27 06:16:27
222.252.16.153	attackbots	(imapd) Failed IMAP login from 222.252.16.153 (VN/Vietnam/static.vnpt-hanoi.com.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 27 01:09:13 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=222.252.16.153, lip=5.63.12.44, session=<4SoKlzek/dne/BCZ>	2020-04-27 06:08:15
200.70.56.204	attackbotsspam	(sshd) Failed SSH login from 200.70.56.204 (AR/Argentina/host204.advance.com.ar): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 26 23:36:11 srv sshd[25537]: Invalid user sxx from 200.70.56.204 port 41844 Apr 26 23:36:13 srv sshd[25537]: Failed password for invalid user sxx from 200.70.56.204 port 41844 ssh2 Apr 26 23:42:41 srv sshd[26232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.70.56.204 user=root Apr 26 23:42:43 srv sshd[26232]: Failed password for root from 200.70.56.204 port 37012 ssh2 Apr 26 23:44:44 srv sshd[26464]: Invalid user github from 200.70.56.204 port 37446	2020-04-27 06:13:59
159.192.146.250	attackspam	Scan & Hack	2020-04-27 06:39:54
194.79.8.229	attack	Apr 26 22:33:18 v22019038103785759 sshd\[16574\]: Invalid user postgres from 194.79.8.229 port 49892 Apr 26 22:33:18 v22019038103785759 sshd\[16574\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.79.8.229 Apr 26 22:33:20 v22019038103785759 sshd\[16574\]: Failed password for invalid user postgres from 194.79.8.229 port 49892 ssh2 Apr 26 22:38:53 v22019038103785759 sshd\[16897\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.79.8.229 user=root Apr 26 22:38:56 v22019038103785759 sshd\[16897\]: Failed password for root from 194.79.8.229 port 34396 ssh2 ...	2020-04-27 06:24:30
138.68.233.112	attackspam	138.68.233.112 - - [26/Apr/2020:22:39:12 +0200] "POST /wp-login.php HTTP/1.1" 200 3405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [26/Apr/2020:22:39:16 +0200] "POST /wp-login.php HTTP/1.1" 200 3404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-04-27 06:09:27
40.88.137.158	attack	Hacking activity	2020-04-27 06:36:14
42.176.57.166	attackbotsspam	trying to access non-authorized port	2020-04-27 06:38:35
92.118.38.83	attack	2020-04-27 01:13:21 dovecot_login authenticator failed for $User$ \[92.118.38.83\]: 535 Incorrect authentication data $set_id=faith@org.ua$2020-04-27 01:13:52 dovecot_login authenticator failed for $User$ \[92.118.38.83\]: 535 Incorrect authentication data $set_id=lela@org.ua$2020-04-27 01:14:25 dovecot_login authenticator failed for $User$ \[92.118.38.83\]: 535 Incorrect authentication data $set_id=johanna@org.ua$ ...	2020-04-27 06:21:44
192.144.166.95	attackbots	2020-04-26T23:47:21.440326vps773228.ovh.net sshd[29152]: Invalid user joni from 192.144.166.95 port 33892 2020-04-26T23:47:21.458437vps773228.ovh.net sshd[29152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.166.95 2020-04-26T23:47:21.440326vps773228.ovh.net sshd[29152]: Invalid user joni from 192.144.166.95 port 33892 2020-04-26T23:47:23.648666vps773228.ovh.net sshd[29152]: Failed password for invalid user joni from 192.144.166.95 port 33892 ssh2 2020-04-26T23:51:17.301027vps773228.ovh.net sshd[29178]: Invalid user bs from 192.144.166.95 port 49902 ...	2020-04-27 06:03:07
185.216.140.252	attackbotsspam	04/26/2020-18:23:29.012362 185.216.140.252 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-04-27 06:34:23
3.13.97.100	attackspam	Apr 26 21:39:14 sigma sshd\[24579\]: Invalid user developer from 3.13.97.100Apr 26 21:39:16 sigma sshd\[24579\]: Failed password for invalid user developer from 3.13.97.100 port 50872 ssh2 ...	2020-04-27 06:11:16
103.86.134.194	attack	Apr 26 22:41:19 vmd48417 sshd[29333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.86.134.194	2020-04-27 06:28:43
217.182.94.110	attackspam	2020-04-26T14:39:23.747195linuxbox-skyline sshd[91256]: Invalid user happy from 217.182.94.110 port 59984 ...	2020-04-27 06:05:27

Recently Reported IPs

172.96.116.149	191.167.86.167	36.212.53.182	115.87.109.146
5.39.174.138	53.247.67.184	119.29.181.246	118.25.124.210
40.80.17.61	78.27.159.206	190.131.169.99	104.95.103.60
107.159.116.162	106.75.7.70	131.144.212.159	79.23.14.145
79.245.216.179	31.68.3.17	67.193.171.116	78.82.226.168