139.199.72.111

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.199.72.129	attackspambots	Aug 24 05:52:00 kh-dev-server sshd[14626]: Failed password for root from 139.199.72.129 port 62678 ssh2 ...	2020-08-24 16:45:58
139.199.72.129	attackbots	Aug 20 05:59:12 sip sshd[1365021]: Invalid user files from 139.199.72.129 port 27045 Aug 20 05:59:13 sip sshd[1365021]: Failed password for invalid user files from 139.199.72.129 port 27045 ssh2 Aug 20 06:05:57 sip sshd[1365159]: Invalid user zv from 139.199.72.129 port 37638 ...	2020-08-20 12:16:18
139.199.72.129	attackspam	Aug 8 16:16:24 gospond sshd[21848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.72.129 user=root Aug 8 16:16:26 gospond sshd[21848]: Failed password for root from 139.199.72.129 port 43097 ssh2 ...	2020-08-09 04:07:31
139.199.72.129	attackspam	Aug 7 18:21:01 sshgateway sshd\[5916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.72.129 user=root Aug 7 18:21:03 sshgateway sshd\[5916\]: Failed password for root from 139.199.72.129 port 40597 ssh2 Aug 7 18:25:46 sshgateway sshd\[5952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.72.129 user=root	2020-08-08 00:38:20
139.199.72.129	attack	Jul 23 15:03:40 * sshd[2175]: Failed password for mysql from 139.199.72.129 port 62006 ssh2 Jul 23 15:08:15 * sshd[2498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.72.129	2020-07-23 21:23:45
139.199.72.129	attack	Jul 20 07:33:43 dignus sshd[31606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.72.129 Jul 20 07:33:44 dignus sshd[31606]: Failed password for invalid user al from 139.199.72.129 port 64429 ssh2 Jul 20 07:39:41 dignus sshd[32514]: Invalid user admin from 139.199.72.129 port 14961 Jul 20 07:39:41 dignus sshd[32514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.72.129 Jul 20 07:39:44 dignus sshd[32514]: Failed password for invalid user admin from 139.199.72.129 port 14961 ssh2 ...	2020-07-20 23:02:43
139.199.72.129	attackbotsspam	Jul 4 16:24:05 h1745522 sshd[32640]: Invalid user hadoop from 139.199.72.129 port 44770 Jul 4 16:24:05 h1745522 sshd[32640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.72.129 Jul 4 16:24:05 h1745522 sshd[32640]: Invalid user hadoop from 139.199.72.129 port 44770 Jul 4 16:24:07 h1745522 sshd[32640]: Failed password for invalid user hadoop from 139.199.72.129 port 44770 ssh2 Jul 4 16:27:34 h1745522 sshd[394]: Invalid user ryan from 139.199.72.129 port 27487 Jul 4 16:27:34 h1745522 sshd[394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.72.129 Jul 4 16:27:34 h1745522 sshd[394]: Invalid user ryan from 139.199.72.129 port 27487 Jul 4 16:27:37 h1745522 sshd[394]: Failed password for invalid user ryan from 139.199.72.129 port 27487 ssh2 Jul 4 16:31:08 h1745522 sshd[586]: Invalid user test from 139.199.72.129 port 10198 ...	2020-07-04 22:53:31
139.199.72.40	attackspam	Jul 17 09:08:04 diego dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=139.199.72.40, lip=172.104.242.163, TLS: Disconnected, session=\ ...	2019-07-17 18:14:40
139.199.72.40	attackbots	Brute force SMTP login attempted. ...	2019-07-09 01:43:10
139.199.72.40	attack	TCP port 993 (IMAP) attempt blocked by hMailServer IP-check. Abuse score 63%	2019-07-06 11:15:44

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.72.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53155
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.199.72.111.			IN	A

;; AUTHORITY SECTION:
.			596	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:21:47 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 111.72.199.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 111.72.199.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.232.30.130	attack	TCP (SYN) 185.232.30.130:58386 -> port 33389, len 44	2020-08-16 16:05:16
35.189.123.190	attack	Aug 16 00:24:16 george sshd[1337]: Failed password for invalid user 123 from 35.189.123.190 port 36352 ssh2 Aug 16 00:25:39 george sshd[2696]: Invalid user #EFVcft6 from 35.189.123.190 port 51452 Aug 16 00:25:39 george sshd[2696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.189.123.190 Aug 16 00:25:42 george sshd[2696]: Failed password for invalid user #EFVcft6 from 35.189.123.190 port 51452 ssh2 Aug 16 00:27:07 george sshd[3034]: Invalid user mimacuowu from 35.189.123.190 port 38292 ...	2020-08-16 15:44:36
85.209.0.103	attackbots	Bruteforce detected by fail2ban	2020-08-16 15:52:47
192.0.2.2	attackbotsspam	Brenda Zavala n her daughter are hacking n doing fraudulent activity with this	2020-08-16 15:59:51
91.134.248.230	attackspam	91.134.248.230 - - [16/Aug/2020:07:58:31 +0100] "POST /wp-login.php HTTP/1.1" 200 2433 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 91.134.248.230 - - [16/Aug/2020:07:58:32 +0100] "POST /wp-login.php HTTP/1.1" 200 2413 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 91.134.248.230 - - [16/Aug/2020:07:58:33 +0100] "POST /wp-login.php HTTP/1.1" 200 2412 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-16 16:13:54
222.186.175.148	attackbots	Aug 16 09:54:25 jane sshd[29145]: Failed password for root from 222.186.175.148 port 37868 ssh2 Aug 16 09:54:29 jane sshd[29145]: Failed password for root from 222.186.175.148 port 37868 ssh2 ...	2020-08-16 15:55:37
83.239.138.38	attackspam	Aug 16 05:44:09 minden010 sshd[27636]: Failed password for root from 83.239.138.38 port 36812 ssh2 Aug 16 05:48:33 minden010 sshd[29178]: Failed password for root from 83.239.138.38 port 42461 ssh2 ...	2020-08-16 15:57:42
106.13.201.44	attack	Aug 16 08:53:09 vps647732 sshd[5145]: Failed password for root from 106.13.201.44 port 56560 ssh2 ...	2020-08-16 15:43:06
36.111.182.133	attackspambots	Port scan: Attack repeated for 24 hours	2020-08-16 16:01:31
106.54.237.74	attack	20 attempts against mh-ssh on echoip	2020-08-16 16:01:50
49.88.112.60	attack	Aug 16 07:45:16 email sshd\[3336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.60 user=root Aug 16 07:45:18 email sshd\[3336\]: Failed password for root from 49.88.112.60 port 47964 ssh2 Aug 16 07:45:20 email sshd\[3336\]: Failed password for root from 49.88.112.60 port 47964 ssh2 Aug 16 07:45:23 email sshd\[3336\]: Failed password for root from 49.88.112.60 port 47964 ssh2 Aug 16 07:46:03 email sshd\[3472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.60 user=root ...	2020-08-16 15:57:02
51.178.8.34	attack	From return-leo=toptec.net.br@conectoficial.we.bs Sat Aug 15 20:52:41 2020 Received: from conf915-mx-9.conectoficial.we.bs ([51.178.8.34]:45627)	2020-08-16 16:04:44
35.200.180.182	attack	35.200.180.182 - - [16/Aug/2020:07:40:05 +0200] "GET /wp-login.php HTTP/1.1" 200 8775 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 35.200.180.182 - - [16/Aug/2020:07:40:10 +0200] "POST /wp-login.php HTTP/1.1" 200 9026 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 35.200.180.182 - - [16/Aug/2020:07:40:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-16 15:45:32
41.228.170.21	attackspambots	20/8/15@23:52:18: FAIL: Alarm-Network address from=41.228.170.21 ...	2020-08-16 16:16:44
120.92.191.14	attackspambots	TCP (SYN) 120.92.191.14:47125 -> port 1433, len 40	2020-08-16 15:39:44

Recently Reported IPs

139.199.59.145	118.249.179.73	139.199.62.240	139.199.79.251
139.199.80.135	139.199.85.151	139.199.77.59	139.200.106.31
139.199.94.65	139.199.91.15	118.249.185.154	139.200.13.211
139.200.2.19	139.2.165.233	139.200.21.235	139.201.113.19
139.200.8.44	139.200.21.19	139.200.106.44	139.200.32.10