139.199.75.55 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: V6Yun (Beijing) Network Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-07-21T06:46:54Z and 2020-07-21T07:26:15Z	2020-07-21 20:37:11

Comments on same subnet:

IP	Type	Details	Datetime
139.199.75.110	attackbots	odoo8 ...	2020-05-15 16:05:04

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.75.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3497
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.75.55.			IN	A

;; AUTHORITY SECTION:
.			378	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072100 1800 900 604800 86400

;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 21 20:37:05 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 55.75.199.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 55.75.199.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
125.31.19.94	attackbotsspam	Feb 28 11:48:34 server sshd\[25151\]: Invalid user oikawa from 125.31.19.94 Feb 28 11:48:34 server sshd\[25151\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.31.19.94 Feb 28 11:48:36 server sshd\[25151\]: Failed password for invalid user oikawa from 125.31.19.94 port 56780 ssh2 Feb 28 11:51:53 server sshd\[25890\]: Invalid user sunqiu from 125.31.19.94 Feb 28 11:51:53 server sshd\[25890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.31.19.94 ...	2020-02-28 17:25:26
41.59.209.80	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-28 17:30:31
95.161.151.2	attackspam	Honeypot attack, port: 445, PTR: 95-161-151-2.obit.ru.	2020-02-28 17:10:04
171.246.121.71	attackspam	unauthorized connection attempt	2020-02-28 17:27:30
115.77.119.45	attackspambots	Honeypot attack, port: 81, PTR: adsl.viettel.vn.	2020-02-28 17:25:42
46.54.247.142	attack	31,98-01/29 [bc00/m47] PostRequest-Spammer scoring: zurich	2020-02-28 17:15:21
95.181.3.233	attack	Unauthorized connection attempt from IP address 95.181.3.233 on Port 445(SMB)	2020-02-28 17:31:17
61.36.232.56	attack	Feb 28 11:02:34 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=61.36.232.56, lip=212.111.212.230, session=\ Feb 28 11:02:43 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=61.36.232.56, lip=212.111.212.230, session=\ Feb 28 11:02:56 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 12 secs\): user=\, method=PLAIN, rip=61.36.232.56, lip=212.111.212.230, session=\<53PIGZ+f3rI9JOg4\> Feb 28 11:09:27 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=61.36.232.56, lip=212.111.212.230, session=\ Feb 28 11:09:36 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=61.36.232.56, lip=212.111.212.23 ...	2020-02-28 17:13:40
60.168.128.2	attack	Feb 28 02:03:55 server sshd\[7661\]: Failed password for invalid user patrol from 60.168.128.2 port 41454 ssh2 Feb 28 08:05:10 server sshd\[14151\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.168.128.2 user=root Feb 28 08:05:11 server sshd\[14151\]: Failed password for root from 60.168.128.2 port 43962 ssh2 Feb 28 08:10:01 server sshd\[14663\]: Invalid user tomcat from 60.168.128.2 Feb 28 08:10:01 server sshd\[14663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.168.128.2 ...	2020-02-28 17:01:56
171.226.45.181	attack	Automatic report - Port Scan Attack	2020-02-28 17:08:47
151.224.151.156	attackspambots	Attempt to breakin.	2020-02-28 17:03:46
118.69.32.167	attackspam	Feb 28 10:04:49 MK-Soft-VM6 sshd[29138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.69.32.167 Feb 28 10:04:52 MK-Soft-VM6 sshd[29138]: Failed password for invalid user carlos from 118.69.32.167 port 37870 ssh2 ...	2020-02-28 17:09:15
124.93.18.202	attackbots	Feb 28 09:52:23 gw1 sshd[28783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.93.18.202 Feb 28 09:52:26 gw1 sshd[28783]: Failed password for invalid user ges from 124.93.18.202 port 63904 ssh2 ...	2020-02-28 17:35:56
183.82.114.131	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 17:24:10
190.115.6.99	attackspam	Honeypot attack, port: 445, PTR: 99.6.115.190.ufinet.com.gt.	2020-02-28 17:06:27

Recently Reported IPs

106.13.75.158	105.204.21.226	36.228.102.225	238.48.28.122
5.119.229.158	216.22.155.125	246.141.248.8	40.106.177.22
127.68.45.175	142.23.130.214	196.249.68.222	2.184.52.204
194.247.16.245	94.29.248.102	42.58.1.166	14.172.210.209
75.60.202.114	117.4.61.225	221.138.160.158	103.52.129.3