75.139.2.199 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Charter Communications Inc

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Jul 7 06:53:14 www2 sshd\[541\]: Invalid user admin from 75.139.2.199Jul 7 06:53:16 www2 sshd\[541\]: Failed password for invalid user admin from 75.139.2.199 port 56632 ssh2Jul 7 06:53:19 www2 sshd\[543\]: Failed password for root from 75.139.2.199 port 56901 ssh2 ...	2020-07-07 15:12:27

Type

Details

Datetime

attack

Jul  7 06:53:14 www2 sshd\[541\]: Invalid user admin from 75.139.2.199Jul  7 06:53:16 www2 sshd\[541\]: Failed password for invalid user admin from 75.139.2.199 port 56632 ssh2Jul  7 06:53:19 www2 sshd\[543\]: Failed password for root from 75.139.2.199 port 56901 ssh2
...

2020-07-07 15:12:27

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 75.139.2.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2256
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;75.139.2.199.			IN	A

;; AUTHORITY SECTION:
.			502	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070700 1800 900 604800 86400

;; Query time: 87 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 07 15:12:18 CST 2020
;; MSG SIZE  rcvd: 116

Host info

199.2.139.75.in-addr.arpa domain name pointer 075-139-002-199.res.spectrum.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
199.2.139.75.in-addr.arpa	name = 075-139-002-199.res.spectrum.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
31.28.23.16	attackbotsspam	[Aegis] @ 2019-09-14 19:12:36 0100 -> Multiple attempts to send e-mail from invalid/unknown sender domain.	2019-09-15 09:47:54
200.196.253.251	attackspam	Sep 14 16:52:18 ws12vmsma01 sshd[21830]: Invalid user username from 200.196.253.251 Sep 14 16:52:20 ws12vmsma01 sshd[21830]: Failed password for invalid user username from 200.196.253.251 port 34056 ssh2 Sep 14 17:01:07 ws12vmsma01 sshd[23089]: Invalid user training from 200.196.253.251 ...	2019-09-15 09:42:01
60.174.92.50	attackspam	[munged]::80 60.174.92.50 - - [14/Sep/2019:20:10:43 +0200] "POST /[munged]: HTTP/1.1" 200 4214 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 60.174.92.50 - - [14/Sep/2019:20:10:45 +0200] "POST /[munged]: HTTP/1.1" 200 4213 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 60.174.92.50 - - [14/Sep/2019:20:10:48 +0200] "POST /[munged]: HTTP/1.1" 200 4213 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 60.174.92.50 - - [14/Sep/2019:20:10:51 +0200] "POST /[munged]: HTTP/1.1" 200 4213 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 60.174.92.50 - - [14/Sep/2019:20:11:56 +0200] "POST /[munged]: HTTP/1.1" 200 4214 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 60.174.92.50 - - [14/Sep/2019:20:11:58 +0200] "POST	2019-09-15 10:09:22
61.177.137.38	attackbotsspam	Sep 14 17:50:12 xtremcommunity sshd\[88487\]: Invalid user xz from 61.177.137.38 port 2545 Sep 14 17:50:12 xtremcommunity sshd\[88487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.137.38 Sep 14 17:50:15 xtremcommunity sshd\[88487\]: Failed password for invalid user xz from 61.177.137.38 port 2545 ssh2 Sep 14 17:53:41 xtremcommunity sshd\[88540\]: Invalid user admin2 from 61.177.137.38 port 2546 Sep 14 17:53:41 xtremcommunity sshd\[88540\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.137.38 ...	2019-09-15 09:42:39
96.19.3.46	attackbots	Sep 15 02:31:20 lnxweb61 sshd[21672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.19.3.46	2019-09-15 09:41:31
167.114.145.139	attack	Invalid user odoo from 167.114.145.139 port 42376	2019-09-15 09:45:52
178.62.108.111	attackspambots	Sep 14 15:30:42 lcdev sshd\[5465\]: Invalid user kou from 178.62.108.111 Sep 14 15:30:42 lcdev sshd\[5465\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.108.111 Sep 14 15:30:44 lcdev sshd\[5465\]: Failed password for invalid user kou from 178.62.108.111 port 55620 ssh2 Sep 14 15:34:54 lcdev sshd\[5792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.108.111 user=root Sep 14 15:34:56 lcdev sshd\[5792\]: Failed password for root from 178.62.108.111 port 41126 ssh2	2019-09-15 09:49:41
159.89.153.54	attackbots	Sep 14 18:08:22 ny01 sshd[23085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.153.54 Sep 14 18:08:23 ny01 sshd[23085]: Failed password for invalid user adm from 159.89.153.54 port 44090 ssh2 Sep 14 18:12:40 ny01 sshd[23751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.153.54	2019-09-15 09:37:43
81.171.58.72	attackspam	\[2019-09-14 21:52:44\] NOTICE\[20685\] chan_sip.c: Registration from '\' failed for '81.171.58.72:60548' - Wrong password \[2019-09-14 21:52:44\] SECURITY\[20693\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-14T21:52:44.036-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9520",SessionID="0x7f8a6c6094e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.58.72/60548",Challenge="52b9688a",ReceivedChallenge="52b9688a",ReceivedHash="a281472ce410fffe48bc9ccd39403d64" \[2019-09-14 21:53:09\] NOTICE\[20685\] chan_sip.c: Registration from '\' failed for '81.171.58.72:64462' - Wrong password \[2019-09-14 21:53:09\] SECURITY\[20693\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-14T21:53:09.754-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5407",SessionID="0x7f8a6c30ae18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.5	2019-09-15 09:56:16
220.225.7.90	attack	Chat Spam	2019-09-15 09:30:40
49.88.112.71	attack	2019-09-15T01:47:18.169038abusebot-6.cloudsearch.cf sshd\[4006\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.71 user=root	2019-09-15 09:59:29
114.255.135.116	attackspam	2019-09-14T19:49:53.318927abusebot-4.cloudsearch.cf sshd\[11551\]: Invalid user matasamasugaaa from 114.255.135.116 port 57476	2019-09-15 10:04:36
200.232.59.243	attackbotsspam	Sep 14 09:21:43 php2 sshd\[5124\]: Invalid user kao from 200.232.59.243 Sep 14 09:21:43 php2 sshd\[5124\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.232.59.243 Sep 14 09:21:45 php2 sshd\[5124\]: Failed password for invalid user kao from 200.232.59.243 port 33999 ssh2 Sep 14 09:26:25 php2 sshd\[5508\]: Invalid user hello from 200.232.59.243 Sep 14 09:26:25 php2 sshd\[5508\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.232.59.243	2019-09-15 09:56:32
122.161.192.206	attackspam	Sep 14 15:32:13 php1 sshd\[14201\]: Invalid user user from 122.161.192.206 Sep 14 15:32:13 php1 sshd\[14201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.161.192.206 Sep 14 15:32:15 php1 sshd\[14201\]: Failed password for invalid user user from 122.161.192.206 port 45892 ssh2 Sep 14 15:36:37 php1 sshd\[14738\]: Invalid user bentley from 122.161.192.206 Sep 14 15:36:37 php1 sshd\[14738\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.161.192.206	2019-09-15 09:40:34
201.182.223.59	attackspam	Sep 15 04:39:49 microserver sshd[39011]: Invalid user admin from 201.182.223.59 port 32850 Sep 15 04:39:49 microserver sshd[39011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.182.223.59 Sep 15 04:39:51 microserver sshd[39011]: Failed password for invalid user admin from 201.182.223.59 port 32850 ssh2 Sep 15 04:44:56 microserver sshd[39724]: Invalid user oracle from 201.182.223.59 port 33853 Sep 15 04:44:56 microserver sshd[39724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.182.223.59 Sep 15 04:59:08 microserver sshd[41737]: Invalid user access from 201.182.223.59 port 46083 Sep 15 04:59:08 microserver sshd[41737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.182.223.59 Sep 15 04:59:10 microserver sshd[41737]: Failed password for invalid user access from 201.182.223.59 port 46083 ssh2 Sep 15 05:04:05 microserver sshd[42441]: Invalid user fq from 201.182.223.59 port 43	2019-09-15 10:07:57

Recently Reported IPs

157.40.240.154	102.92.95.225	123.214.28.203	202.113.170.49
118.174.206.130	189.170.40.200	142.93.216.97	202.83.54.167
1.169.154.211	95.190.3.151	195.136.227.90	114.38.60.2
87.251.74.185	71.181.50.191	23.36.77.8	101.99.13.29
103.82.15.97	59.127.211.87	153.148.18.157	249.248.35.131