This IP address has been reported a total of
52
times from
38 distinct
sources.
139.199.228.233 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
2026-05-30T01:07:26.742296 pclab24.pl sshd[244122]: Connection from 139.199.228.233 port 40020 on 10 ...
show more2026-05-30T01:07:26.742296 pclab24.pl sshd[244122]: Connection from 139.199.228.233 port 40020 on 10.10.0.5 port 22
2026-05-30T01:07:29.260183 pclab24.pl sshd[244122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.233 user=root
2026-05-30T01:07:30.772693 pclab24.pl sshd[244122]: Failed password for root from 139.199.228.233 port 40020 ssh2
2026-05-30T01:09:59.243204 pclab24.pl sshd[245138]: Connection from 139.199.228.233 port 37690 on 10.10.0.5 port 22
2026-05-30T01:10:01.701651 pclab24.pl sshd[245138]: Invalid user under from 139.199.228.233 port 37690
...
show less
2026-05-29T16:22:55.387090-03:00 web sshd[474640]: Failed password for root from 139.199.228.233 por ...
show more2026-05-29T16:22:55.387090-03:00 web sshd[474640]: Failed password for root from 139.199.228.233 port 43794 ssh2
2026-05-29T16:22:55.673279-03:00 web sshd[474640]: Disconnected from authenticating user root 139.199.228.233 port 43794 [preauth]
2026-05-29T16:38:29.661474-03:00 web sshd[482771]: Connection closed by 139.199.228.233 port 57288 [preauth]
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-29T13:22:08Z and 2026-05-2 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-29T13:22:08Z and 2026-05-29T14:28:56Z
show less
2026-05-29T14:21:10.018409+00:00 habibi.infra.lumis.moe sshd-session[1663218]: pam_unix(sshd:auth): ...
show more2026-05-29T14:21:10.018409+00:00 habibi.infra.lumis.moe sshd-session[1663218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.233
2026-05-29T14:21:12.214750+00:00 habibi.infra.lumis.moe sshd-session[1663218]: Failed password for invalid user appuser from 139.199.228.233 port 46956 ssh2
2026-05-29T14:22:59.601855+00:00 habibi.infra.lumis.moe sshd-session[1663383]: Invalid user system from 139.199.228.233 port 48246
...
show less
2026-05-29T16:00:56.730743+02:00 v2202509299507380972 sshd[1452661]: pam_unix(sshd:auth): authentica ...
show more2026-05-29T16:00:56.730743+02:00 v2202509299507380972 sshd[1452661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.233
2026-05-29T16:00:59.336643+02:00 v2202509299507380972 sshd[1452661]: Failed password for invalid user user1 from 139.199.228.233 port 50898 ssh2
2026-05-29T16:08:11.481447+02:00 v2202509299507380972 sshd[1453310]: Invalid user info from 139.199.228.233 port 33614
2026-05-29T16:08:11.483962+02:00 v2202509299507380972 sshd[1453310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.233
2026-05-29T16:08:13.141342+02:00 v2202509299507380972 sshd[1453310]: Failed password for invalid user info from 139.199.228.233 port 33614 ssh2
...
show less
2026-05-29T03:31:03.289328-07:00 NetCafe sshd-session[1047843]: Failed password for invalid user tai ...
show more2026-05-29T03:31:03.289328-07:00 NetCafe sshd-session[1047843]: Failed password for invalid user taibabi from 139.199.228.233 port 34084 ssh2
2026-05-29T03:42:30.369328-07:00 NetCafe sshd-session[1051668]: Invalid user ubuntu from 139.199.228.233 port 41488
2026-05-29T03:42:30.376686-07:00 NetCafe sshd-session[1051668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.233
2026-05-29T03:42:31.915972-07:00 NetCafe sshd-session[1051668]: Failed password for invalid user ubuntu from 139.199.228.233 port 41488 ssh2
2026-05-29T03:48:24.777746-07:00 NetCafe sshd-session[1053673]: Invalid user ubuntu from 139.199.228.233 port 60420
...
show less
SSH honeypot interaction detected. The source host initiated a connection to a monitored SSH endpoin ...
show moreSSH honeypot interaction detected. The source host initiated a connection to a monitored SSH endpoint, behavior consistent with automated SSH scanning or brute-force reconnaissance.
show less
Brute-Force
SSH
Showing 1 to
15
of 52 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩