139.132.127.108

Basic Info

City: Burwood

Region: Victoria

Country: Australia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.132.127.108
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48456
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.132.127.108.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025011001 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 11 10:13:20 CST 2025
;; MSG SIZE  rcvd: 108

Host info

Host 108.127.132.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 108.127.132.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
137.97.96.138	attackbots	198. On May 18 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 137.97.96.138.	2020-05-20 16:50:24
152.136.106.94	attackspam	235. On May 18 2020 experienced a Brute Force SSH login attempt -> 2 unique times by 152.136.106.94.	2020-05-20 16:21:20
139.59.36.23	attackbots	May 20 10:14:29 piServer sshd[5249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.36.23 May 20 10:14:31 piServer sshd[5249]: Failed password for invalid user jrv from 139.59.36.23 port 57894 ssh2 May 20 10:18:16 piServer sshd[5697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.36.23 ...	2020-05-20 16:38:30
61.72.255.26	attack	May 20 10:45:17 abendstille sshd\[32559\]: Invalid user hlf from 61.72.255.26 May 20 10:45:17 abendstille sshd\[32559\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.72.255.26 May 20 10:45:19 abendstille sshd\[32559\]: Failed password for invalid user hlf from 61.72.255.26 port 41188 ssh2 May 20 10:49:06 abendstille sshd\[3988\]: Invalid user liming from 61.72.255.26 May 20 10:49:06 abendstille sshd\[3988\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.72.255.26 ...	2020-05-20 16:56:00
14.187.110.205	attackbots	219. On May 18 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 14.187.110.205.	2020-05-20 16:30:36
80.82.69.130	attackbots	May 20 09:49:40 debian-2gb-nbg1-2 kernel: \[12219807.374803\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.69.130 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=57727 PROTO=TCP SPT=50683 DPT=30034 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-20 16:17:46
104.131.46.166	attackspam	May 20 09:49:38 pve1 sshd[19079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.46.166 May 20 09:49:41 pve1 sshd[19079]: Failed password for invalid user pnz from 104.131.46.166 port 42487 ssh2 ...	2020-05-20 16:18:35
200.35.56.45	attackbots	Icarus honeypot on github	2020-05-20 16:36:04
5.54.187.99	attack	20/5/20@03:49:32: FAIL: IoT-Telnet address from=5.54.187.99 ...	2020-05-20 16:28:08
2a00:d680:30:50::67	attackbots	WordPress login Brute force / Web App Attack on client site.	2020-05-20 16:35:43
217.107.219.154	attack	Detected by ModSecurity. Request URI: /wp-login.php	2020-05-20 16:31:34
2604:a880:800:a1::58:d001	attackspam	WordPress login Brute force / Web App Attack on client site.	2020-05-20 16:48:04
36.79.249.223	attackspambots	...	2020-05-20 16:27:48
103.145.12.104	attackbots	[2020-05-20 04:37:30] NOTICE[1157] chan_sip.c: Registration from '400 ' failed for '103.145.12.104:5060' - Wrong password [2020-05-20 04:37:30] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-20T04:37:30.314-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="400",SessionID="0x7f5f10443b28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.104/5060",Challenge="4499f10e",ReceivedChallenge="4499f10e",ReceivedHash="3c57f9759a51c167f9178b019bc9ea39" [2020-05-20 04:40:07] NOTICE[1157] chan_sip.c: Registration from '3001 ' failed for '103.145.12.104:5060' - Wrong password [2020-05-20 04:40:07] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-20T04:40:07.668-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3001",SessionID="0x7f5f1051dd08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.14 ...	2020-05-20 16:50:45
157.55.39.5	attackbots	[Wed May 20 14:49:35.113646 2020] [:error] [pid 3104:tid 140678289942272] [client 157.55.39.5:11683] [client 157.55.39.5] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "XsThD2BeW47MpXcwbAJPZwAAAC8"] ...	2020-05-20 16:22:31

Recently Reported IPs

201.226.220.87	69.236.12.117	43.126.8.124	220.160.75.243
98.198.217.70	30.179.114.248	16.107.65.204	90.65.43.16
229.238.152.15	185.116.217.154	38.203.244.247	253.121.19.0
211.246.143.80	31.55.193.211	17.7.80.251	82.134.201.111
61.196.87.223	53.216.80.34	7.213.208.24	162.214.235.52