139.99.113.166

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: Private Customer

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Looking for resource vulnerabilities	2019-07-16 07:26:14

Comments on same subnet:

IP	Type	Details	Datetime
139.99.113.17	attackspam	Port Scan detected! ...	2020-06-22 20:15:40
139.99.113.17	attackspambots	UDP 139.99.113.17:27015 -> port 45394, len 283	2020-05-17 02:31:32
139.99.113.17	attackspambots	Apr 26 14:34:11 debian-2gb-nbg1-2 kernel: \[10163386.974391\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=139.99.113.17 DST=195.201.40.59 LEN=288 TOS=0x14 PREC=0x00 TTL=45 ID=43527 DF PROTO=UDP SPT=27015 DPT=51651 LEN=268	2020-04-26 20:51:08

Type

Details

Datetime

139.99.113.17

attackspam

Port Scan detected!
...

2020-06-22 20:15:40

139.99.113.17

attackspambots

 UDP 139.99.113.17:27015 -> port 45394, len 283

2020-05-17 02:31:32

139.99.113.17

attackspambots

Apr 26 14:34:11 debian-2gb-nbg1-2 kernel: \[10163386.974391\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=139.99.113.17 DST=195.201.40.59 LEN=288 TOS=0x14 PREC=0x00 TTL=45 ID=43527 DF PROTO=UDP SPT=27015 DPT=51651 LEN=268

2020-04-26 20:51:08

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.113.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36453
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.113.166.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071501 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 16 07:26:09 CST 2019
;; MSG SIZE  rcvd: 118

Host info

166.113.99.139.in-addr.arpa domain name pointer ip166.ip-139-99-113.net.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
166.113.99.139.in-addr.arpa	name = ip166.ip-139-99-113.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
218.92.0.208	attack	Jul 15 05:10:40 eventyay sshd[32538]: Failed password for root from 218.92.0.208 port 39118 ssh2 Jul 15 05:11:54 eventyay sshd[32573]: Failed password for root from 218.92.0.208 port 51519 ssh2 ...	2020-07-15 11:17:33
162.243.25.25	attackbotsspam	"fail2ban match"	2020-07-15 11:08:19
137.116.146.201	attack	2020-07-15T04:46:58.6192521240 sshd\[30023\]: Invalid user admin from 137.116.146.201 port 64370 2020-07-15T04:46:58.6229581240 sshd\[30023\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.116.146.201 2020-07-15T04:47:00.7419641240 sshd\[30023\]: Failed password for invalid user admin from 137.116.146.201 port 64370 ssh2 ...	2020-07-15 10:59:43
192.99.36.177	attackbotsspam	192.99.36.177 - - [15/Jul/2020:03:47:45 +0100] "POST /wp-login.php HTTP/1.1" 200 5249 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.99.36.177 - - [15/Jul/2020:03:49:48 +0100] "POST /wp-login.php HTTP/1.1" 200 5249 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.99.36.177 - - [15/Jul/2020:03:51:50 +0100] "POST /wp-login.php HTTP/1.1" 200 5249 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" ...	2020-07-15 11:01:54
202.115.30.5	attackbots	malicious Brute-Force reported by https://www.patrick-binder.de ...	2020-07-15 11:13:39
190.210.218.32	attackspam	Jul 14 20:16:20 pi sshd[6411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.210.218.32 Jul 14 20:16:23 pi sshd[6411]: Failed password for invalid user noe from 190.210.218.32 port 52672 ssh2	2020-07-15 11:07:51
13.72.82.152	attackspambots	Jul 15 04:43:28 jane sshd[28426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.72.82.152 Jul 15 04:43:30 jane sshd[28426]: Failed password for invalid user admin from 13.72.82.152 port 46802 ssh2 ...	2020-07-15 10:47:35
139.155.84.210	attackbotsspam	Jul 15 02:19:22 plex-server sshd[1204447]: Invalid user sjy from 139.155.84.210 port 56240 Jul 15 02:19:22 plex-server sshd[1204447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.84.210 Jul 15 02:19:22 plex-server sshd[1204447]: Invalid user sjy from 139.155.84.210 port 56240 Jul 15 02:19:25 plex-server sshd[1204447]: Failed password for invalid user sjy from 139.155.84.210 port 56240 ssh2 Jul 15 02:22:27 plex-server sshd[1205432]: Invalid user sese from 139.155.84.210 port 33052 ...	2020-07-15 10:59:17
220.133.210.114	attackspambots	Port probing on unauthorized port 85	2020-07-15 10:57:35
40.85.147.123	attack	"Unauthorized connection attempt on SSHD detected"	2020-07-15 11:05:35
82.207.255.29	attackbots	20 attempts against mh-ssh on mist	2020-07-15 11:09:59
104.210.108.105	attack	Jul 15 04:53:07 * sshd[2083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.210.108.105 Jul 15 04:53:10 * sshd[2083]: Failed password for invalid user admin from 104.210.108.105 port 46340 ssh2	2020-07-15 11:09:00
51.178.24.61	attackspambots	2020-07-15T04:04:53+0200 Failed SSH Authentication/Brute Force Attack. (Server 10)	2020-07-15 10:48:07
51.38.130.242	attack	Jul 15 04:04:51 hidden sshd[20491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.130.242 Jul 15 04:04:53 hidden sshd[20491]: Failed password for invalid user shimi from 51.38.130.242 port 50058 ssh2	2020-07-15 10:46:31
118.69.225.57	attackbots	Jul 4 07:28:26 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=118.69.225.57, lip=10.64.89.208, TLS, session=\ Jul 4 23:50:17 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=118.69.225.57, lip=10.64.89.208, session=\<8WpKoKSpIL92ReE5\> Jul 5 04:11:40 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=118.69.225.57, lip=10.64.89.208, TLS: Disconnected, session=\ Jul 5 19:41:21 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=118.69.225.57, lip=10.64.89.208, session=\ Jul 7 14:08:54 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, ...	2020-07-15 11:00:11

Recently Reported IPs

182.121.234.12	62.234.34.88	196.139.12.27	188.183.117.47
83.169.228.254	46.101.243.40	39.41.191.67	108.26.42.90
114.80.116.184	14.241.120.92	185.19.21.251	58.19.230.170
148.137.40.146	93.38.71.101	183.63.13.214	221.17.225.193
43.247.222.157	107.171.250.254	191.255.188.54	17.180.77.11