139.99.122.172

Basic Info

City: unknown

Region: unknown

Country: Canada

Internet Service Provider: OVH Singapore Pte. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Scanning random ports - tries to find possible vulnerable services	2019-06-26 04:04:49
attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-06-22 14:16:21

Comments on same subnet:

IP	Type	Details	Datetime
139.99.122.158	attackspam	SSH login attempts.	2020-07-10 02:56:55
139.99.122.194	attack	2020-04-01 16:10:52 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=ns558397.ip-139-99-122.net [139.99.122.194]:62000 I=[192.147.25.65]:25 input="CONNECT 104.26.13.200:443 HTTP/1" 2020-04-01 16:10:57 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=ns558397.ip-139-99-122.net [139.99.122.194]:62499 I=[192.147.25.65]:25 input="\004\001\001\273h\032\r\310" 2020-04-01 16:11:02 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=ns558397.ip-139-99-122.net [139.99.122.194]:61195 I=[192.147.25.65]:25 input="\005\001" ...	2020-04-02 09:16:18
139.99.122.26	attackbots	TCP src-port=49192 dst-port=25 dnsbl-sorbs abuseat-org spamcop (810)	2019-06-22 07:56:31

Type

Details

Datetime

139.99.122.158

attackspam

SSH login attempts.

2020-07-10 02:56:55

139.99.122.194

attack

2020-04-01 16:10:52 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=ns558397.ip-139-99-122.net [139.99.122.194]:62000 I=[192.147.25.65]:25 input="CONNECT 104.26.13.200:443 HTTP/1"
2020-04-01 16:10:57 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=ns558397.ip-139-99-122.net [139.99.122.194]:62499 I=[192.147.25.65]:25 input="\004\001\001\273h\032\r\310"
2020-04-01 16:11:02 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=ns558397.ip-139-99-122.net [139.99.122.194]:61195 I=[192.147.25.65]:25 input="\005\001"
...

2020-04-02 09:16:18

139.99.122.26

attackbots

TCP src-port=49192   dst-port=25    dnsbl-sorbs abuseat-org spamcop         (810)

2019-06-22 07:56:31

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.122.172
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57976
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.122.172.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019053101 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 01 05:14:26 CST 2019
;; MSG SIZE  rcvd: 118

Host info

172.122.99.139.in-addr.arpa domain name pointer ns558354.ip-139-99-122.net.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
172.122.99.139.in-addr.arpa	name = ns558354.ip-139-99-122.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.75.29.61	attack	Jun 3 23:41:48 server sshd[30026]: Failed password for root from 51.75.29.61 port 40874 ssh2 Jun 3 23:45:00 server sshd[30287]: Failed password for root from 51.75.29.61 port 58098 ssh2 ...	2020-06-04 06:07:55
161.230.76.137	attack	Unauthorized connection attempt from IP address 161.230.76.137 on Port 445(SMB)	2020-06-04 06:04:29
106.124.137.103	attack	Jun 3 21:26:29 game-panel sshd[5964]: Failed password for root from 106.124.137.103 port 57572 ssh2 Jun 3 21:30:35 game-panel sshd[6137]: Failed password for root from 106.124.137.103 port 58462 ssh2	2020-06-04 05:59:39
80.250.8.204	attackspambots	Jun 3 14:14:57 Host-KLAX-C postfix/smtpd[24809]: NOQUEUE: reject: RCPT from unknown[80.250.8.204]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=<[80.250.8.204]> ...	2020-06-04 05:38:11
163.172.24.40	attackspambots	Jun 03 15:08:08 askasleikir sshd[101126]: Failed password for root from 163.172.24.40 port 35137 ssh2	2020-06-04 05:31:25
103.131.71.79	attackbots	(mod_security) mod_security (id:210730) triggered by 103.131.71.79 (VN/Vietnam/bot-103-131-71-79.coccoc.com): 5 in the last 3600 secs	2020-06-04 06:00:28
45.14.150.86	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 27 - port: 7563 proto: TCP cat: Misc Attack	2020-06-04 05:39:12
195.54.160.228	attackbotsspam	Jun 4 00:21:04 debian kernel: [121828.306401] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=195.54.160.228 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=33216 PROTO=TCP SPT=55859 DPT=33983 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-04 05:44:12
134.122.54.93	attackspambots	Hits on port : 4433	2020-06-04 05:35:00
216.45.23.6	attackbots	Jun 3 15:06:57 server1 sshd\[30548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.45.23.6 user=root Jun 3 15:06:59 server1 sshd\[30548\]: Failed password for root from 216.45.23.6 port 50576 ssh2 Jun 3 15:11:02 server1 sshd\[31749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.45.23.6 user=root Jun 3 15:11:04 server1 sshd\[31749\]: Failed password for root from 216.45.23.6 port 51033 ssh2 Jun 3 15:15:03 server1 sshd\[501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.45.23.6 user=root ...	2020-06-04 06:03:58
72.43.141.9	attack	fail2ban	2020-06-04 06:01:21
222.186.173.183	attackbotsspam	Jun 3 17:54:55 NPSTNNYC01T sshd[27094]: Failed password for root from 222.186.173.183 port 36622 ssh2 Jun 3 17:55:07 NPSTNNYC01T sshd[27094]: error: maximum authentication attempts exceeded for root from 222.186.173.183 port 36622 ssh2 [preauth] Jun 3 17:55:13 NPSTNNYC01T sshd[27107]: Failed password for root from 222.186.173.183 port 52018 ssh2 ...	2020-06-04 06:05:50
134.209.241.57	attack	WordPress XMLRPC scan :: 134.209.241.57 0.032 - [03/Jun/2020:20:14:44 0000] [censored_1] "POST /xmlrpc.php HTTP/1.1" 503 18039 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"	2020-06-04 05:48:04
59.127.196.121	attack	Honeypot attack, port: 81, PTR: 59-127-196-121.HINET-IP.hinet.net.	2020-06-04 05:32:12
87.120.37.222	attackbots	Jun 4 06:12:44 scivo sshd[29573]: Did not receive identification string from 87.120.37.222 Jun 4 06:14:11 scivo sshd[29662]: reveeclipse mapping checking getaddrinfo for faudy.naiUsernameson.com [87.120.37.222] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 4 06:14:11 scivo sshd[29662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.120.37.222 user=r.r Jun 4 06:14:14 scivo sshd[29662]: Failed password for r.r from 87.120.37.222 port 32860 ssh2 Jun 4 06:14:14 scivo sshd[29662]: Received disconnect from 87.120.37.222: 11: Normal Shutdown, Thank you for playing [preauth] Jun 4 06:15:54 scivo sshd[29740]: reveeclipse mapping checking getaddrinfo for faudy.naiUsernameson.com [87.120.37.222] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 4 06:15:54 scivo sshd[29740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.120.37.222 user=r.r Jun 4 06:15:56 scivo sshd[29740]: Failed password for r.r fro........ -------------------------------	2020-06-04 05:59:20

Recently Reported IPs

131.219.112.84	192.186.249.208	31.28.31.69	56.197.49.202
221.123.90.5	177.203.161.114	148.158.65.209	106.230.10.240
213.149.152.151	27.72.59.240	111.231.248.104	77.247.110.84
109.125.128.53	182.254.215.119	117.102.69.125	62.183.33.106
81.124.164.122	177.200.85.70	85.206.165.6	219.65.51.21