City: unknown
Region: unknown
Country: Singapore
Internet Service Provider: OVH Singapore Pte. Ltd
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
Type | Details | Datetime |
---|---|---|
attackspam | 3320/tcp [2020-03-23]1pkt |
2020-03-23 20:06:07 |
IP | Type | Details | Datetime |
---|---|---|---|
139.99.125.58 | attackspam | Blocked by Sophos UTM Network Protection . / / proto=6 . srcport=10001 . dstport=32936 . (1089) |
2020-09-17 19:04:12 |
139.99.125.230 | attack |
|
2020-09-01 21:06:56 |
139.99.125.231 | attackspambots |
|
2020-09-01 19:04:17 |
139.99.125.230 | attack | SmallBizIT.US 1 packets to tcp(22) |
2020-09-01 18:25:28 |
139.99.125.230 | attackspambots | 2020-08-31T19:25:50.598331abusebot-2.cloudsearch.cf sshd[11620]: Invalid user ubnt from 139.99.125.230 port 59752 2020-08-31T19:25:50.645193abusebot-2.cloudsearch.cf sshd[11622]: Invalid user admin from 139.99.125.230 port 35698 2020-08-31T19:25:50.647160abusebot-2.cloudsearch.cf sshd[11626]: Invalid user 1234 from 139.99.125.230 port 43918 2020-08-31T19:25:51.722996abusebot-2.cloudsearch.cf sshd[11628]: Invalid user usuario from 139.99.125.230 port 49656 ... |
2020-09-01 03:42:24 |
139.99.125.84 | attackspambots | Port probing on unauthorized port 22 |
2020-08-29 02:11:39 |
139.99.125.86 | attack | Attempted connection to port 64129. |
2020-08-24 21:24:56 |
139.99.125.191 | attackspam | 139.99.125.191 was recorded 6 times by 4 hosts attempting to connect to the following ports: 26014,50570,39019,51856. Incident counter (4h, 24h, all-time): 6, 31, 1174 |
2020-04-28 21:33:58 |
139.99.125.191 | attackbotsspam | 139.99.125.191 was recorded 11 times by 7 hosts attempting to connect to the following ports: 26014,51856,39019,20269,50570,60429. Incident counter (4h, 24h, all-time): 11, 19, 1146 |
2020-04-27 23:12:32 |
139.99.125.191 | attack | 139.99.125.191 was recorded 28 times by 9 hosts attempting to connect to the following ports: 50570,51856,39019,54434,56610,52084,20269,60429,51142. Incident counter (4h, 24h, all-time): 28, 86, 1123 |
2020-04-25 21:06:30 |
139.99.125.191 | attack | Port 27034 scan denied |
2020-03-28 19:23:50 |
139.99.125.191 | attackbots | 139.99.125.191 was recorded 13 times by 8 hosts attempting to connect to the following ports: 39019,54434,20269,51856,56610,52084,60429,51142. Incident counter (4h, 24h, all-time): 13, 112, 855 |
2020-03-28 06:26:16 |
139.99.125.191 | attackbotsspam | 139.99.125.191 was recorded 8 times by 5 hosts attempting to connect to the following ports: 60429,54434,50570,52084,51142. Incident counter (4h, 24h, all-time): 8, 116, 846 |
2020-03-28 04:19:40 |
139.99.125.191 | attackspam | probes 16 times on the port 34928 59003 62781 |
2020-03-27 18:25:06 |
139.99.125.191 | attackspambots | 139.99.125.191 was recorded 20 times by 9 hosts attempting to connect to the following ports: 51856,39019,50570,52084,54434,56610,51142,60429,26014. Incident counter (4h, 24h, all-time): 20, 82, 683 |
2020-03-26 16:58:49 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.125.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14167
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.125.22. IN A
;; AUTHORITY SECTION:
. 532 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020032300 1800 900 604800 86400
;; Query time: 129 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 23 20:06:02 CST 2020
;; MSG SIZE rcvd: 117
22.125.99.139.in-addr.arpa domain name pointer ns564104.ip-139-99-125.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
22.125.99.139.in-addr.arpa name = ns564104.ip-139-99-125.net.
Authoritative answers can be found from:
IP | Type | Details | Datetime |
---|---|---|---|
168.196.96.62 | attack | TCP Port: 25 _ invalid blocked dnsbl-sorbs abuseat-org _ _ _ _ (116) |
2019-07-28 11:43:58 |
106.38.33.70 | attack | Jul 28 05:14:18 mail sshd\[3190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.38.33.70 user=root Jul 28 05:14:20 mail sshd\[3190\]: Failed password for root from 106.38.33.70 port 54578 ssh2 ... |
2019-07-28 12:33:47 |
218.150.220.214 | attack | SSH bruteforce (Triggered fail2ban) |
2019-07-28 12:36:55 |
123.207.142.208 | attackbotsspam | web-1 [ssh] SSH Attack |
2019-07-28 12:25:20 |
105.145.33.143 | attackbots | TCP Port: 25 _ invalid blocked dnsbl-sorbs abuseat-org _ _ _ _ (111) |
2019-07-28 11:54:06 |
167.99.200.84 | attackbots | Jul 28 03:48:00 srv03 sshd\[10130\]: Invalid user oracle from 167.99.200.84 port 45208 Jul 28 03:48:00 srv03 sshd\[10130\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.200.84 Jul 28 03:48:02 srv03 sshd\[10130\]: Failed password for invalid user oracle from 167.99.200.84 port 45208 ssh2 |
2019-07-28 11:47:11 |
111.253.59.151 | attack | Jul 27 05:57:25 localhost kernel: [15465638.578458] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=111.253.59.151 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=63676 PROTO=TCP SPT=7199 DPT=37215 WINDOW=1028 RES=0x00 SYN URGP=0 Jul 27 05:57:25 localhost kernel: [15465638.578486] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=111.253.59.151 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=63676 PROTO=TCP SPT=7199 DPT=37215 SEQ=758669438 ACK=0 WINDOW=1028 RES=0x00 SYN URGP=0 Jul 27 21:13:20 localhost kernel: [15520593.635850] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=111.253.59.151 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=20218 PROTO=TCP SPT=54614 DPT=37215 WINDOW=48435 RES=0x00 SYN URGP=0 Jul 27 21:13:20 localhost kernel: [15520593.635881] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=111.253.59.151 DST=[mungedIP2] LEN=40 TOS=0x0 |
2019-07-28 11:55:12 |
201.39.70.186 | attackspambots | Invalid user zeldas from 201.39.70.186 port 41344 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.39.70.186 Failed password for invalid user zeldas from 201.39.70.186 port 41344 ssh2 Invalid user 123456789\(\*\&\^%$\#@! from 201.39.70.186 port 35776 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.39.70.186 |
2019-07-28 12:35:29 |
202.45.147.118 | attack | Jul 28 05:41:40 vps647732 sshd[9969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.118 Jul 28 05:41:42 vps647732 sshd[9969]: Failed password for invalid user jinhua from 202.45.147.118 port 38639 ssh2 ... |
2019-07-28 12:21:42 |
123.16.61.222 | attack | IP: 123.16.61.222 ASN: AS45899 VNPT Corp Port: Message Submission 587 Found in one or more Blacklists Date: 28/07/2019 1:13:30 AM UTC |
2019-07-28 11:42:58 |
95.217.32.237 | attackbotsspam | Over 75 attempts to login. |
2019-07-28 12:16:39 |
122.140.95.92 | attack | failed_logins |
2019-07-28 11:46:03 |
203.170.67.219 | attackspam | Jul 28 03:12:29 ArkNodeAT sshd\[19361\]: Invalid user 666666 from 203.170.67.219 Jul 28 03:12:29 ArkNodeAT sshd\[19361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.170.67.219 Jul 28 03:12:31 ArkNodeAT sshd\[19361\]: Failed password for invalid user 666666 from 203.170.67.219 port 63141 ssh2 |
2019-07-28 12:24:30 |
121.231.43.89 | attack | IP: 121.231.43.89 ASN: AS4134 No.31 Jin-rong Street Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 28/07/2019 1:13:27 AM UTC |
2019-07-28 11:47:30 |
125.214.57.172 | attackspambots | IP: 125.214.57.172 ASN: AS24086 Viettel Corporation Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 28/07/2019 1:13:35 AM UTC |
2019-07-28 11:38:30 |