139.99.125.84 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: OVH Singapore Pte. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Port probing on unauthorized port 22	2020-08-29 02:11:39

Comments on same subnet:

IP	Type	Details	Datetime
139.99.125.58	attackspam	Blocked by Sophos UTM Network Protection . / / proto=6 . srcport=10001 . dstport=32936 . (1089)	2020-09-17 19:04:12
139.99.125.230	attack	TCP (SYN) 139.99.125.230:51409 -> port 22, len 48	2020-09-01 21:06:56
139.99.125.231	attackspambots	TCP (SYN) 139.99.125.231:50637 -> port 22, len 48	2020-09-01 19:04:17
139.99.125.230	attack	SmallBizIT.US 1 packets to tcp(22)	2020-09-01 18:25:28
139.99.125.230	attackspambots	2020-08-31T19:25:50.598331abusebot-2.cloudsearch.cf sshd[11620]: Invalid user ubnt from 139.99.125.230 port 59752 2020-08-31T19:25:50.645193abusebot-2.cloudsearch.cf sshd[11622]: Invalid user admin from 139.99.125.230 port 35698 2020-08-31T19:25:50.647160abusebot-2.cloudsearch.cf sshd[11626]: Invalid user 1234 from 139.99.125.230 port 43918 2020-08-31T19:25:51.722996abusebot-2.cloudsearch.cf sshd[11628]: Invalid user usuario from 139.99.125.230 port 49656 ...	2020-09-01 03:42:24
139.99.125.86	attack	Attempted connection to port 64129.	2020-08-24 21:24:56
139.99.125.191	attackspam	139.99.125.191 was recorded 6 times by 4 hosts attempting to connect to the following ports: 26014,50570,39019,51856. Incident counter (4h, 24h, all-time): 6, 31, 1174	2020-04-28 21:33:58
139.99.125.191	attackbotsspam	139.99.125.191 was recorded 11 times by 7 hosts attempting to connect to the following ports: 26014,51856,39019,20269,50570,60429. Incident counter (4h, 24h, all-time): 11, 19, 1146	2020-04-27 23:12:32
139.99.125.191	attack	139.99.125.191 was recorded 28 times by 9 hosts attempting to connect to the following ports: 50570,51856,39019,54434,56610,52084,20269,60429,51142. Incident counter (4h, 24h, all-time): 28, 86, 1123	2020-04-25 21:06:30
139.99.125.191	attack	Port 27034 scan denied	2020-03-28 19:23:50
139.99.125.191	attackbots	139.99.125.191 was recorded 13 times by 8 hosts attempting to connect to the following ports: 39019,54434,20269,51856,56610,52084,60429,51142. Incident counter (4h, 24h, all-time): 13, 112, 855	2020-03-28 06:26:16
139.99.125.191	attackbotsspam	139.99.125.191 was recorded 8 times by 5 hosts attempting to connect to the following ports: 60429,54434,50570,52084,51142. Incident counter (4h, 24h, all-time): 8, 116, 846	2020-03-28 04:19:40
139.99.125.191	attackspam	probes 16 times on the port 34928 59003 62781	2020-03-27 18:25:06
139.99.125.191	attackspambots	139.99.125.191 was recorded 20 times by 9 hosts attempting to connect to the following ports: 51856,39019,50570,52084,54434,56610,51142,60429,26014. Incident counter (4h, 24h, all-time): 20, 82, 683	2020-03-26 16:58:49
139.99.125.191	attack	139.99.125.191 was recorded 20 times by 6 hosts attempting to connect to the following ports: 54434,56610,51142,51856,50570,60429. Incident counter (4h, 24h, all-time): 20, 96, 592	2020-03-25 14:04:47

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.125.84
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59117
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.125.84.			IN	A

;; AUTHORITY SECTION:
.			504	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082801 1800 900 604800 86400

;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 29 02:11:36 CST 2020
;; MSG SIZE  rcvd: 117

Host info

84.125.99.139.in-addr.arpa domain name pointer ns568566.ip-139-99-125.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
84.125.99.139.in-addr.arpa	name = ns568566.ip-139-99-125.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
138.197.180.102	attack	Jun 7 03:01:50 web1 sshd[19689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.180.102 user=root Jun 7 03:01:52 web1 sshd[19689]: Failed password for root from 138.197.180.102 port 52922 ssh2 Jun 7 03:12:19 web1 sshd[24144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.180.102 user=root Jun 7 03:12:22 web1 sshd[24144]: Failed password for root from 138.197.180.102 port 41196 ssh2 Jun 7 03:15:29 web1 sshd[24964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.180.102 user=root Jun 7 03:15:31 web1 sshd[24964]: Failed password for root from 138.197.180.102 port 43772 ssh2 Jun 7 03:18:37 web1 sshd[25664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.180.102 user=root Jun 7 03:18:39 web1 sshd[25664]: Failed password for root from 138.197.180.102 port 46412 ssh2 Jun 7 03:21:47 web1 ...	2020-06-07 01:24:22
14.98.4.82	attackbots	Jun 6 12:19:12 ws24vmsma01 sshd[123257]: Failed password for root from 14.98.4.82 port 29633 ssh2 ...	2020-06-07 01:50:52
211.252.85.17	attackspam	2020-06-06T12:36:56.8512301495-001 sshd[38025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.252.85.17 user=root 2020-06-06T12:36:59.3075321495-001 sshd[38025]: Failed password for root from 211.252.85.17 port 42802 ssh2 2020-06-06T12:45:16.9361291495-001 sshd[38415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.252.85.17 user=root 2020-06-06T12:45:19.0337621495-001 sshd[38415]: Failed password for root from 211.252.85.17 port 46324 ssh2 2020-06-06T12:49:46.6454681495-001 sshd[38543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.252.85.17 user=root 2020-06-06T12:49:48.1431191495-001 sshd[38543]: Failed password for root from 211.252.85.17 port 48084 ssh2 ...	2020-06-07 01:23:19
46.177.212.21	attackbotsspam	Unauthorized connection attempt detected from IP address 46.177.212.21 to port 23	2020-06-07 01:17:50
221.229.218.50	attackbotsspam	Jun 6 17:55:06 server sshd[11975]: Failed password for root from 221.229.218.50 port 39075 ssh2 Jun 6 17:59:34 server sshd[16952]: Failed password for root from 221.229.218.50 port 33080 ssh2 Jun 6 18:03:39 server sshd[21670]: Failed password for root from 221.229.218.50 port 55314 ssh2	2020-06-07 01:42:12
202.152.1.89	attack	firewall-block, port(s): 31637/tcp	2020-06-07 01:55:18
77.42.127.159	attack	Automatic report - Port Scan Attack	2020-06-07 01:26:17
183.195.121.197	attackspambots	Jun 6 13:07:16 onepixel sshd[3651855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.195.121.197 Jun 6 13:07:16 onepixel sshd[3651855]: Invalid user 3 from 183.195.121.197 port 54057 Jun 6 13:07:17 onepixel sshd[3651855]: Failed password for invalid user 3 from 183.195.121.197 port 54057 ssh2 Jun 6 13:11:32 onepixel sshd[3652499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.195.121.197 user=root Jun 6 13:11:34 onepixel sshd[3652499]: Failed password for root from 183.195.121.197 port 52140 ssh2	2020-06-07 01:40:52
103.124.93.34	attackbotsspam	Jun 6 14:21:39 piServer sshd[23529]: Failed password for root from 103.124.93.34 port 46728 ssh2 Jun 6 14:25:52 piServer sshd[23845]: Failed password for root from 103.124.93.34 port 38360 ssh2 ...	2020-06-07 01:21:30
217.12.49.164	attackbots	Ref: mx Logwatch report	2020-06-07 01:43:38
121.42.142.188	attackbotsspam	121.42.142.188 - - [06/Jun/2020:06:29:36 -0600] "HEAD /dede/login.php HTTP/1.1" 301 235 "-" "-" ...	2020-06-07 01:32:10
177.131.122.106	attackbots	detected by Fail2Ban	2020-06-07 01:51:18
222.173.12.35	attackspam	Jun 6 10:31:24 firewall sshd[18565]: Failed password for root from 222.173.12.35 port 44921 ssh2 Jun 6 10:33:28 firewall sshd[18612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.173.12.35 user=root Jun 6 10:33:29 firewall sshd[18612]: Failed password for root from 222.173.12.35 port 21574 ssh2 ...	2020-06-07 01:33:57
195.54.161.41	attackbotsspam	Jun 6 19:51:28 debian-2gb-nbg1-2 kernel: \[13724636.623916\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.54.161.41 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=424 PROTO=TCP SPT=59422 DPT=4564 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-07 01:55:52
216.254.186.76	attackspambots	Jun 6 17:17:20 odroid64 sshd\[19884\]: User root from 216.254.186.76 not allowed because not listed in AllowUsers Jun 6 17:17:20 odroid64 sshd\[19884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.254.186.76 user=root ...	2020-06-07 01:37:48

Recently Reported IPs

48.59.64.171	242.224.150.74	124.158.157.61	17.95.252.57
102.111.175.70	1.32.9.90	28.156.17.161	240.177.91.211
20.246.214.12	192.175.195.133	127.58.194.230	177.131.4.148
205.104.214.180	26.163.232.82	224.47.236.69	80.226.135.121
40.6.4.186	42.114.162.107	207.55.207.232	80.141.88.112