139.99.192.189

Basic Info

City: unknown

Region: unknown

Country: Australia

Internet Service Provider: OVH Australia Pty Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	[2020-08-24 02:08:33] NOTICE[1185] chan_sip.c: Registration from '"322"' failed for '139.99.192.189:23369' - Wrong password [2020-08-24 02:08:33] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-24T02:08:33.794-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="322",SessionID="0x7f10c4239d98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.192.189/23369",Challenge="11cf6f0a",ReceivedChallenge="11cf6f0a",ReceivedHash="265c52b28983f18d23133d93ab72aca2" [2020-08-24 02:10:46] NOTICE[1185] chan_sip.c: Registration from '"323"' failed for '139.99.192.189:33802' - Wrong password [2020-08-24 02:10:46] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-24T02:10:46.457-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="323",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139. ...	2020-08-24 14:57:28
attackspambots	[2020-08-22 02:34:59] NOTICE[1185] chan_sip.c: Registration from '"101"' failed for '139.99.192.189:39813' - Wrong password [2020-08-22 02:34:59] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-22T02:34:59.381-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="101",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.192.189/62784",Challenge="1b2230d6",ReceivedChallenge="1b2230d6",ReceivedHash="685e937a07b845a3bf686a16a2a92108" [2020-08-22 02:35:12] NOTICE[1185] chan_sip.c: Registration from '"102"' failed for '139.99.192.189:57524' - Wrong password [2020-08-22 02:35:12] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-22T02:35:12.916-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="102",SessionID="0x7f10c4481d18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139. ...	2020-08-22 15:02:58
attackspambots	[2020-08-21 05:13:12] NOTICE[1185] chan_sip.c: Registration from '"668"' failed for '139.99.192.189:49864' - Wrong password [2020-08-21 05:13:12] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-21T05:13:12.224-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="668",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.192.189/49864",Challenge="386eeeb8",ReceivedChallenge="386eeeb8",ReceivedHash="a9351edff0f7401f32ff36b939fd0afe" [2020-08-21 05:15:14] NOTICE[1185] chan_sip.c: Registration from '"669"' failed for '139.99.192.189:1553' - Wrong password [2020-08-21 05:15:14] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-21T05:15:14.585-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="669",SessionID="0x7f10c43f67a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.9 ...	2020-08-21 17:19:11
attackbotsspam	[2020-08-20 13:04:00] NOTICE[1185] chan_sip.c: Registration from '"433"' failed for '139.99.192.189:24345' - Wrong password [2020-08-20 13:04:00] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-20T13:04:00.923-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="433",SessionID="0x7f10c4242e18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.192.189/24345",Challenge="30913389",ReceivedChallenge="30913389",ReceivedHash="9fb9071820225e43def5d486887d2635" [2020-08-20 13:12:33] NOTICE[1185] chan_sip.c: Registration from '"435"' failed for '139.99.192.189:44577' - Wrong password [2020-08-20 13:12:33] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-20T13:12:33.025-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="435",SessionID="0x7f10c41b0fe8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139. ...	2020-08-21 01:46:29
attackspambots	[2020-08-11 13:17:56] NOTICE[1185] chan_sip.c: Registration from '"211"' failed for '139.99.192.189:16680' - Wrong password [2020-08-11 13:17:56] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-11T13:17:56.250-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="211",SessionID="0x7f10c405ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.192.189/16680",Challenge="349ecdc2",ReceivedChallenge="349ecdc2",ReceivedHash="cbd06a8483a20027c730e0c8c659391d" [2020-08-11 13:22:55] NOTICE[1185] chan_sip.c: Registration from '"212"' failed for '139.99.192.189:22491' - Wrong password [2020-08-11 13:22:55] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-11T13:22:55.641-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="212",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139. ...	2020-08-12 01:32:44

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.192.189
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46023
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.192.189.			IN	A

;; AUTHORITY SECTION:
.			359	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081100 1800 900 604800 86400

;; Query time: 146 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 12 01:32:36 CST 2020
;; MSG SIZE  rcvd: 118

Host info

189.192.99.139.in-addr.arpa domain name pointer 189.ip-139-99-192.eu.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
189.192.99.139.in-addr.arpa	name = 189.ip-139-99-192.eu.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.75.174.87	attackbotsspam	Dec 4 07:22:18 MainVPS sshd[916]: Invalid user morozumi from 106.75.174.87 port 32912 Dec 4 07:22:18 MainVPS sshd[916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.174.87 Dec 4 07:22:18 MainVPS sshd[916]: Invalid user morozumi from 106.75.174.87 port 32912 Dec 4 07:22:21 MainVPS sshd[916]: Failed password for invalid user morozumi from 106.75.174.87 port 32912 ssh2 Dec 4 07:29:59 MainVPS sshd[14789]: Invalid user hung from 106.75.174.87 port 33934 ...	2019-12-04 15:14:51
212.64.88.97	attackbots	2019-12-04T07:23:20.416890scmdmz1 sshd\[3614\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.88.97 user=root 2019-12-04T07:23:22.201568scmdmz1 sshd\[3614\]: Failed password for root from 212.64.88.97 port 49970 ssh2 2019-12-04T07:30:19.880810scmdmz1 sshd\[4377\]: Invalid user guest from 212.64.88.97 port 57456 ...	2019-12-04 14:50:14
121.142.111.98	attack	Automatic report - Banned IP Access	2019-12-04 14:44:33
210.183.21.48	attackbotsspam	Dec 3 20:23:52 eddieflores sshd\[4333\]: Invalid user er from 210.183.21.48 Dec 3 20:23:52 eddieflores sshd\[4333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.183.21.48 Dec 3 20:23:55 eddieflores sshd\[4333\]: Failed password for invalid user er from 210.183.21.48 port 15696 ssh2 Dec 3 20:30:23 eddieflores sshd\[4929\]: Invalid user burenheide from 210.183.21.48 Dec 3 20:30:23 eddieflores sshd\[4929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.183.21.48	2019-12-04 14:50:28
106.12.28.36	attackspam	Dec 4 07:50:00 vps666546 sshd\[23185\]: Invalid user hasok from 106.12.28.36 port 48012 Dec 4 07:50:00 vps666546 sshd\[23185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.28.36 Dec 4 07:50:02 vps666546 sshd\[23185\]: Failed password for invalid user hasok from 106.12.28.36 port 48012 ssh2 Dec 4 07:56:40 vps666546 sshd\[23452\]: Invalid user buildroot from 106.12.28.36 port 50120 Dec 4 07:56:40 vps666546 sshd\[23452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.28.36 ...	2019-12-04 15:02:39
182.253.228.184	attack	Fail2Ban Ban Triggered	2019-12-04 14:54:20
5.188.86.22	attack	firewall-block, port(s): 7789/tcp	2019-12-04 15:11:23
222.186.175.161	attackbots	Dec 4 13:41:00 itv-usvr-02 sshd[26645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.161 user=root Dec 4 13:41:02 itv-usvr-02 sshd[26645]: Failed password for root from 222.186.175.161 port 37202 ssh2	2019-12-04 14:47:34
36.66.69.33	attackbots	Dec 4 07:50:14 h2177944 sshd\[25582\]: Invalid user monnet from 36.66.69.33 port 4419 Dec 4 07:50:14 h2177944 sshd\[25582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.66.69.33 Dec 4 07:50:16 h2177944 sshd\[25582\]: Failed password for invalid user monnet from 36.66.69.33 port 4419 ssh2 Dec 4 07:57:25 h2177944 sshd\[25804\]: Invalid user asterisk from 36.66.69.33 port 46527 Dec 4 07:57:25 h2177944 sshd\[25804\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.66.69.33 ...	2019-12-04 15:09:34
198.27.74.64	attack	198.27.74.64 - - [04/Dec/2019:07:29:58 +0100] "GET /wp-login.php HTTP/1.1" 200 1896 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.27.74.64 - - [04/Dec/2019:07:29:58 +0100] "POST /wp-login.php HTTP/1.1" 200 2294 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.27.74.64 - - [04/Dec/2019:07:29:58 +0100] "GET /wp-login.php HTTP/1.1" 200 1896 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.27.74.64 - - [04/Dec/2019:07:29:59 +0100] "POST /wp-login.php HTTP/1.1" 200 2268 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.27.74.64 - - [04/Dec/2019:07:29:59 +0100] "GET /wp-login.php HTTP/1.1" 200 1896 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.27.74.64 - - [04/Dec/2019:07:30:00 +0100] "POST /wp-login.php HTTP/1.1" 200 2269 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-12-04 15:12:03
103.114.107.129	attackbotsspam	Unauthorized connection attempt from IP address 103.114.107.129 on Port 3389(RDP)	2019-12-04 15:04:09
222.186.52.78	attackbotsspam	2019-12-04T06:30:03.324755abusebot-6.cloudsearch.cf sshd\[17602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.78 user=root	2019-12-04 14:48:27
62.234.67.109	attack	Dec 4 07:18:24 ns382633 sshd\[22397\]: Invalid user admin from 62.234.67.109 port 55020 Dec 4 07:18:24 ns382633 sshd\[22397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.67.109 Dec 4 07:18:26 ns382633 sshd\[22397\]: Failed password for invalid user admin from 62.234.67.109 port 55020 ssh2 Dec 4 07:29:53 ns382633 sshd\[24211\]: Invalid user signature from 62.234.67.109 port 38401 Dec 4 07:29:53 ns382633 sshd\[24211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.67.109	2019-12-04 15:19:42
72.143.15.82	attackbots	Dec 3 21:05:35 php1 sshd\[7213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.143.15.82 user=root Dec 3 21:05:37 php1 sshd\[7213\]: Failed password for root from 72.143.15.82 port 65104 ssh2 Dec 3 21:12:43 php1 sshd\[8262\]: Invalid user server from 72.143.15.82 Dec 3 21:12:43 php1 sshd\[8262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.143.15.82 Dec 3 21:12:45 php1 sshd\[8262\]: Failed password for invalid user server from 72.143.15.82 port 61143 ssh2	2019-12-04 15:15:37
179.145.55.199	attack	Automatic report - Port Scan Attack	2019-12-04 14:55:13

Recently Reported IPs

171.241.101.177	118.24.241.254	137.74.16.65	218.201.82.167
189.244.71.201	3.93.52.203	197.245.11.175	179.185.80.196
54.211.64.174	41.242.142.195	198.23.152.218	18.212.239.193
35.173.219.244	103.114.72.218	34.234.88.216	187.180.199.48
164.90.151.183	3.0.69.254	132.85.106.95	222.188.54.23