139.99.218.54 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Australia

Internet Service Provider: OVH Australia Pty Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Exploit Attempt	2020-05-14 04:12:48

Comments on same subnet:

IP	Type	Details	Datetime
139.99.218.212	attackbots	Chat Spam	2019-09-30 02:53:16
139.99.218.233	attackspam	Chat Spam	2019-09-07 11:06:39
139.99.218.189	attack	\[2019-06-24 04:15:50\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:48997' - Wrong password \[2019-06-24 04:15:50\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-24T04:15:50.477-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="091",SessionID="0x7fc4242a2868",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.218.189/48997",Challenge="36d865c9",ReceivedChallenge="36d865c9",ReceivedHash="4a65d81ad2c4044d9d295f7ad31a57c8" \[2019-06-24 04:15:52\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:52227' - Wrong password \[2019-06-24 04:15:52\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-24T04:15:52.073-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5000000001",SessionID="0x7fc42417ead8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/	2019-06-24 17:10:38
139.99.218.30	attackspam	Fail2Ban Ban Triggered	2019-06-24 07:55:57
139.99.218.189	attackbotsspam	\[2019-06-23 16:10:37\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:54555' - Wrong password \[2019-06-23 16:10:37\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-23T16:10:37.947-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="091",SessionID="0x7fc4242a2868",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.218.189/54555",Challenge="5e880bfa",ReceivedChallenge="5e880bfa",ReceivedHash="6bc0d3c5dac791ce923dfd1cc64e4829" \[2019-06-23 16:10:39\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:46369' - Wrong password \[2019-06-23 16:10:39\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-23T16:10:39.473-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="51",SessionID="0x7fc424245928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.218.1	2019-06-24 04:59:28
139.99.218.189	attackspambots	\[2019-06-23 12:44:01\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:49800' - Wrong password \[2019-06-23 12:44:01\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-23T12:44:01.969-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="091",SessionID="0x7fc4242a2868",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.218.189/49800",Challenge="1ba70511",ReceivedChallenge="1ba70511",ReceivedHash="b2fadf1157e2aea79954277bd382840b" \[2019-06-23 12:44:03\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:43777' - Wrong password \[2019-06-23 12:44:03\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-23T12:44:03.509-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4000000001",SessionID="0x7fc42417ead8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/	2019-06-24 01:36:06
139.99.218.30	attack	[SunJun2302:23:20.8385312019][:error][pid6731:tid47326407059200][client139.99.218.30:62053][client139.99.218.30]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:POST\\|GET\)"atREQUEST_METHOD.[file"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf"][line"3488"][id"336461"][rev"8"][msg"Atomicorp.comWAFRules-VirtualJustInTimePatch:Possibleattempttomaliciouslyaccesswp-config.phpfile"][data"../../../../wp-config.php"][severity"CRITICAL"][hostname"giochintavola.ch"][uri"/wp-admin/admin-ajax.php"][unique_id"XQ7GeFrcV1YeehGUUjPgMAAAAEk"][SunJun2302:23:21.3870422019][:error][pid6732:tid47326432274176][client139.99.218.30:62392][client139.99.218.30]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"206"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRIT	2019-06-23 08:42:09
139.99.218.189	attack	\[2019-06-22 03:57:01\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:35330' - Wrong password \[2019-06-22 03:57:01\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-22T03:57:01.550-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="091",SessionID="0x7fc4240077d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.218.189/35330",Challenge="041cc17f",ReceivedChallenge="041cc17f",ReceivedHash="71b8eb87e94e589403512ca2a1f401d1" \[2019-06-22 03:57:03\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:49604' - Wrong password \[2019-06-22 03:57:03\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-22T03:57:03.165-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="200000001",SessionID="0x7fc424036c88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD	2019-06-22 17:05:00

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.218.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43928
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.218.54.			IN	A

;; AUTHORITY SECTION:
.			372	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051301 1800 900 604800 86400

;; Query time: 78 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 14 04:12:44 CST 2020
;; MSG SIZE  rcvd: 117

Host info

54.218.99.139.in-addr.arpa domain name pointer ip-139-99-218.eu.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
54.218.99.139.in-addr.arpa	name = ip-139-99-218.eu.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
46.160.84.179	attack	spam	2020-01-10 20:51:33
78.131.58.83	attackspambots	spam	2020-01-10 20:51:07
46.101.1.198	attack	Jan 10 12:32:28 XXXXXX sshd[36422]: Invalid user wp-user from 46.101.1.198 port 41848	2020-01-10 21:08:43
158.46.127.222	attackspambots	spam	2020-01-10 20:33:07
106.111.210.25	attack	spam	2020-01-10 20:36:28
71.6.233.91	attackspam	spam	2020-01-10 20:41:37
104.244.79.250	attack	Jan 10 12:20:34 XXXXXX sshd[36305]: Invalid user fake from 104.244.79.250 port 48224	2020-01-10 21:08:21
117.4.37.34	attack	445/tcp [2020-01-10]1pkt	2020-01-10 20:54:30
185.36.63.212	attackbots	email spam	2020-01-10 20:31:33
190.219.48.16	attackbots	spam	2020-01-10 20:53:40
178.150.194.243	attack	proto=tcp . spt=53168 . dpt=25 . Listed on MailSpike (spam wave plus L3-L5) also unsubscore and rbldns-ru (473)	2020-01-10 20:31:46
195.78.113.111	attack	firewall-block, port(s): 445/tcp	2020-01-10 20:46:30
198.144.149.165	attack	spam	2020-01-10 20:27:51
193.77.242.110	attackbots	spam	2020-01-10 21:03:24
31.44.177.83	attack	email spam	2020-01-10 20:43:55

Recently Reported IPs

201.4.135.73	200.68.128.116	80.11.165.4	52.178.33.238
196.218.126.162	193.228.162.185	201.127.133.85	182.74.100.42
94.25.104.139	181.209.82.74	109.122.109.71	51.75.103.101
171.61.139.66	134.175.20.81	54.36.150.187	14.172.251.85
182.71.161.227	109.254.219.226	133.23.227.99	128.76.79.21