Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: Singapore VPS Hosting Host4Fun.com

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
2020-02-01T15:01:24.862381hz01.yumiweb.com sshd\[6650\]: Invalid user admin from 139.99.22.94 port 57969
2020-02-01T15:01:26.470579hz01.yumiweb.com sshd\[6652\]: Invalid user admin from 139.99.22.94 port 58734
2020-02-01T15:01:28.071920hz01.yumiweb.com sshd\[6654\]: Invalid user user from 139.99.22.94 port 59286
...
2020-02-02 02:36:38
Comments on same subnet:
IP Type Details Datetime
139.99.222.79 spambotsattackproxynormal
Super win
2022-06-06 06:47:34
139.99.22.196 attackbots
Port probing on unauthorized port 7134
2020-03-10 08:02:13
139.99.221.61 attack
$f2bV_matches
2020-02-12 00:54:56
139.99.221.61 attack
Unauthorized connection attempt detected from IP address 139.99.221.61 to port 2220 [J]
2020-02-06 16:49:17
139.99.221.61 attackbots
Feb  2 05:58:33 haigwepa sshd[21028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.221.61 
Feb  2 05:58:36 haigwepa sshd[21028]: Failed password for invalid user upload from 139.99.221.61 port 37437 ssh2
...
2020-02-02 13:10:17
139.99.221.61 attack
Unauthorized connection attempt detected from IP address 139.99.221.61 to port 2220 [J]
2020-01-26 15:13:09
139.99.221.61 attackspambots
Unauthorized connection attempt detected from IP address 139.99.221.61 to port 2220 [J]
2020-01-17 21:10:34
139.99.221.61 attack
$f2bV_matches
2020-01-11 23:46:20
139.99.221.61 attackbotsspam
Invalid user tomek from 139.99.221.61 port 57996
2020-01-10 22:30:27
139.99.221.61 attack
Dec 31 03:27:37 ws19vmsma01 sshd[147604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.221.61
Dec 31 03:27:39 ws19vmsma01 sshd[147604]: Failed password for invalid user liaan from 139.99.221.61 port 35512 ssh2
...
2019-12-31 16:00:05
139.99.221.61 attack
Dec  4 15:46:10 Ubuntu-1404-trusty-64-minimal sshd\[22367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.221.61  user=root
Dec  4 15:46:12 Ubuntu-1404-trusty-64-minimal sshd\[22367\]: Failed password for root from 139.99.221.61 port 37864 ssh2
Dec  4 15:57:05 Ubuntu-1404-trusty-64-minimal sshd\[2839\]: Invalid user admin from 139.99.221.61
Dec  4 15:57:05 Ubuntu-1404-trusty-64-minimal sshd\[2839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.221.61
Dec  4 15:57:07 Ubuntu-1404-trusty-64-minimal sshd\[2839\]: Failed password for invalid user admin from 139.99.221.61 port 51553 ssh2
2019-12-04 23:20:56
139.99.221.61 attackbots
Nov 29 09:12:50 OPSO sshd\[6006\]: Invalid user dwlee200 from 139.99.221.61 port 52802
Nov 29 09:12:50 OPSO sshd\[6006\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.221.61
Nov 29 09:12:52 OPSO sshd\[6006\]: Failed password for invalid user dwlee200 from 139.99.221.61 port 52802 ssh2
Nov 29 09:16:52 OPSO sshd\[6662\]: Invalid user minella from 139.99.221.61 port 43209
Nov 29 09:16:52 OPSO sshd\[6662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.221.61
2019-11-29 16:58:50
139.99.221.61 attack
2019-11-26T22:57:20.361407abusebot-7.cloudsearch.cf sshd\[24597\]: Invalid user creation from 139.99.221.61 port 44649
2019-11-27 07:05:52
139.99.221.61 attack
Nov 23 16:46:03 server sshd\[23466\]: User root from 139.99.221.61 not allowed because listed in DenyUsers
Nov 23 16:46:03 server sshd\[23466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.221.61  user=root
Nov 23 16:46:04 server sshd\[23466\]: Failed password for invalid user root from 139.99.221.61 port 52611 ssh2
Nov 23 16:50:24 server sshd\[2950\]: User root from 139.99.221.61 not allowed because listed in DenyUsers
Nov 23 16:50:24 server sshd\[2950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.221.61  user=root
2019-11-23 23:01:16
139.99.221.61 attackbots
$f2bV_matches
2019-11-16 17:03:13
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.22.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4290
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.22.94.			IN	A

;; AUTHORITY SECTION:
.			531	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020101 1800 900 604800 86400

;; Query time: 120 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 02 02:36:35 CST 2020
;; MSG SIZE  rcvd: 116
Host info
94.22.99.139.in-addr.arpa domain name pointer ip94.ip-139-99-22.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
94.22.99.139.in-addr.arpa	name = ip94.ip-139-99-22.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
222.186.15.115 attackbotsspam
Sep  5 17:44:30 theomazars sshd[13935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.115  user=root
Sep  5 17:44:32 theomazars sshd[13935]: Failed password for root from 222.186.15.115 port 10530 ssh2
2020-09-05 23:53:10
46.99.133.165 attackbots
Icarus honeypot on github
2020-09-06 00:35:34
190.245.193.48 attack
Sep  5 00:33:23 mxgate1 postfix/postscreen[5429]: CONNECT from [190.245.193.48]:35392 to [176.31.12.44]:25
Sep  5 00:33:23 mxgate1 postfix/dnsblog[5430]: addr 190.245.193.48 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Sep  5 00:33:23 mxgate1 postfix/dnsblog[5430]: addr 190.245.193.48 listed by domain zen.spamhaus.org as 127.0.0.11
Sep  5 00:33:23 mxgate1 postfix/dnsblog[5430]: addr 190.245.193.48 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  5 00:33:23 mxgate1 postfix/dnsblog[5433]: addr 190.245.193.48 listed by domain cbl.abuseat.org as 127.0.0.2
Sep  5 00:33:23 mxgate1 postfix/dnsblog[5431]: addr 190.245.193.48 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  5 00:33:29 mxgate1 postfix/postscreen[5429]: DNSBL rank 5 for [190.245.193.48]:35392
Sep x@x
Sep  5 00:33:31 mxgate1 postfix/postscreen[5429]: HANGUP after 1.9 from [190.245.193.48]:35392 in tests after SMTP handshake
Sep  5 00:33:31 mxgate1 postfix/postscreen[5429]: DISCONNECT [190.245.193.4........
-------------------------------
2020-09-05 23:47:27
51.75.52.118 attackspam
2020-09-05T17:47:15+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)
2020-09-06 00:14:36
181.49.176.36 attackspambots
445/tcp 445/tcp 445/tcp...
[2020-07-09/09-04]21pkt,1pt.(tcp)
2020-09-05 23:51:45
138.68.21.125 attackspam
Sep  5 17:14:58 MainVPS sshd[24608]: Invalid user web from 138.68.21.125 port 53064
Sep  5 17:14:58 MainVPS sshd[24608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125
Sep  5 17:14:58 MainVPS sshd[24608]: Invalid user web from 138.68.21.125 port 53064
Sep  5 17:14:59 MainVPS sshd[24608]: Failed password for invalid user web from 138.68.21.125 port 53064 ssh2
Sep  5 17:22:30 MainVPS sshd[32625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125  user=root
Sep  5 17:22:32 MainVPS sshd[32625]: Failed password for root from 138.68.21.125 port 57294 ssh2
...
2020-09-06 00:23:27
190.37.233.232 attackspambots
Honeypot attack, port: 445, PTR: 190-37-233-232.dyn.dsl.cantv.net.
2020-09-06 00:26:05
51.83.139.55 attack
2020-09-05 11:00:43.325653-0500  localhost sshd[37642]: Failed password for root from 51.83.139.55 port 46855 ssh2
2020-09-06 00:25:38
49.234.182.99 attackbots
Sep  5 14:20:17 sxvn sshd[127998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.182.99
2020-09-06 00:13:37
1.227.100.17 attackbots
web-1 [ssh] SSH Attack
2020-09-05 23:58:44
112.85.42.174 attackbotsspam
2020-09-05T15:51:07.679769server.espacesoutien.com sshd[20522]: Failed password for root from 112.85.42.174 port 10726 ssh2
2020-09-05T15:51:11.129765server.espacesoutien.com sshd[20522]: Failed password for root from 112.85.42.174 port 10726 ssh2
2020-09-05T15:51:14.795003server.espacesoutien.com sshd[20522]: Failed password for root from 112.85.42.174 port 10726 ssh2
2020-09-05T15:51:18.332975server.espacesoutien.com sshd[20522]: Failed password for root from 112.85.42.174 port 10726 ssh2
...
2020-09-06 00:02:48
60.223.235.71 attackbotsspam
" "
2020-09-06 00:21:34
80.82.68.201 attackbots
B: WP plugin attack
2020-09-06 00:32:51
222.186.42.7 attack
Sep  5 17:44:23 vps639187 sshd\[19588\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.7  user=root
Sep  5 17:44:24 vps639187 sshd\[19588\]: Failed password for root from 222.186.42.7 port 51993 ssh2
Sep  5 17:44:27 vps639187 sshd\[19588\]: Failed password for root from 222.186.42.7 port 51993 ssh2
...
2020-09-05 23:56:39
201.222.22.241 attack
SpamScore above: 10.0
2020-09-06 00:24:53

Recently Reported IPs

214.230.240.23 154.245.210.12 142.155.106.145 69.176.7.190
1.91.26.171 170.169.82.245 192.241.239.138 222.72.224.83
139.44.230.150 165.102.231.60 70.106.23.102 83.78.185.154
169.196.169.32 193.12.236.142 167.87.180.183 103.247.186.139
122.116.221.44 90.26.157.9 41.150.12.188 125.56.14.46