City: unknown
Region: unknown
Country: Singapore
Internet Service Provider: OVH Singapore Pte. Ltd
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | Oct 16 19:09:00 localhost postfix/smtpd[31115]: disconnect from unknown[139.99.77.204] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Oct 16 19:14:15 localhost postfix/smtpd[32521]: disconnect from unknown[139.99.77.204] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Oct 16 20:42:41 localhost postfix/smtpd[23991]: disconnect from unknown[139.99.77.204] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Oct 16 20:44:00 localhost postfix/smtpd[23991]: disconnect from unknown[139.99.77.204] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Oct 16 21:17:48 localhost postfix/smtpd[512]: disconnect from unknown[139.99.77.204] ehlo=1 auth=0/1 quhostname=1 commands=2/3 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=139.99.77.204 |
2019-10-29 05:23:30 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.99.77.197 | attack | Oct 16 20:39:13 localhost postfix/smtpd[22838]: disconnect from unknown[139.99.77.197] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Oct 16 21:22:42 localhost postfix/smtpd[2020]: disconnect from unknown[139.99.77.197] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Oct 16 22:04:45 localhost postfix/smtpd[12185]: disconnect from unknown[139.99.77.197] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Oct 16 22:46:21 localhost postfix/smtpd[23301]: disconnect from unknown[139.99.77.197] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Oct 16 23:31:12 localhost postfix/smtpd[2628]: disconnect from unknown[139.99.77.197] ehlo=1 auth=0/1 quhostname=1 commands=2/3 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=139.99.77.197 |
2019-10-29 05:28:23 |
| 139.99.77.160 | attackspambots | WordPress brute force |
2019-07-20 06:04:10 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.77.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16443
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.77.204. IN A
;; AUTHORITY SECTION:
. 417 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019102801 1800 900 604800 86400
;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 29 05:23:27 CST 2019
;; MSG SIZE rcvd: 117204.77.99.139.in-addr.arpa domain name pointer ip-139-99-77.eu.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
204.77.99.139.in-addr.arpa name = ip-139-99-77.eu.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 162.243.142.211 | attack | ET SCAN Suspicious inbound to PostgreSQL port 5432 - port: 5432 proto: TCP cat: Potentially Bad Traffic |
2020-05-03 06:36:38 |
| 103.248.83.226 | attackspambots | ET CINS Active Threat Intelligence Poor Reputation IP group 96 - port: 28971 proto: TCP cat: Misc Attack |
2020-05-03 07:12:02 |
| 61.178.213.2 | attackspambots | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-05-03 06:57:10 |
| 83.97.20.35 | attackspambots | 1588458962 - 05/03/2020 05:36:02 Host: 35.20.97.83.ro.ovo.sc/83.97.20.35 Port: 13 TCP Blocked ... |
2020-05-03 06:52:42 |
| 138.68.82.194 | attackbotsspam | 2020-05-02T22:27:34.131897shield sshd\[24374\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 user=root 2020-05-02T22:27:36.208219shield sshd\[24374\]: Failed password for root from 138.68.82.194 port 41660 ssh2 2020-05-02T22:31:40.930412shield sshd\[25391\]: Invalid user bishop from 138.68.82.194 port 51348 2020-05-02T22:31:40.934933shield sshd\[25391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 2020-05-02T22:31:43.116514shield sshd\[25391\]: Failed password for invalid user bishop from 138.68.82.194 port 51348 ssh2 |
2020-05-03 06:37:55 |
| 51.132.128.217 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 34 - port: 3389 proto: TCP cat: Misc Attack |
2020-05-03 06:58:25 |
| 92.119.160.145 | attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 83 - port: 1009 proto: TCP cat: Misc Attack |
2020-05-03 06:44:42 |
| 92.118.37.70 | attack | Multiport scan : 11 ports scanned 3390 3391 3392 3394 3397 3399 3400 3403 3406 3407 3410 |
2020-05-03 06:46:40 |
| 104.140.188.54 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 99 - port: 21 proto: TCP cat: Misc Attack |
2020-05-03 06:41:14 |
| 92.118.37.53 | attackspambots | ET CINS Active Threat Intelligence Poor Reputation IP group 83 - port: 3384 proto: TCP cat: Misc Attack |
2020-05-03 06:47:16 |
| 185.175.93.14 | attack | 05/02/2020-18:30:47.080582 185.175.93.14 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-05-03 07:07:28 |
| 80.82.64.146 | attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 65 - port: 5900 proto: TCP cat: Misc Attack |
2020-05-03 06:54:15 |
| 106.13.68.209 | attack | May 2 21:34:07 ms-srv sshd[16373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.68.209 May 2 21:34:09 ms-srv sshd[16373]: Failed password for invalid user varsha from 106.13.68.209 port 38330 ssh2 |
2020-05-03 06:38:31 |
| 103.253.42.35 | attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 96 - port: 80 proto: TCP cat: Misc Attack |
2020-05-03 06:42:00 |
| 13.35.253.67 | attackspambots | ET INFO TLS Handshake Failure - port: 4708 proto: TCP cat: Potentially Bad Traffic |
2020-05-03 07:04:15 |