Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Canada

Internet Service Provider: OVH Singapore Pte. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Feb 24 17:28:06 hpm sshd\[17092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=53.ip-139-99-89.net  user=root
Feb 24 17:28:07 hpm sshd\[17092\]: Failed password for root from 139.99.89.53 port 53642 ssh2
Feb 24 17:35:20 hpm sshd\[17761\]: Invalid user lingqi from 139.99.89.53
Feb 24 17:35:20 hpm sshd\[17761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=53.ip-139-99-89.net
Feb 24 17:35:22 hpm sshd\[17761\]: Failed password for invalid user lingqi from 139.99.89.53 port 54404 ssh2
2020-02-25 11:47:19
attackspam
Feb 20 06:36:46 hanapaa sshd\[20594\]: Invalid user deploy from 139.99.89.53
Feb 20 06:36:46 hanapaa sshd\[20594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=53.ip-139-99-89.net
Feb 20 06:36:48 hanapaa sshd\[20594\]: Failed password for invalid user deploy from 139.99.89.53 port 45990 ssh2
Feb 20 06:39:40 hanapaa sshd\[20926\]: Invalid user rizon from 139.99.89.53
Feb 20 06:39:40 hanapaa sshd\[20926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=53.ip-139-99-89.net
2020-02-21 03:47:29
attackspam
Feb 15 05:52:27 mockhub sshd[31183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.89.53
Feb 15 05:52:29 mockhub sshd[31183]: Failed password for invalid user bm from 139.99.89.53 port 46312 ssh2
...
2020-02-16 00:14:19
attack
Unauthorized connection attempt detected from IP address 139.99.89.53 to port 2220 [J]
2020-02-03 09:35:03
attackbots
Jan 22 00:34:16 v11 sshd[27310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.89.53  user=mysql
Jan 22 00:34:18 v11 sshd[27310]: Failed password for mysql from 139.99.89.53 port 48698 ssh2
Jan 22 00:34:19 v11 sshd[27310]: Received disconnect from 139.99.89.53 port 48698:11: Bye Bye [preauth]
Jan 22 00:34:19 v11 sshd[27310]: Disconnected from 139.99.89.53 port 48698 [preauth]
Jan 22 00:36:06 v11 sshd[27394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.89.53  user=bin
Jan 22 00:36:08 v11 sshd[27394]: Failed password for bin from 139.99.89.53 port 33016 ssh2
Jan 22 00:36:08 v11 sshd[27394]: Received disconnect from 139.99.89.53 port 33016:11: Bye Bye [preauth]
Jan 22 00:36:08 v11 sshd[27394]: Disconnected from 139.99.89.53 port 33016 [preauth]
Jan 22 00:37:21 v11 sshd[27609]: Invalid user yosef from 139.99.89.53 port 43710
Jan 22 00:37:22 v11 sshd[27609]: Failed password fo........
-------------------------------
2020-01-22 23:54:33
Comments on same subnet:
IP Type Details Datetime
139.99.89.202 attackspam
Oct 12 09:47:12 dignus sshd[25365]: Failed password for invalid user wayne from 139.99.89.202 port 48464 ssh2
Oct 12 09:50:00 dignus sshd[25446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.89.202  user=root
Oct 12 09:50:01 dignus sshd[25446]: Failed password for root from 139.99.89.202 port 58828 ssh2
Oct 12 09:52:43 dignus sshd[25490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.89.202  user=root
Oct 12 09:52:45 dignus sshd[25490]: Failed password for root from 139.99.89.202 port 40958 ssh2
...
2020-10-12 16:14:39
139.99.89.202 attackspam
Oct  4 23:23:02 minden010 sshd[1736]: Failed password for root from 139.99.89.202 port 59064 ssh2
Oct  4 23:26:51 minden010 sshd[3133]: Failed password for root from 139.99.89.202 port 35980 ssh2
...
2020-10-05 07:15:17
139.99.89.202 attackbotsspam
2020-10-04T08:54:59.276426linuxbox-skyline sshd[272342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.89.202  user=root
2020-10-04T08:55:00.799884linuxbox-skyline sshd[272342]: Failed password for root from 139.99.89.202 port 46682 ssh2
...
2020-10-04 23:27:39
139.99.89.202 attackspambots
Invalid user sid from 139.99.89.202 port 35196
2020-10-04 15:11:08
139.99.89.202 attack
SSH Invalid Login
2020-10-04 06:20:57
139.99.89.202 attackspam
Invalid user sid from 139.99.89.202 port 35196
2020-10-03 22:25:18
139.99.89.202 attack
Invalid user sid from 139.99.89.202 port 35196
2020-10-03 14:07:49
139.99.89.202 attack
Brute-force attempt banned
2020-09-27 04:37:23
139.99.89.202 attackspam
Sep 26 12:27:44 plex-server sshd[2523457]: Invalid user tomcat from 139.99.89.202 port 34340
Sep 26 12:27:44 plex-server sshd[2523457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.89.202 
Sep 26 12:27:44 plex-server sshd[2523457]: Invalid user tomcat from 139.99.89.202 port 34340
Sep 26 12:27:46 plex-server sshd[2523457]: Failed password for invalid user tomcat from 139.99.89.202 port 34340 ssh2
Sep 26 12:31:57 plex-server sshd[2525180]: Invalid user deploy from 139.99.89.202 port 42486
...
2020-09-26 20:45:28
139.99.89.202 attackspam
Sep 25 22:39:41 mout sshd[4405]: Invalid user 1234 from 139.99.89.202 port 48182
Sep 25 22:39:44 mout sshd[4405]: Failed password for invalid user 1234 from 139.99.89.202 port 48182 ssh2
Sep 25 22:39:46 mout sshd[4405]: Disconnected from invalid user 1234 139.99.89.202 port 48182 [preauth]
2020-09-26 12:28:27
139.99.89.91 attackbots
2020-08-25 07:25:27.848293-0500  localhost sshd[1492]: Failed password for root from 139.99.89.91 port 34132 ssh2
2020-08-25 20:38:26
139.99.89.91 attackbotsspam
20 attempts against mh-ssh on echoip
2020-08-20 20:56:01
139.99.89.91 attackbotsspam
SSH bruteforce
2020-08-12 15:21:46
139.99.89.91 attack
Aug  5 16:01:42 abendstille sshd\[20037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.89.91  user=root
Aug  5 16:01:45 abendstille sshd\[20037\]: Failed password for root from 139.99.89.91 port 47100 ssh2
Aug  5 16:06:27 abendstille sshd\[24215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.89.91  user=root
Aug  5 16:06:29 abendstille sshd\[24215\]: Failed password for root from 139.99.89.91 port 59104 ssh2
Aug  5 16:11:06 abendstille sshd\[29007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.89.91  user=root
...
2020-08-05 23:54:34
139.99.89.91 attackbotsspam
2020-07-25T23:03:44.670000shield sshd\[616\]: Invalid user ftp1 from 139.99.89.91 port 58960
2020-07-25T23:03:44.679361shield sshd\[616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.ip-139-99-89.net
2020-07-25T23:03:47.077856shield sshd\[616\]: Failed password for invalid user ftp1 from 139.99.89.91 port 58960 ssh2
2020-07-25T23:09:19.305132shield sshd\[1726\]: Invalid user build from 139.99.89.91 port 46880
2020-07-25T23:09:19.311868shield sshd\[1726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.ip-139-99-89.net
2020-07-26 07:20:44
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.89.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56633
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.89.53.			IN	A

;; AUTHORITY SECTION:
.			479	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012200 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 23:54:20 CST 2020
;; MSG SIZE  rcvd: 116
Host info
53.89.99.139.in-addr.arpa domain name pointer 53.ip-139-99-89.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
53.89.99.139.in-addr.arpa	name = 53.ip-139-99-89.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
112.84.91.153 attack
Brute force SMTP login attempts.
2019-12-04 02:55:03
49.234.96.205 attackbotsspam
Dec  3 18:02:10 vps647732 sshd[11380]: Failed password for root from 49.234.96.205 port 37086 ssh2
...
2019-12-04 03:16:00
106.13.23.35 attackspam
Dec  3 15:38:51 amit sshd\[7409\]: Invalid user admin from 106.13.23.35
Dec  3 15:38:51 amit sshd\[7409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.23.35
Dec  3 15:38:54 amit sshd\[7409\]: Failed password for invalid user admin from 106.13.23.35 port 51936 ssh2
...
2019-12-04 02:56:51
200.41.86.59 attackspam
Dec  3 23:14:14 gw1 sshd[5430]: Failed password for mysql from 200.41.86.59 port 50768 ssh2
...
2019-12-04 03:08:03
202.88.234.107 attack
Dec  3 13:04:19 ws12vmsma01 sshd[62749]: Invalid user raro from 202.88.234.107
Dec  3 13:04:21 ws12vmsma01 sshd[62749]: Failed password for invalid user raro from 202.88.234.107 port 20658 ssh2
Dec  3 13:13:24 ws12vmsma01 sshd[64024]: Invalid user suezaki from 202.88.234.107
...
2019-12-04 03:06:58
34.84.103.120 attack
34.84.103.120 - - \[03/Dec/2019:18:43:58 +0100\] "POST /wp-login.php HTTP/1.0" 200 4404 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
34.84.103.120 - - \[03/Dec/2019:18:44:01 +0100\] "POST /wp-login.php HTTP/1.0" 200 4236 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
34.84.103.120 - - \[03/Dec/2019:18:44:02 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-12-04 02:51:09
165.22.211.73 attackbots
Dec  3 19:58:01 markkoudstaal sshd[31005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.211.73
Dec  3 19:58:03 markkoudstaal sshd[31005]: Failed password for invalid user admin from 165.22.211.73 port 55106 ssh2
Dec  3 20:04:34 markkoudstaal sshd[31697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.211.73
2019-12-04 03:10:17
10.64.36.215 spambotsattackproxynormal
183.60.82.98
2019-12-04 03:22:27
222.186.52.86 attackspam
Dec  3 14:04:32 ny01 sshd[30282]: Failed password for root from 222.186.52.86 port 51740 ssh2
Dec  3 14:06:52 ny01 sshd[30553]: Failed password for root from 222.186.52.86 port 32665 ssh2
Dec  3 14:06:54 ny01 sshd[30553]: Failed password for root from 222.186.52.86 port 32665 ssh2
2019-12-04 03:16:19
118.70.72.103 attackspam
Dec  3 19:56:14 ns381471 sshd[9818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.72.103
Dec  3 19:56:16 ns381471 sshd[9818]: Failed password for invalid user taylor from 118.70.72.103 port 40032 ssh2
2019-12-04 03:15:12
184.105.139.101 attackspambots
30005/tcp 3389/tcp 5555/tcp...
[2019-10-05/12-03]33pkt,9pt.(tcp),3pt.(udp)
2019-12-04 02:59:20
79.137.34.248 attack
Dec  3 16:29:42 cvbnet sshd[4490]: Failed password for root from 79.137.34.248 port 48530 ssh2
...
2019-12-04 03:14:31
62.113.241.59 attack
Dec  3 21:08:51 server sshd\[21636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cloud.jaszok.de  user=root
Dec  3 21:08:53 server sshd\[21636\]: Failed password for root from 62.113.241.59 port 47576 ssh2
Dec  3 21:21:45 server sshd\[25281\]: Invalid user lyc from 62.113.241.59
Dec  3 21:21:45 server sshd\[25281\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cloud.jaszok.de 
Dec  3 21:21:47 server sshd\[25281\]: Failed password for invalid user lyc from 62.113.241.59 port 56396 ssh2
...
2019-12-04 03:18:19
106.12.98.7 attack
Dec  3 16:28:08 * sshd[5691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.7
Dec  3 16:28:10 * sshd[5691]: Failed password for invalid user vilborg from 106.12.98.7 port 57938 ssh2
2019-12-04 02:57:09
92.249.143.33 attackbotsspam
Dec  3 19:30:49 vmanager6029 sshd\[6313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.249.143.33  user=backup
Dec  3 19:30:50 vmanager6029 sshd\[6313\]: Failed password for backup from 92.249.143.33 port 50080 ssh2
Dec  3 19:36:47 vmanager6029 sshd\[6441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.249.143.33  user=root
2019-12-04 02:58:42

Recently Reported IPs

96.58.4.68 95.15.190.75 94.99.254.210 225.135.177.205
93.125.106.80 192.168.178.80 93.95.82.24 188.221.169.151
91.83.180.230 82.103.95.130 19.136.47.83 69.24.81.168
130.252.105.82 173.234.118.10 51.255.132.213 46.221.46.10
46.176.202.82 41.224.249.58 181.188.170.77 221.164.132.67