City: Singapore
Region: unknown
Country: Singapore
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.99.91.43 | attackbotsspam | SSH 2020-09-17 06:43:07 139.99.91.43 139.99.182.230 > POST serenevillasbali.indonesiaroom.com /wp-login.php HTTP/1.1 - - 2020-09-17 23:54:08 139.99.91.43 139.99.182.230 > GET shinichisurabaya.com /wp-login.php HTTP/1.1 - - 2020-09-17 23:54:08 139.99.91.43 139.99.182.230 > POST shinichisurabaya.com /wp-login.php HTTP/1.1 - - |
2020-09-19 03:35:21 |
| 139.99.91.43 | attack | SSH 2020-09-17 06:43:07 139.99.91.43 139.99.182.230 > POST serenevillasbali.indonesiaroom.com /wp-login.php HTTP/1.1 - - 2020-09-17 23:54:08 139.99.91.43 139.99.182.230 > GET shinichisurabaya.com /wp-login.php HTTP/1.1 - - 2020-09-17 23:54:08 139.99.91.43 139.99.182.230 > POST shinichisurabaya.com /wp-login.php HTTP/1.1 - - |
2020-09-18 19:38:02 |
| 139.99.98.248 | attack | Sep 15 02:29:45 pixelmemory sshd[3244134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.98.248 Sep 15 02:29:45 pixelmemory sshd[3244134]: Invalid user ftpuser from 139.99.98.248 port 36638 Sep 15 02:29:48 pixelmemory sshd[3244134]: Failed password for invalid user ftpuser from 139.99.98.248 port 36638 ssh2 Sep 15 02:34:23 pixelmemory sshd[3263707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.98.248 user=root Sep 15 02:34:25 pixelmemory sshd[3263707]: Failed password for root from 139.99.98.248 port 48038 ssh2 ... |
2020-09-15 23:43:34 |
| 139.99.98.248 | attack | <6 unauthorized SSH connections |
2020-09-15 15:35:43 |
| 139.99.98.248 | attackbots | 2020-09-14T14:03:39.9058751495-001 sshd[4066]: Failed password for root from 139.99.98.248 port 52108 ssh2 2020-09-14T14:08:06.9147731495-001 sshd[4393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.98.248 user=root 2020-09-14T14:08:08.8283481495-001 sshd[4393]: Failed password for root from 139.99.98.248 port 36120 ssh2 2020-09-14T14:12:30.1052501495-001 sshd[4741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.98.248 user=root 2020-09-14T14:12:31.9281851495-001 sshd[4741]: Failed password for root from 139.99.98.248 port 48364 ssh2 2020-09-14T14:16:52.0759361495-001 sshd[5011]: Invalid user anne from 139.99.98.248 port 60634 ... |
2020-09-15 07:41:11 |
| 139.99.98.248 | attackspam | Aug 29 08:08:35 abendstille sshd\[1938\]: Invalid user izt from 139.99.98.248 Aug 29 08:08:35 abendstille sshd\[1938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.98.248 Aug 29 08:08:38 abendstille sshd\[1938\]: Failed password for invalid user izt from 139.99.98.248 port 56444 ssh2 Aug 29 08:13:07 abendstille sshd\[6155\]: Invalid user testftp from 139.99.98.248 Aug 29 08:13:07 abendstille sshd\[6155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.98.248 ... |
2020-08-29 18:49:01 |
| 139.99.98.248 | attackspambots | Invalid user ftpuser from 139.99.98.248 port 45004 |
2020-08-28 14:46:52 |
| 139.99.98.248 | attack | 2020-08-26T17:55:03.136961ks3355764 sshd[22117]: Failed password for invalid user joshua from 139.99.98.248 port 37534 ssh2 2020-08-26T19:55:48.057031ks3355764 sshd[23954]: Invalid user dante from 139.99.98.248 port 56122 ... |
2020-08-27 03:54:57 |
| 139.99.91.151 | attackbots | ssh brute force |
2020-08-26 17:04:27 |
| 139.99.98.248 | attackbotsspam | Aug 21 08:37:33 ny01 sshd[6616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.98.248 Aug 21 08:37:34 ny01 sshd[6616]: Failed password for invalid user esq from 139.99.98.248 port 38196 ssh2 Aug 21 08:42:01 ny01 sshd[7226]: Failed password for root from 139.99.98.248 port 45748 ssh2 |
2020-08-21 21:28:36 |
| 139.99.98.248 | attack | Aug 19 03:53:55 marvibiene sshd[7312]: Invalid user usuarios from 139.99.98.248 port 44524 Aug 19 03:53:55 marvibiene sshd[7312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.98.248 Aug 19 03:53:55 marvibiene sshd[7312]: Invalid user usuarios from 139.99.98.248 port 44524 Aug 19 03:53:58 marvibiene sshd[7312]: Failed password for invalid user usuarios from 139.99.98.248 port 44524 ssh2 |
2020-08-19 14:23:50 |
| 139.99.98.248 | attackbotsspam | Aug 14 12:20:29 webhost01 sshd[15384]: Failed password for root from 139.99.98.248 port 48842 ssh2 ... |
2020-08-14 16:44:52 |
| 139.99.98.248 | attack | leo_www |
2020-08-09 17:30:57 |
| 139.99.98.248 | attackspambots | SSH Brute Force |
2020-07-29 23:12:21 |
| 139.99.98.248 | attackspambots | Jul 25 01:45:37 Ubuntu-1404-trusty-64-minimal sshd\[11209\]: Invalid user gzp from 139.99.98.248 Jul 25 01:45:37 Ubuntu-1404-trusty-64-minimal sshd\[11209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.98.248 Jul 25 01:45:39 Ubuntu-1404-trusty-64-minimal sshd\[11209\]: Failed password for invalid user gzp from 139.99.98.248 port 35414 ssh2 Jul 25 02:00:17 Ubuntu-1404-trusty-64-minimal sshd\[22705\]: Invalid user guohanning from 139.99.98.248 Jul 25 02:00:17 Ubuntu-1404-trusty-64-minimal sshd\[22705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.98.248 |
2020-07-25 08:35:48 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.9.183
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54482
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.99.9.183. IN A
;; AUTHORITY SECTION:
. 515 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022071002 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jul 11 02:29:00 CST 2022
;; MSG SIZE rcvd: 105183.9.99.139.in-addr.arpa domain name pointer ns547253.ip-139-99-9.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
183.9.99.139.in-addr.arpa name = ns547253.ip-139-99-9.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 167.172.158.200 | attackbots | CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2020-01-16 19:44:20 |
| 112.217.225.59 | attackbotsspam | Unauthorized connection attempt detected from IP address 112.217.225.59 to port 2220 [J] |
2020-01-16 19:55:25 |
| 103.100.209.228 | attackbotsspam | Jan 15 22:37:26 cumulus sshd[25882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.100.209.228 user=r.r Jan 15 22:37:28 cumulus sshd[25882]: Failed password for r.r from 103.100.209.228 port 55003 ssh2 Jan 15 22:37:29 cumulus sshd[25882]: Received disconnect from 103.100.209.228 port 55003:11: Bye Bye [preauth] Jan 15 22:37:29 cumulus sshd[25882]: Disconnected from 103.100.209.228 port 55003 [preauth] Jan 15 22:41:48 cumulus sshd[26201]: Invalid user rf from 103.100.209.228 port 44721 Jan 15 22:41:48 cumulus sshd[26201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.100.209.228 Jan 15 22:41:49 cumulus sshd[26201]: Failed password for invalid user rf from 103.100.209.228 port 44721 ssh2 Jan 15 22:41:50 cumulus sshd[26201]: Received disconnect from 103.100.209.228 port 44721:11: Bye Bye [preauth] Jan 15 22:41:50 cumulus sshd[26201]: Disconnected from 103.100.209.228 port 44721 [pr........ ------------------------------- |
2020-01-16 19:59:40 |
| 42.237.93.44 | attackspambots | Unauthorized connection attempt detected from IP address 42.237.93.44 to port 23 [J] |
2020-01-16 19:47:05 |
| 59.95.211.203 | attack | Unauthorized connection attempt from IP address 59.95.211.203 on Port 445(SMB) |
2020-01-16 19:48:46 |
| 119.46.176.222 | attackbotsspam | Unauthorized connection attempt from IP address 119.46.176.222 on Port 445(SMB) |
2020-01-16 19:46:39 |
| 91.179.201.145 | attack | Unauthorized connection attempt detected from IP address 91.179.201.145 to port 2220 [J] |
2020-01-16 20:11:17 |
| 61.191.50.172 | attack | Unauthorized connection attempt from IP address 61.191.50.172 on Port 445(SMB) |
2020-01-16 19:39:43 |
| 220.180.104.130 | attack | Unauthorised access (Jan 16) SRC=220.180.104.130 LEN=40 TTL=241 ID=57519 TCP DPT=1433 WINDOW=1024 SYN |
2020-01-16 20:04:48 |
| 89.35.39.180 | attack | GET /wp-login.php |
2020-01-16 20:02:00 |
| 125.25.50.199 | attack | 1579159069 - 01/16/2020 08:17:49 Host: 125.25.50.199/125.25.50.199 Port: 445 TCP Blocked |
2020-01-16 19:56:40 |
| 118.69.111.122 | attackspambots | 445/tcp 445/tcp 445/tcp... [2019-11-20/2020-01-16]5pkt,1pt.(tcp) |
2020-01-16 19:53:04 |
| 72.94.181.219 | attack | Unauthorized connection attempt detected from IP address 72.94.181.219 to port 2220 [J] |
2020-01-16 19:49:41 |
| 14.231.210.104 | attack | IP: 14.231.210.104
Ports affected
Simple Mail Transfer (25)
Found in DNSBL('s)
ASN Details
AS45899 VNPT Corp
Vietnam (VN)
CIDR 14.228.0.0/14
Log Date: 16/01/2020 4:06:39 AM UTC |
2020-01-16 20:06:12 |
| 52.66.206.135 | attackbots | Unauthorized connection attempt detected from IP address 52.66.206.135 to port 2220 [J] |
2020-01-16 19:47:55 |