139.99.125.193

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): OVH Singapore Pte. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.	2020-02-19 02:03:55

相同子网IP讨论:

IP	类型	评论内容	时间
139.99.125.58	attackspam	Blocked by Sophos UTM Network Protection . / / proto=6 . srcport=10001 . dstport=32936 . (1089)	2020-09-17 19:04:12
139.99.125.230	attack	TCP (SYN) 139.99.125.230:51409 -> port 22, len 48	2020-09-01 21:06:56
139.99.125.231	attackspambots	TCP (SYN) 139.99.125.231:50637 -> port 22, len 48	2020-09-01 19:04:17
139.99.125.230	attack	SmallBizIT.US 1 packets to tcp(22)	2020-09-01 18:25:28
139.99.125.230	attackspambots	2020-08-31T19:25:50.598331abusebot-2.cloudsearch.cf sshd[11620]: Invalid user ubnt from 139.99.125.230 port 59752 2020-08-31T19:25:50.645193abusebot-2.cloudsearch.cf sshd[11622]: Invalid user admin from 139.99.125.230 port 35698 2020-08-31T19:25:50.647160abusebot-2.cloudsearch.cf sshd[11626]: Invalid user 1234 from 139.99.125.230 port 43918 2020-08-31T19:25:51.722996abusebot-2.cloudsearch.cf sshd[11628]: Invalid user usuario from 139.99.125.230 port 49656 ...	2020-09-01 03:42:24
139.99.125.84	attackspambots	Port probing on unauthorized port 22	2020-08-29 02:11:39
139.99.125.86	attack	Attempted connection to port 64129.	2020-08-24 21:24:56
139.99.125.191	attackspam	139.99.125.191 was recorded 6 times by 4 hosts attempting to connect to the following ports: 26014,50570,39019,51856. Incident counter (4h, 24h, all-time): 6, 31, 1174	2020-04-28 21:33:58
139.99.125.191	attackbotsspam	139.99.125.191 was recorded 11 times by 7 hosts attempting to connect to the following ports: 26014,51856,39019,20269,50570,60429. Incident counter (4h, 24h, all-time): 11, 19, 1146	2020-04-27 23:12:32
139.99.125.191	attack	139.99.125.191 was recorded 28 times by 9 hosts attempting to connect to the following ports: 50570,51856,39019,54434,56610,52084,20269,60429,51142. Incident counter (4h, 24h, all-time): 28, 86, 1123	2020-04-25 21:06:30
139.99.125.191	attack	Port 27034 scan denied	2020-03-28 19:23:50
139.99.125.191	attackbots	139.99.125.191 was recorded 13 times by 8 hosts attempting to connect to the following ports: 39019,54434,20269,51856,56610,52084,60429,51142. Incident counter (4h, 24h, all-time): 13, 112, 855	2020-03-28 06:26:16
139.99.125.191	attackbotsspam	139.99.125.191 was recorded 8 times by 5 hosts attempting to connect to the following ports: 60429,54434,50570,52084,51142. Incident counter (4h, 24h, all-time): 8, 116, 846	2020-03-28 04:19:40
139.99.125.191	attackspam	probes 16 times on the port 34928 59003 62781	2020-03-27 18:25:06
139.99.125.191	attackspambots	139.99.125.191 was recorded 20 times by 9 hosts attempting to connect to the following ports: 51856,39019,50570,52084,54434,56610,51142,60429,26014. Incident counter (4h, 24h, all-time): 20, 82, 683	2020-03-26 16:58:49

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.125.193
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64567
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.125.193.			IN	A

;; AUTHORITY SECTION:
.			396	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021802 1800 900 604800 86400

;; Query time: 51 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 02:03:42 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

193.125.99.139.in-addr.arpa domain name pointer ns572234.ip-139-99-125.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
193.125.99.139.in-addr.arpa	name = ns572234.ip-139-99-125.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
37.49.224.166	attackbots	Jul 10 22:09:08 box postfix/smtpd[20775]: NOQUEUE: reject: RCPT from unknown[37.49.224.166]: 554 5.7.1 Service unavailable; Client host [37.49.224.166] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBL433569 / https://www.spamhaus.org/query/ip/37.49.224.166; from= to= proto=ESMTP helo=	2019-07-11 03:54:41
96.69.10.237	attack	Jul 10 22:10:17 srv-4 sshd\[13817\]: Invalid user mattermost from 96.69.10.237 Jul 10 22:10:17 srv-4 sshd\[13817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.69.10.237 Jul 10 22:10:19 srv-4 sshd\[13817\]: Failed password for invalid user mattermost from 96.69.10.237 port 46914 ssh2 ...	2019-07-11 03:42:20
37.187.54.67	attackbotsspam	frenzy	2019-07-11 03:34:52
197.38.81.220	attackspam	Jul 10 20:53:51 shared04 sshd[20017]: Invalid user admin from 197.38.81.220 Jul 10 20:53:51 shared04 sshd[20017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.38.81.220 Jul 10 20:53:53 shared04 sshd[20017]: Failed password for invalid user admin from 197.38.81.220 port 40813 ssh2 Jul 10 20:53:54 shared04 sshd[20017]: Connection closed by 197.38.81.220 port 40813 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=197.38.81.220	2019-07-11 03:50:21
211.253.10.96	attackbotsspam	Invalid user ftp from 211.253.10.96 port 53882 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.10.96 Failed password for invalid user ftp from 211.253.10.96 port 53882 ssh2 Invalid user ck from 211.253.10.96 port 51078 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.10.96	2019-07-11 03:30:53
106.12.213.162	attack	Jul 10 22:11:39 srv-4 sshd\[13980\]: Invalid user ml from 106.12.213.162 Jul 10 22:11:39 srv-4 sshd\[13980\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.213.162 Jul 10 22:11:42 srv-4 sshd\[13980\]: Failed password for invalid user ml from 106.12.213.162 port 48686 ssh2 ...	2019-07-11 03:22:21
117.212.92.90	attack	xmlrpc attack	2019-07-11 03:16:25
163.172.106.114	attack	Jul 10 21:09:07 ks10 sshd[13686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.106.114 Jul 10 21:09:09 ks10 sshd[13686]: Failed password for invalid user admin from 163.172.106.114 port 55164 ssh2 ...	2019-07-11 03:52:14
27.66.116.255	attackbotsspam	Jul 10 20:52:28 srv1 sshd[12243]: Address 27.66.116.255 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jul 10 20:52:28 srv1 sshd[12243]: Invalid user admin from 27.66.116.255 Jul 10 20:52:28 srv1 sshd[12243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.66.116.255 Jul 10 20:52:31 srv1 sshd[12243]: Failed password for invalid user admin from 27.66.116.255 port 57182 ssh2 Jul 10 20:52:31 srv1 sshd[12244]: Connection closed by 27.66.116.255 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=27.66.116.255	2019-07-11 03:31:21
192.241.213.168	attackspambots	Jul 10 21:08:21 lnxweb62 sshd[21865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.213.168 Jul 10 21:08:24 lnxweb62 sshd[21865]: Failed password for invalid user test from 192.241.213.168 port 46018 ssh2 Jul 10 21:10:59 lnxweb62 sshd[23948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.213.168	2019-07-11 03:14:42
88.88.193.230	attackbots	2019-07-10T21:08:29.192233stark.klein-stark.info sshd\[1860\]: Invalid user get from 88.88.193.230 port 46848 2019-07-10T21:08:29.199546stark.klein-stark.info sshd\[1860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ti0177a400-0738.bb.online.no 2019-07-10T21:08:31.579705stark.klein-stark.info sshd\[1860\]: Failed password for invalid user get from 88.88.193.230 port 46848 ssh2 ...	2019-07-11 03:26:57
91.215.195.143	attackbots	xmlrpc attack	2019-07-11 03:18:09
94.177.229.191	attackbots	Tried sshing with brute force.	2019-07-11 03:33:42
134.209.7.179	attackspambots	Reported by AbuseIPDB proxy server.	2019-07-11 03:36:13
200.83.134.62	attackbotsspam	Jul 10 19:10:13 *** sshd[1499]: Invalid user pi from 200.83.134.62	2019-07-11 03:11:45

最近上报的IP列表

109.124.214.176	103.11.68.191	49.217.67.16	34.107.214.212
116.14.208.123	103.108.79.138	183.89.215.244	192.241.237.71
223.197.161.43	103.107.63.160	45.195.141.253	148.240.202.126
103.106.236.213	222.186.139.183	247.87.63.142	79.54.14.26
81.97.160.249	192.241.236.41	218.94.41.64	116.211.3.214