139.99.125.231

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): OVH Singapore Pte. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	TCP (SYN) 139.99.125.231:50637 -> port 22, len 48	2020-09-01 19:04:17

相同子网IP讨论:

IP	类型	评论内容	时间
139.99.125.58	attackspam	Blocked by Sophos UTM Network Protection . / / proto=6 . srcport=10001 . dstport=32936 . (1089)	2020-09-17 19:04:12
139.99.125.230	attack	TCP (SYN) 139.99.125.230:51409 -> port 22, len 48	2020-09-01 21:06:56
139.99.125.230	attack	SmallBizIT.US 1 packets to tcp(22)	2020-09-01 18:25:28
139.99.125.230	attackspambots	2020-08-31T19:25:50.598331abusebot-2.cloudsearch.cf sshd[11620]: Invalid user ubnt from 139.99.125.230 port 59752 2020-08-31T19:25:50.645193abusebot-2.cloudsearch.cf sshd[11622]: Invalid user admin from 139.99.125.230 port 35698 2020-08-31T19:25:50.647160abusebot-2.cloudsearch.cf sshd[11626]: Invalid user 1234 from 139.99.125.230 port 43918 2020-08-31T19:25:51.722996abusebot-2.cloudsearch.cf sshd[11628]: Invalid user usuario from 139.99.125.230 port 49656 ...	2020-09-01 03:42:24
139.99.125.84	attackspambots	Port probing on unauthorized port 22	2020-08-29 02:11:39
139.99.125.86	attack	Attempted connection to port 64129.	2020-08-24 21:24:56
139.99.125.191	attackspam	139.99.125.191 was recorded 6 times by 4 hosts attempting to connect to the following ports: 26014,50570,39019,51856. Incident counter (4h, 24h, all-time): 6, 31, 1174	2020-04-28 21:33:58
139.99.125.191	attackbotsspam	139.99.125.191 was recorded 11 times by 7 hosts attempting to connect to the following ports: 26014,51856,39019,20269,50570,60429. Incident counter (4h, 24h, all-time): 11, 19, 1146	2020-04-27 23:12:32
139.99.125.191	attack	139.99.125.191 was recorded 28 times by 9 hosts attempting to connect to the following ports: 50570,51856,39019,54434,56610,52084,20269,60429,51142. Incident counter (4h, 24h, all-time): 28, 86, 1123	2020-04-25 21:06:30
139.99.125.191	attack	Port 27034 scan denied	2020-03-28 19:23:50
139.99.125.191	attackbots	139.99.125.191 was recorded 13 times by 8 hosts attempting to connect to the following ports: 39019,54434,20269,51856,56610,52084,60429,51142. Incident counter (4h, 24h, all-time): 13, 112, 855	2020-03-28 06:26:16
139.99.125.191	attackbotsspam	139.99.125.191 was recorded 8 times by 5 hosts attempting to connect to the following ports: 60429,54434,50570,52084,51142. Incident counter (4h, 24h, all-time): 8, 116, 846	2020-03-28 04:19:40
139.99.125.191	attackspam	probes 16 times on the port 34928 59003 62781	2020-03-27 18:25:06
139.99.125.191	attackspambots	139.99.125.191 was recorded 20 times by 9 hosts attempting to connect to the following ports: 51856,39019,50570,52084,54434,56610,51142,60429,26014. Incident counter (4h, 24h, all-time): 20, 82, 683	2020-03-26 16:58:49
139.99.125.191	attack	139.99.125.191 was recorded 20 times by 6 hosts attempting to connect to the following ports: 54434,56610,51142,51856,50570,60429. Incident counter (4h, 24h, all-time): 20, 96, 592	2020-03-25 14:04:47

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.125.231
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43442
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.125.231.			IN	A

;; AUTHORITY SECTION:
.			362	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020090100 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 01 19:04:12 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

231.125.99.139.in-addr.arpa domain name pointer ns5000490.ip-139-99-125.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
231.125.99.139.in-addr.arpa	name = ns5000490.ip-139-99-125.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
192.227.252.30	attackspam	$f2bV_matches	2019-09-17 05:43:22
165.227.48.147	attackbotsspam	Automatic report - SQL Injection Attempts	2019-09-17 05:54:44
106.13.44.83	attack	Sep 16 11:33:41 hpm sshd\[12189\]: Invalid user babes from 106.13.44.83 Sep 16 11:33:41 hpm sshd\[12189\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.83 Sep 16 11:33:42 hpm sshd\[12189\]: Failed password for invalid user babes from 106.13.44.83 port 52538 ssh2 Sep 16 11:37:39 hpm sshd\[12555\]: Invalid user xs from 106.13.44.83 Sep 16 11:37:39 hpm sshd\[12555\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.83	2019-09-17 05:48:01
114.67.80.41	attackspam	Sep 16 11:39:40 eddieflores sshd\[29686\]: Invalid user sinus from 114.67.80.41 Sep 16 11:39:40 eddieflores sshd\[29686\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.80.41 Sep 16 11:39:42 eddieflores sshd\[29686\]: Failed password for invalid user sinus from 114.67.80.41 port 60314 ssh2 Sep 16 11:43:50 eddieflores sshd\[30070\]: Invalid user shan from 114.67.80.41 Sep 16 11:43:50 eddieflores sshd\[30070\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.80.41	2019-09-17 05:56:18
36.79.195.152	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/36.79.195.152/ ID - 1H : (17) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : ID NAME ASN : ASN7713 IP : 36.79.195.152 CIDR : 36.79.192.0/21 PREFIX COUNT : 2255 UNIQUE IP COUNT : 2765312 WYKRYTE ATAKI Z ASN7713 : 1H - 1 3H - 2 6H - 2 12H - 3 24H - 6 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery	2019-09-17 05:36:40
91.121.205.83	attack	[ssh] SSH attack	2019-09-17 05:44:15
59.90.178.245	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-16 18:38:21,777 INFO [amun_request_handler] PortScan Detected on Port: 445 (59.90.178.245)	2019-09-17 05:58:51
157.245.135.74	attackspam	157.245.135.74 - - [16/Sep/2019:20:55:56 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.135.74 - - [16/Sep/2019:20:56:01 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.135.74 - - [16/Sep/2019:20:56:07 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.135.74 - - [16/Sep/2019:20:56:12 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.135.74 - - [16/Sep/2019:20:56:13 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.135.74 - - [16/Sep/2019:20:56:13 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-09-17 05:47:03
185.105.184.202	attackbots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/185.105.184.202/ IR - 1H : (20) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IR NAME ASN : ASN25264 IP : 185.105.184.202 CIDR : 185.105.184.0/24 PREFIX COUNT : 6 UNIQUE IP COUNT : 1792 WYKRYTE ATAKI Z ASN25264 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 INFO : Looking for resource vulnerabilities 403 Detected and Blocked by ADMIN - data recovery	2019-09-17 05:52:51
45.117.50.170	attackbotsspam	DATE:2019-09-16 20:56:30, IP:45.117.50.170, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)	2019-09-17 05:36:57
186.212.97.229	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-16 19:00:42,305 INFO [amun_request_handler] PortScan Detected on Port: 445 (186.212.97.229)	2019-09-17 05:43:50
222.186.42.117	attackbotsspam	Sep 16 23:17:36 v22018053744266470 sshd[12793]: Failed password for root from 222.186.42.117 port 36580 ssh2 Sep 16 23:17:38 v22018053744266470 sshd[12793]: Failed password for root from 222.186.42.117 port 36580 ssh2 Sep 16 23:17:40 v22018053744266470 sshd[12793]: Failed password for root from 222.186.42.117 port 36580 ssh2 ...	2019-09-17 05:22:36
159.89.111.136	attackspam	Sep 16 23:27:19 vps01 sshd[20580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.111.136 Sep 16 23:27:22 vps01 sshd[20580]: Failed password for invalid user jdeleon from 159.89.111.136 port 34090 ssh2	2019-09-17 05:45:05
62.234.122.199	attack	Sep 16 23:30:22 dedicated sshd[30826]: Invalid user jenkins from 62.234.122.199 port 55133	2019-09-17 05:45:51
218.78.72.97	attack	Bruteforce on smtp	2019-09-17 05:33:37

最近上报的IP列表

177.73.47.23	60.191.217.110	58.69.61.165	27.72.168.7
103.176.182.158	38.66.202.231	136.181.146.142	211.57.144.121
213.212.243.106	144.77.37.29	200.146.254.116	126.194.62.17
3.221.174.215	171.86.142.58	58.16.106.201	103.124.153.36
61.201.20.76	37.176.169.213	53.79.234.88	181.112.192.207