139.99.218.132

基本信息:

城市(city): Sydney

省份(region): New South Wales

国家(country): Australia

运营商(isp): OVH Australia Pty Ltd

主机名(hostname): unknown

机构(organization): OVH SAS

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
139.99.218.54	attack	Exploit Attempt	2020-05-14 04:12:48
139.99.218.212	attackbots	Chat Spam	2019-09-30 02:53:16
139.99.218.233	attackspam	Chat Spam	2019-09-07 11:06:39
139.99.218.189	attack	\[2019-06-24 04:15:50\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:48997' - Wrong password \[2019-06-24 04:15:50\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-24T04:15:50.477-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="091",SessionID="0x7fc4242a2868",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.218.189/48997",Challenge="36d865c9",ReceivedChallenge="36d865c9",ReceivedHash="4a65d81ad2c4044d9d295f7ad31a57c8" \[2019-06-24 04:15:52\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:52227' - Wrong password \[2019-06-24 04:15:52\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-24T04:15:52.073-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5000000001",SessionID="0x7fc42417ead8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/	2019-06-24 17:10:38
139.99.218.30	attackspam	Fail2Ban Ban Triggered	2019-06-24 07:55:57
139.99.218.189	attackbotsspam	\[2019-06-23 16:10:37\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:54555' - Wrong password \[2019-06-23 16:10:37\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-23T16:10:37.947-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="091",SessionID="0x7fc4242a2868",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.218.189/54555",Challenge="5e880bfa",ReceivedChallenge="5e880bfa",ReceivedHash="6bc0d3c5dac791ce923dfd1cc64e4829" \[2019-06-23 16:10:39\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:46369' - Wrong password \[2019-06-23 16:10:39\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-23T16:10:39.473-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="51",SessionID="0x7fc424245928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.218.1	2019-06-24 04:59:28
139.99.218.189	attackspambots	\[2019-06-23 12:44:01\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:49800' - Wrong password \[2019-06-23 12:44:01\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-23T12:44:01.969-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="091",SessionID="0x7fc4242a2868",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.218.189/49800",Challenge="1ba70511",ReceivedChallenge="1ba70511",ReceivedHash="b2fadf1157e2aea79954277bd382840b" \[2019-06-23 12:44:03\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:43777' - Wrong password \[2019-06-23 12:44:03\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-23T12:44:03.509-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4000000001",SessionID="0x7fc42417ead8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/	2019-06-24 01:36:06
139.99.218.30	attack	[SunJun2302:23:20.8385312019][:error][pid6731:tid47326407059200][client139.99.218.30:62053][client139.99.218.30]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:POST\\|GET\)"atREQUEST_METHOD.[file"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf"][line"3488"][id"336461"][rev"8"][msg"Atomicorp.comWAFRules-VirtualJustInTimePatch:Possibleattempttomaliciouslyaccesswp-config.phpfile"][data"../../../../wp-config.php"][severity"CRITICAL"][hostname"giochintavola.ch"][uri"/wp-admin/admin-ajax.php"][unique_id"XQ7GeFrcV1YeehGUUjPgMAAAAEk"][SunJun2302:23:21.3870422019][:error][pid6732:tid47326432274176][client139.99.218.30:62392][client139.99.218.30]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"206"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRIT	2019-06-23 08:42:09
139.99.218.189	attack	\[2019-06-22 03:57:01\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:35330' - Wrong password \[2019-06-22 03:57:01\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-22T03:57:01.550-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="091",SessionID="0x7fc4240077d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.218.189/35330",Challenge="041cc17f",ReceivedChallenge="041cc17f",ReceivedHash="71b8eb87e94e589403512ca2a1f401d1" \[2019-06-22 03:57:03\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '139.99.218.189:49604' - Wrong password \[2019-06-22 03:57:03\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-22T03:57:03.165-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="200000001",SessionID="0x7fc424036c88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD	2019-06-22 17:05:00

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.218.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58148
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.218.132.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072201 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 23 02:34:32 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

132.218.99.139.in-addr.arpa domain name pointer ip-139-99-218.eu.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
132.218.99.139.in-addr.arpa	name = ip-139-99-218.eu.

Authoritative answers can be found from:

IP	类型	评论内容	时间
104.248.126.170	attack	Invalid user plex from 104.248.126.170 port 50870	2020-05-29 04:04:13
119.96.223.211	attack	$f2bV_matches	2020-05-29 04:00:05
88.98.232.53	attack	21 attempts against mh-ssh on cloud	2020-05-29 04:07:42
222.186.175.215	attack	May 28 22:09:47 * sshd[7778]: Failed password for root from 222.186.175.215 port 46686 ssh2 May 28 22:10:01 * sshd[7778]: error: maximum authentication attempts exceeded for root from 222.186.175.215 port 46686 ssh2 [preauth]	2020-05-29 04:18:28
124.74.143.234	attack	SSH invalid-user multiple login try	2020-05-29 03:57:35
148.70.31.188	attackbotsspam	DATE:2020-05-28 16:23:30,IP:148.70.31.188,MATCHES:10,PORT:ssh	2020-05-29 03:55:43
162.243.253.67	attackspambots	May 28 21:37:47 buvik sshd[2640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.253.67 user=root May 28 21:37:49 buvik sshd[2640]: Failed password for root from 162.243.253.67 port 55787 ssh2 May 28 21:43:03 buvik sshd[3444]: Invalid user jfortunato from 162.243.253.67 ...	2020-05-29 03:53:34
175.161.26.16	attackbotsspam	Invalid user console from 175.161.26.16 port 55164	2020-05-29 03:50:59
180.76.151.90	attack	[ssh] SSH attack	2020-05-29 03:48:26
157.230.151.241	attackbots	May 28 19:23:28 sshgateway sshd\[16180\]: Invalid user applmgr from 157.230.151.241 May 28 19:23:28 sshgateway sshd\[16180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.151.241 May 28 19:23:30 sshgateway sshd\[16180\]: Failed password for invalid user applmgr from 157.230.151.241 port 41126 ssh2	2020-05-29 03:54:33
223.95.186.74	attack	May 28 21:53:38 sso sshd[24865]: Failed password for root from 223.95.186.74 port 56320 ssh2 ...	2020-05-29 04:22:20
165.227.205.54	attackspambots	sshd: Failed password for .... from 165.227.205.54 port 42656 ssh2 (4 attempts)	2020-05-29 03:52:35
188.128.100.210	attackspam	IP 188.128.100.210 attacked honeypot on port: 139 at 5/28/2020 9:10:00 PM	2020-05-29 04:15:18
123.206.36.174	attackbots	DATE:2020-05-28 17:20:41, IP:123.206.36.174, PORT:ssh SSH brute force auth (docker-dc)	2020-05-29 03:58:13
92.118.161.17	attack	firewall-block, port(s): 2121/tcp	2020-05-29 04:14:13

最近上报的IP列表

15.139.148.86	123.213.47.108	64.44.16.97	218.18.37.79
208.172.126.132	52.23.150.104	215.115.193.53	172.228.229.48
49.231.128.180	120.211.79.95	158.79.107.138	174.134.113.1
116.238.39.230	92.101.251.36	96.22.232.41	148.204.130.1
178.3.25.167	159.203.7.89	78.194.253.66	2.2.46.11