IP address

Search at other sites:
.000139.99.183.126citvps5230.capnis.net
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
AbuseIPDB
139.99.183.126 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2024-11-12 05:00:00.323000
Was present on blacklist at: 2024-11-04 05:00, 2024-11-12 05:00
Warden events (74)
2024-11-12
ReconScanning (node.368407): 9
ReconScanning (node.4dc198): 3
2024-11-11
ReconScanning (node.368407): 11
ReconScanning (node.4dc198): 5
ReconScanning (node.ce2b59): 3
2024-11-04
ReconScanning (node.368407): 6
ReconScanning (node.4dc198): 2
ReconScanning (node.ce2b59): 4
2024-11-03
ReconScanning (node.368407): 15
ReconScanning (node.4dc198): 5
2024-11-02
ReconScanning (node.ce2b59): 3
ReconScanning (node.4dc198): 3
ReconScanning (node.368407): 2
2024-11-01
ReconScanning (node.368407): 3
DShield reports (IP summary, reports)
2024-11-01
Number of reports: 41
Distinct targets: 32
2024-11-02
Number of reports: 181
Distinct targets: 125
2024-11-03
Number of reports: 287
Distinct targets: 194
2024-11-04
Number of reports: 291
Distinct targets: 185
2024-11-11
Number of reports: 324
Distinct targets: 204
2024-11-12
Number of reports: 185
Distinct targets: 134
OTX pulses
[606d75c11c08ff94089a9430] 2021-04-07 09:05:05.353000 | Georgs Honeypot
Author name:georgengelmann
Pulse modified:2024-12-03 07:01:07.219000
Indicator created:2024-11-03 10:16:02
Indicator role:bruteforce
Indicator title:SSH intrusion attempt from citvps5230.capnis.net port 48879
Indicator expiration:2024-12-03 10:00:00
Origin AS
AS16276 - OVH
BGP Prefix
139.99.128.0/17
geo
Australia, Sydney
🕑 Australia/Sydney
hostname
citvps5230.capnis.net
Address block ('inetnum' or 'NetRange' in whois database)
139.99.0.0 - 139.99.255.255
last_activity
2024-12-03 08:35:16.233000
last_warden_event
2024-11-12 05:07:19
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 22, 25, 80, 110, 443, 465, 587, 993, 995, 2083, 2087, 3306
Tags: starttls, scanner, database, self-signed
CPEs: cpe:/a:jquery:jquery, cpe:/a:jquery:jquery_ui, cpe:/a:getbootstrap:bootstrap, cpe:/a:openbsd:openssh:7.4, cpe:/a:php:php, cpe:/a:roundcube:webmail, cpe:/a:f5:nginx, cpe:/a:oracle:mysql, cpe:/a:exim:exim:4.96.2
ts_added
2024-11-01 21:58:34.419000
ts_last_update
2024-12-21 21:58:40.332000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses