1.2.139.54 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.2.139.97	attackspambots	Icarus honeypot on github	2020-07-16 17:34:18

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.2.139.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 288
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.2.139.54.			IN	A

;; AUTHORITY SECTION:
.			572	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022401 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 08:41:54 CST 2022
;; MSG SIZE  rcvd: 103

Host info

54.139.2.1.in-addr.arpa domain name pointer node-27q.pool-1-2.dynamic.totinternet.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
54.139.2.1.in-addr.arpa	name = node-27q.pool-1-2.dynamic.totinternet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.202.2.247	attackspambots	Brutal Force on RDP	2020-06-14 00:28:44
156.96.56.146	attackbotsspam	2020-06-13T14:24:53+02:00 exim[2317]: fixed_login authenticator failed for (NGCtAc) [156.96.56.146]: 535 Incorrect authentication data (set_id=zsolt.makovsky@makovsky.hu)	2020-06-14 00:00:50
165.22.69.147	attackspambots	Jun 13 09:24:45 ws19vmsma01 sshd[107679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.69.147 Jun 13 09:24:47 ws19vmsma01 sshd[107679]: Failed password for invalid user khalifa from 165.22.69.147 port 49870 ssh2 ...	2020-06-13 23:59:13
218.7.19.244	attackspambots	Unauthorized connection attempt detected from IP address 218.7.19.244 to port 23	2020-06-14 00:13:16
103.145.12.168	attackspam	[2020-06-13 12:09:02] NOTICE[1273] chan_sip.c: Registration from '"2008" ' failed for '103.145.12.168:5297' - Wrong password [2020-06-13 12:09:02] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-13T12:09:02.944-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2008",SessionID="0x7f31c0334138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.168/5297",Challenge="39fed0db",ReceivedChallenge="39fed0db",ReceivedHash="6cba6dbf821d5fbc68c36c7b07711e9e" [2020-06-13 12:09:03] NOTICE[1273] chan_sip.c: Registration from '"2008" ' failed for '103.145.12.168:5297' - Wrong password [2020-06-13 12:09:03] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-13T12:09:03.062-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2008",SessionID="0x7f31c02ff098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-06-14 00:38:49
222.186.30.167	attack	Unauthorized connection attempt detected from IP address 222.186.30.167 to port 22	2020-06-14 00:22:58
171.244.26.249	attackspambots	Invalid user damica from 171.244.26.249 port 45664	2020-06-14 00:33:18
45.235.86.21	attackbots	Jun 13 18:01:55 legacy sshd[25243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.235.86.21 Jun 13 18:01:57 legacy sshd[25243]: Failed password for invalid user escort from 45.235.86.21 port 57120 ssh2 Jun 13 18:05:20 legacy sshd[25361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.235.86.21 ...	2020-06-14 00:18:01
185.176.27.174	attackspam	06/13/2020-11:56:28.172123 185.176.27.174 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-06-13 23:56:44
113.142.58.155	attack	Tried sshing with brute force.	2020-06-14 00:09:22
61.141.221.236	attackspam	Jun 13 16:27:09 sso sshd[32489]: Failed password for root from 61.141.221.236 port 48720 ssh2 ...	2020-06-14 00:35:52
106.13.69.24	attack	sshd	2020-06-14 00:33:42
216.196.223.82	attackbots	Automatic report - Banned IP Access	2020-06-14 00:13:40
218.92.0.216	attack	Jun 13 17:57:16 h1745522 sshd[17517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.216 user=root Jun 13 17:57:19 h1745522 sshd[17517]: Failed password for root from 218.92.0.216 port 64794 ssh2 Jun 13 17:57:21 h1745522 sshd[17517]: Failed password for root from 218.92.0.216 port 64794 ssh2 Jun 13 17:57:16 h1745522 sshd[17517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.216 user=root Jun 13 17:57:19 h1745522 sshd[17517]: Failed password for root from 218.92.0.216 port 64794 ssh2 Jun 13 17:57:21 h1745522 sshd[17517]: Failed password for root from 218.92.0.216 port 64794 ssh2 Jun 13 17:57:16 h1745522 sshd[17517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.216 user=root Jun 13 17:57:19 h1745522 sshd[17517]: Failed password for root from 218.92.0.216 port 64794 ssh2 Jun 13 17:57:21 h1745522 sshd[17517]: Failed password for root fr ...	2020-06-13 23:58:20
94.176.165.13	attackbotsspam	(Jun 13) LEN=48 PREC=0x20 TTL=119 ID=29280 DF TCP DPT=445 WINDOW=8192 SYN (Jun 13) LEN=48 PREC=0x20 TTL=119 ID=16771 DF TCP DPT=445 WINDOW=8192 SYN (Jun 12) LEN=48 TOS=0x08 PREC=0x20 TTL=120 ID=9643 DF TCP DPT=445 WINDOW=8192 SYN (Jun 12) LEN=48 TOS=0x08 PREC=0x20 TTL=120 ID=5671 DF TCP DPT=445 WINDOW=8192 SYN (Jun 12) LEN=48 PREC=0x20 TTL=119 ID=15013 DF TCP DPT=445 WINDOW=8192 SYN (Jun 12) LEN=48 TOS=0x08 PREC=0x20 TTL=120 ID=23040 DF TCP DPT=445 WINDOW=8192 SYN (Jun 11) LEN=48 PREC=0x20 TTL=119 ID=32678 DF TCP DPT=445 WINDOW=8192 SYN (Jun 11) LEN=48 PREC=0x20 TTL=119 ID=21487 DF TCP DPT=445 WINDOW=8192 SYN (Jun 11) LEN=48 TOS=0x08 PREC=0x20 TTL=120 ID=18084 DF TCP DPT=445 WINDOW=8192 SYN (Jun 10) LEN=48 PREC=0x20 TTL=119 ID=10480 DF TCP DPT=445 WINDOW=8192 SYN (Jun 10) LEN=48 PREC=0x20 TTL=119 ID=17386 DF TCP DPT=445 WINDOW=8192 SYN (Jun 10) LEN=48 TOS=0x08 PREC=0x20 TTL=120 ID=30043 DF TCP DPT=445 WINDOW=8192 SYN (Jun 10) LEN=48 PREC=0x20 TTL=1...	2020-06-14 00:32:23

Recently Reported IPs

247.181.212.221	1.2.139.69	1.2.140.104	1.2.140.109
12.196.142.123	1.2.140.126	1.2.140.136	1.2.140.174
1.2.140.183	1.2.140.213	1.2.140.214	1.2.140.220
1.2.140.222	1.2.140.224	1.2.140.227	226.121.91.11
122.29.9.42	1.2.158.251	1.2.158.36	1.2.158.41