Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Tokyo

Region: Tokyo

Country: Japan

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
139.162.119.197 attackbotsspam 
Unauthorized connection attempt, Score > 90 , Ban for 1 month
 2020-07-14 15:11:03
139.162.119.197 attackspam 
W 31101,/var/log/nginx/access.log,-,-
 2020-03-23 05:08:39
139.162.119.197 attack 
Unauthorized connection attempt detected from IP address 139.162.119.197 to port 80 [J]
 2020-01-27 21:12:02
139.162.119.197 attackspam 
W 31101,/var/log/nginx/access.log,-,-
 2020-01-04 14:21:22
139.162.119.1 attackbots 
web Attack on Website at 2020-01-02.
 2020-01-03 02:44:50
139.162.119.248 attack 
fire
 2019-08-09 13:50:46
139.162.119.197 attack 
port scan and connect, tcp 80 (http)
 2019-08-04 20:10:27
139.162.119.197 attack 
[Mon Jul 29 04:34:10.629241 2019] [:error] [pid 25097:tid 140491492337408] [client 139.162.119.197:59818] [client 139.162.119.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.1.1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.1.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XT4U0g-h1iRiDVhW3KhyXAAAABU"]
...
 2019-07-29 06:19:00
139.162.119.197 attackspambots 
Port scan and direct access per IP instead of hostname
 2019-07-28 16:18:44
139.162.119.197 attackspambots 
Port scan and direct access per IP instead of hostname
 2019-07-05 06:09:18
139.162.119.197 attackspam 
[20/Jun/2019:05:20:58 -0400] "GET / HTTP/1.1" "HTTP Banner Detection (https://security.ipip.net)"
 2019-06-21 19:14:11
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       139.162.0.0 - 139.162.255.255
CIDR:           139.162.0.0/16
NetName:        RIPE-ERX-139-162-0-0
NetHandle:      NET-139-162-0-0-1
Parent:         NET139 (NET-139-0-0-0-0)
NetType:        Early Registrations, Transferred to RIPE NCC
OriginAS:       
Organization:   RIPE Network Coordination Centre (RIPE)
RegDate:        2004-03-03
Updated:        2025-02-10
Comment:        These addresses have been further assigned to users in the RIPE NCC region. Please note that the organization and point of contact details listed below are those of the RIPE NCC not the current address holder. ** You can find user contact information for the current address holder in the RIPE database at http://www.ripe.net/whois.
Ref:            https://rdap.arin.net/registry/ip/139.162.0.0

ResourceLink:  https://apps.db.ripe.net/db-web-ui/query
ResourceLink:  whois.ripe.net


OrgName:        RIPE Network Coordination Centre
OrgId:          RIPE
Address:        P.O. Box 10096
City:           Amsterdam
StateProv:      
PostalCode:     1001EB
Country:        NL
RegDate:        
Updated:        2013-07-29
Ref:            https://rdap.arin.net/registry/entity/RIPE

ReferralServer:  whois.ripe.net
ResourceLink:  https://apps.db.ripe.net/db-web-ui/query

OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName:   Abuse Contact
OrgAbusePhone:  +31205354444 
OrgAbuseEmail:  abuse@ripe.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/ABUSE3850-ARIN

OrgTechHandle: RNO29-ARIN
OrgTechName:   RIPE NCC Operations
OrgTechPhone:  +31 20 535 4444 
OrgTechEmail:  hostmaster@ripe.net
OrgTechRef:    https://rdap.arin.net/registry/entity/RNO29-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.162.119.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48433
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.162.119.94.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026033100 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 31 15:30:03 CST 2026
;; MSG SIZE  rcvd: 107
Host info
94.119.162.139.in-addr.arpa domain name pointer prod57client01.academyforinternetresearch.org.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
94.119.162.139.in-addr.arpa	name = prod57client01.academyforinternetresearch.org.

Authoritative answers can be found from:
Related IP info:
139.162.119.133
139.162.119.247
139.162.119.198
139.162.119.226
139.162.119.137
139.162.119.40
139.162.119.64
139.162.119.104
139.162.119.27
139.162.119.94
139.162.119.175
139.162.119.204
139.162.119.236
139.162.119.213
139.162.119.75
139.162.119.1
139.162.119.9
139.162.119.87
139.162.119.220
139.162.119.135
139.162.119.243
139.162.119.119
139.162.119.53
139.162.119.209
139.162.119.108
139.162.119.84
139.162.119.43
139.162.119.118
139.162.119.21
139.162.119.100
139.162.119.233
139.162.119.60
139.162.119.18
139.162.119.235
139.162.119.147
139.162.119.157
139.162.119.88
139.162.119.161
139.162.119.46
139.162.119.185
139.162.119.182
139.162.119.111
139.162.119.194
139.162.119.154
139.162.119.24
139.162.119.28
139.162.119.110
139.162.119.155
139.162.119.144
139.162.119.217
139.162.119.244
139.162.119.7
139.162.119.178
139.162.119.219
139.162.119.253
139.162.119.141
139.162.119.61
139.162.119.73
139.162.119.167
139.162.119.34
139.162.119.5
139.162.119.202
139.162.119.70
139.162.119.36
139.162.119.211
139.162.119.130
139.162.119.139
139.162.119.80
139.162.119.78
139.162.119.190
139.162.119.140
139.162.119.95
139.162.119.186
139.162.119.101
139.162.119.81
139.162.119.215
139.162.119.188
139.162.119.65
139.162.119.231
139.162.119.116
139.162.119.218
139.162.119.14
139.162.119.107
139.162.119.224
139.162.119.120
139.162.119.10
139.162.119.251
139.162.119.225
139.162.119.238
139.162.119.12
139.162.119.183
139.162.119.91
139.162.119.62
139.162.119.122
139.162.119.25
139.162.119.189
139.162.119.176
139.162.119.23
139.162.119.142
139.162.119.180
139.162.119.174
139.162.119.242
139.162.119.85
139.162.119.153
139.162.119.169
139.162.119.13
139.162.119.98
139.162.119.63
139.162.119.203
139.162.119.39
139.162.119.195
139.162.119.196
139.162.119.69
139.162.119.11
139.162.119.192
139.162.119.199
139.162.119.138
139.162.119.86
139.162.119.159
139.162.119.150
139.162.119.79
139.162.119.145
139.162.119.249
139.162.119.42
139.162.119.128
139.162.119.132
139.162.119.6
139.162.119.99
139.162.119.77
139.162.119.102
139.162.119.37
139.162.119.184
139.162.119.22
139.162.119.123
139.162.119.170
139.162.119.208
139.162.119.58
139.162.119.127
139.162.119.179
139.162.119.171
139.162.119.96
139.162.119.193
139.162.119.146
139.162.119.181
139.162.119.187
139.162.119.41
139.162.119.4
139.162.119.237
139.162.119.66
139.162.119.228
139.162.119.126
139.162.119.134
139.162.119.158
139.162.119.67
139.162.119.162
139.162.119.105
139.162.119.124
139.162.119.241
139.162.119.168
139.162.119.57
139.162.119.48
139.162.119.222
139.162.119.31
139.162.119.17
139.162.119.72
139.162.119.89
139.162.119.164
139.162.119.92
139.162.119.239
139.162.119.152
139.162.119.165
139.162.119.252
139.162.119.173
139.162.119.76
139.162.119.148
139.162.119.230
139.162.119.32
139.162.119.15
139.162.119.125
139.162.119.51
139.162.119.121
139.162.119.30
139.162.119.106
139.162.119.47
139.162.119.212
139.162.119.149
139.162.119.29
139.162.119.172
139.162.119.74
139.162.119.103
139.162.119.156
139.162.119.240
139.162.119.166
139.162.119.59
139.162.119.114
139.162.119.109
139.162.119.129
139.162.119.35
139.162.119.68
139.162.119.93
139.162.119.191
139.162.119.82
139.162.119.205
139.162.119.112
139.162.119.38
139.162.119.197
139.162.119.221
139.162.119.90
139.162.119.216
139.162.119.177
139.162.119.117
139.162.119.83
139.162.119.223
139.162.119.160
139.162.119.151
139.162.119.52
139.162.119.115
139.162.119.2
139.162.119.20
139.162.119.143
139.162.119.200
139.162.119.210
139.162.119.8
139.162.119.45
139.162.119.246
139.162.119.16
139.162.119.163
139.162.119.97
139.162.119.71
139.162.119.250
139.162.119.55
139.162.119.245
139.162.119.113
139.162.119.234
139.162.119.201
139.162.119.19
139.162.119.206
139.162.119.50
139.162.119.207
139.162.119.44
139.162.119.248
139.162.119.49
139.162.119.136
139.162.119.214
139.162.119.232
139.162.119.3
139.162.119.227
139.162.119.54
139.162.119.33
139.162.119.26
139.162.119.131
139.162.119.229
139.162.119.254
139.162.119.56
Related comments:
IP Type Details Datetime
121.204.185.106 attack 
Sep  1 19:34:15 tux-35-217 sshd\[18337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.204.185.106  user=root
Sep  1 19:34:17 tux-35-217 sshd\[18337\]: Failed password for root from 121.204.185.106 port 50233 ssh2
Sep  1 19:37:24 tux-35-217 sshd\[18344\]: Invalid user teamspeak3 from 121.204.185.106 port 36316
Sep  1 19:37:24 tux-35-217 sshd\[18344\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.204.185.106
...
 2019-09-02 02:05:04
212.83.141.79 attack 
\[2019-09-01 13:58:25\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '212.83.141.79:2321' - Wrong password
\[2019-09-01 13:58:25\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-01T13:58:25.860-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="82768276",SessionID="0x7f7b30db7498",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.141.79/60406",Challenge="7b290e60",ReceivedChallenge="7b290e60",ReceivedHash="9910e2a6274a9051f278a7c33a50fa6b"
\[2019-09-01 13:59:09\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '212.83.141.79:2303' - Wrong password
\[2019-09-01 13:59:09\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-01T13:59:09.223-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="18941894",SessionID="0x7f7b30db7498",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4
 2019-09-02 02:01:01
159.89.194.103 attackspam 
Sep  1 19:37:34 MK-Soft-Root2 sshd\[9214\]: Invalid user eclipse from 159.89.194.103 port 58642
Sep  1 19:37:34 MK-Soft-Root2 sshd\[9214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.194.103
Sep  1 19:37:36 MK-Soft-Root2 sshd\[9214\]: Failed password for invalid user eclipse from 159.89.194.103 port 58642 ssh2
...
 2019-09-02 01:53:55
51.38.128.200 attackbotsspam 
Sep  1 19:28:59 SilenceServices sshd[10461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.128.200
Sep  1 19:29:01 SilenceServices sshd[10461]: Failed password for invalid user ubuntu from 51.38.128.200 port 50050 ssh2
Sep  1 19:37:53 SilenceServices sshd[13919]: Failed password for proxy from 51.38.128.200 port 49578 ssh2
 2019-09-02 01:43:50
181.48.29.35 attack 
Sep  1 18:37:18 mail sshd\[26802\]: Failed password for invalid user popd from 181.48.29.35 port 42098 ssh2
Sep  1 18:54:23 mail sshd\[27185\]: Invalid user pdey from 181.48.29.35 port 42538
...
 2019-09-02 02:11:22
50.73.127.109 attack 
$f2bV_matches
 2019-09-02 01:47:29
80.88.88.181 attack 
Sep  1 08:57:18 apollo sshd\[14025\]: Invalid user prashant from 80.88.88.181Sep  1 08:57:20 apollo sshd\[14025\]: Failed password for invalid user prashant from 80.88.88.181 port 57051 ssh2Sep  1 09:03:50 apollo sshd\[14036\]: Invalid user git from 80.88.88.181
...
 2019-09-02 01:25:07
140.148.225.225 attackbotsspam 
REQUESTED PAGE: ../../mnt/custom/ProductDefinition
 2019-09-02 01:20:06
212.87.9.141 attackbots 
Sep  1 07:33:34 hiderm sshd\[4303\]: Invalid user yx from 212.87.9.141
Sep  1 07:33:34 hiderm sshd\[4303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.87.9.141
Sep  1 07:33:36 hiderm sshd\[4303\]: Failed password for invalid user yx from 212.87.9.141 port 20734 ssh2
Sep  1 07:37:48 hiderm sshd\[4644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.87.9.141  user=root
Sep  1 07:37:51 hiderm sshd\[4644\]: Failed password for root from 212.87.9.141 port 65486 ssh2
 2019-09-02 01:44:34
165.22.228.242 attack 
postfix/smtpd\[26293\]: NOQUEUE: reject: RCPT from mx.expede.naturelike.xyz\[165.22.228.242\]: 554 5.7.1 Service Client host \[165.22.228.242\] blocked using sbl-xbl.spamhaus.org\;
 2019-09-02 01:24:12
116.52.9.220 attackspambots 
[Aegis] @ 2019-09-01 15:01:31  0100 -> SSH insecure connection attempt (scan).
 2019-09-02 01:16:02
163.172.187.30 attackspam 
Fail2Ban Ban Triggered
 2019-09-02 01:37:45
85.206.36.166 attackbotsspam 
Automatic report - Port Scan Attack
 2019-09-02 01:49:43
178.254.0.120 attackspam 
Forged login request.
 2019-09-02 02:00:23
176.31.253.55 attackspambots 
Sep  1 19:33:56 SilenceServices sshd[12370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.253.55
Sep  1 19:33:58 SilenceServices sshd[12370]: Failed password for invalid user ftpadmin from 176.31.253.55 port 33154 ssh2
Sep  1 19:37:44 SilenceServices sshd[13863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.253.55
 2019-09-02 01:51:29

Recently Reported IPs

119.38.117.228 138.197.87.148 2606:4700:10::6814:5184 2606:4700:10::6814:9754
2606:4700:10::ac43:601 2606:4700:10::6814:9437 2606:4700:10::6816:2002 2606:4700:10::6816:4704
2606:4700:10::6816:3062 2606:4700:10::ac43:1918 110.78.154.148 2606:4700:10::6814:7971
81.109.38.131 95.196.203.250 79.134.196.146 89.139.173.226
21.216.119.102 2606:4700:10::ac43:1004 2606:4700:10::6816:4863 2606:4700:10::6814:5292