Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
139.162.214.192 spambotsattack
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2023-02-18 16:15:46
139.162.247.102 attack
OSSEC HIDS Notification.
2020 Oct 15 19:14:19

Received From: shared->/var/log/secure
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

Oct 15 19:14:18 shared sshd[2970433]: ssh_dispatch_run_fatal: Connection from 139.162.247.102 port 41166: bignum is negative [preauth]

 --END OF NOTIFICATION
2020-10-20 08:52:36
139.162.217.250 attack
WebSpam Attack
2020-10-07 05:56:21
139.162.217.250 attackbots
WebSpam Attack
2020-10-06 22:09:25
139.162.217.250 attack
WebSpam Attack
2020-10-06 13:52:46
139.162.247.102 attack
firewall-block, port(s): 22/tcp
2020-10-01 03:25:46
139.162.247.102 attackspambots
honeypot 22 port
2020-09-30 01:51:04
139.162.247.102 attackspam
Sep 29 12:19:00 baraca inetd[76034]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
Sep 29 12:19:01 baraca inetd[76035]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
Sep 29 12:19:02 baraca inetd[76038]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
...
2020-09-29 17:51:13
139.162.247.102 attackbotsspam
IP 139.162.247.102 attacked honeypot on port: 22 at 9/26/2020 5:56:09 AM
2020-09-26 21:09:12
139.162.247.102 attackbotsspam
Sep2601:57:57server6sshd[14291]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:02server6sshd[14327]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:07server6sshd[14343]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:12server6sshd[14360]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:17server6sshd[14374]:refusedconnectfrom139.162.247.102\(139.162.247.102\)
2020-09-26 12:51:05
139.162.245.68 attackspam
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
2020-09-22 23:57:27
139.162.245.68 attackspam
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
2020-09-22 16:01:33
139.162.245.68 attackbotsspam
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
2020-09-22 08:05:11
139.162.252.121 attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li1537-121.members.linode.com.
2020-09-06 02:31:22
139.162.252.121 attack
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li1537-121.members.linode.com.
2020-09-05 18:06:32
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.162.2.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2535
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.162.2.72.			IN	A

;; AUTHORITY SECTION:
.			520	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022091401 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 15 02:51:40 CST 2022
;; MSG SIZE  rcvd: 105
Host info
72.2.162.139.in-addr.arpa domain name pointer 139-162-2-72.ip.linodeusercontent.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
72.2.162.139.in-addr.arpa	name = 139-162-2-72.ip.linodeusercontent.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
49.73.84.175 attackbots
Failed password for invalid user paula from 49.73.84.175 port 54882 ssh2
2020-06-09 21:42:56
54.38.187.5 attackbotsspam
(sshd) Failed SSH login from 54.38.187.5 (FR/France/5.ip-54-38-187.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun  9 15:03:04 s1 sshd[2703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.187.5  user=root
Jun  9 15:03:07 s1 sshd[2703]: Failed password for root from 54.38.187.5 port 51438 ssh2
Jun  9 15:08:41 s1 sshd[3314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.187.5  user=root
Jun  9 15:08:43 s1 sshd[3314]: Failed password for root from 54.38.187.5 port 34158 ssh2
Jun  9 15:10:13 s1 sshd[3466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.187.5  user=root
2020-06-09 22:09:31
93.108.242.140 attack
Jun  9 15:26:48 buvik sshd[28624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.108.242.140
Jun  9 15:26:50 buvik sshd[28624]: Failed password for invalid user admin from 93.108.242.140 port 20591 ssh2
Jun  9 15:30:19 buvik sshd[29170]: Invalid user postgres from 93.108.242.140
...
2020-06-09 21:43:55
158.140.164.29 attack
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-06-09 21:51:22
110.49.105.146 attackspam
Jun  9 09:31:20 plesk sshd[14596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.105.146  user=r.r
Jun  9 09:31:23 plesk sshd[14596]: Failed password for r.r from 110.49.105.146 port 40061 ssh2
Jun  9 09:31:23 plesk sshd[14596]: Received disconnect from 110.49.105.146: 11: Bye Bye [preauth]
Jun  9 09:34:32 plesk sshd[14835]: Invalid user bio035 from 110.49.105.146
Jun  9 09:34:32 plesk sshd[14835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.105.146 
Jun  9 09:34:34 plesk sshd[14835]: Failed password for invalid user bio035 from 110.49.105.146 port 24800 ssh2
Jun  9 09:34:35 plesk sshd[14835]: Received disconnect from 110.49.105.146: 11: Bye Bye [preauth]
Jun  9 09:40:56 plesk sshd[15221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.105.146  user=r.r
Jun  9 09:40:59 plesk sshd[15221]: Failed password for r.r from 110.49.1........
-------------------------------
2020-06-09 21:28:36
209.50.48.129 attackbots
Jun  9 12:07:28 *** sshd[31639]: Invalid user guancong from 209.50.48.129
Jun  9 12:07:28 *** sshd[31639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209-50-48-129.us-chi1.upcloud.host 
Jun  9 12:07:30 *** sshd[31639]: Failed password for invalid user guancong from 209.50.48.129 port 51982 ssh2
Jun  9 12:07:30 *** sshd[31639]: Received disconnect from 209.50.48.129: 11: Bye Bye [preauth]
Jun  9 12:11:26 *** sshd[31983]: Invalid user sales from 209.50.48.129
Jun  9 12:11:26 *** sshd[31983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209-50-48-129.us-chi1.upcloud.host 
Jun  9 12:11:28 *** sshd[31983]: Failed password for invalid user sales from 209.50.48.129 port 37570 ssh2
Jun  9 12:11:28 *** sshd[31983]: Received disconnect from 209.50.48.129: 11: Bye Bye [preauth]
Jun  9 12:14:41 *** sshd[32291]: Invalid user bgiptv from 209.50.48.129
Jun  9 12:14:41 *** sshd[32291]: pam_unix(sshd........
-------------------------------
2020-06-09 22:11:26
106.246.250.202 attackspambots
Jun  9 07:16:27 server1 sshd\[4476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.246.250.202 
Jun  9 07:16:29 server1 sshd\[4476\]: Failed password for invalid user conflux from 106.246.250.202 port 24258 ssh2
Jun  9 07:20:08 server1 sshd\[5598\]: Invalid user dev from 106.246.250.202
Jun  9 07:20:08 server1 sshd\[5598\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.246.250.202 
Jun  9 07:20:09 server1 sshd\[5598\]: Failed password for invalid user dev from 106.246.250.202 port 22345 ssh2
...
2020-06-09 21:32:52
41.242.102.66 attackbots
Jun  9 13:56:16 mail sshd[29124]: Failed password for invalid user dodzi from 41.242.102.66 port 47847 ssh2
Jun  9 14:07:44 mail sshd[30629]: Failed password for root from 41.242.102.66 port 52484 ssh2
...
2020-06-09 21:39:24
115.134.121.236 attackspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-06-09 21:48:22
185.202.1.123 attackspambots
Unauthorized connection attempt detected from IP address 185.202.1.123 to port 3389
2020-06-09 21:27:55
122.51.57.78 attackbots
Jun  9 14:08:25 serwer sshd\[22323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.57.78  user=root
Jun  9 14:08:27 serwer sshd\[22323\]: Failed password for root from 122.51.57.78 port 50194 ssh2
Jun  9 14:13:33 serwer sshd\[23097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.57.78  user=root
...
2020-06-09 21:38:57
175.24.72.167 attackspam
Unauthorized connection attempt detected from IP address 175.24.72.167 to port 4600
2020-06-09 22:08:33
209.97.175.191 attackbotsspam
209.97.175.191 - - [09/Jun/2020:14:07:43 +0200] "GET /wp-login.php HTTP/1.1" 200 6521 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
209.97.175.191 - - [09/Jun/2020:14:07:46 +0200] "POST /wp-login.php HTTP/1.1" 200 6772 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
209.97.175.191 - - [09/Jun/2020:14:07:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-09 21:35:20
23.82.140.85 attackbots
Jun  9 15:18:47 debian-2gb-nbg1-2 kernel: \[13967462.103306\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=23.82.140.85 DST=195.201.40.59 LEN=52 TOS=0x02 PREC=0x00 TTL=118 ID=62035 DF PROTO=TCP SPT=51107 DPT=3389 WINDOW=64240 RES=0x00 CWR ECE SYN URGP=0
2020-06-09 21:33:54
64.227.67.106 attackbotsspam
" "
2020-06-09 21:49:15

Recently Reported IPs

101.34.221.23 138.2.241.44 103.77.124.35 162.0.216.181
103.145.13.90 115.150.74.162 129.146.80.86 187.208.96.156
77.119.203.23 188.22.166.215 122.114.226.181 188.130.201.74
221.12.37.46 211.135.78.123 20.24.21.64 159.223.133.194
128.90.167.21 191.11.165.205 195.178.120.247 171.108.153.27