139.162.2.91 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.162.214.192	spambotsattack	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2023-02-18 16:15:46
139.162.247.102	attack	OSSEC HIDS Notification. 2020 Oct 15 19:14:19 Received From: shared->/var/log/secure Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system." Portion of the log(s): Oct 15 19:14:18 shared sshd[2970433]: ssh_dispatch_run_fatal: Connection from 139.162.247.102 port 41166: bignum is negative [preauth] --END OF NOTIFICATION	2020-10-20 08:52:36
139.162.217.250	attack	WebSpam Attack	2020-10-07 05:56:21
139.162.217.250	attackbots	WebSpam Attack	2020-10-06 22:09:25
139.162.217.250	attack	WebSpam Attack	2020-10-06 13:52:46
139.162.247.102	attack	firewall-block, port(s): 22/tcp	2020-10-01 03:25:46
139.162.247.102	attackspambots	honeypot 22 port	2020-09-30 01:51:04
139.162.247.102	attackspam	Sep 29 12:19:00 baraca inetd[76034]: refused connection from scan003.ampereinnotech.com, service sshd (tcp) Sep 29 12:19:01 baraca inetd[76035]: refused connection from scan003.ampereinnotech.com, service sshd (tcp) Sep 29 12:19:02 baraca inetd[76038]: refused connection from scan003.ampereinnotech.com, service sshd (tcp) ...	2020-09-29 17:51:13
139.162.247.102	attackbotsspam	IP 139.162.247.102 attacked honeypot on port: 22 at 9/26/2020 5:56:09 AM	2020-09-26 21:09:12
139.162.247.102	attackbotsspam	Sep2601:57:57server6sshd[14291]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:02server6sshd[14327]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:07server6sshd[14343]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:12server6sshd[14360]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:17server6sshd[14374]:refusedconnectfrom139.162.247.102\(139.162.247.102\)	2020-09-26 12:51:05
139.162.245.68	attackspam	Found on Block CINS-badguys / proto=6 . srcport=50055 . dstport=9200 . (3216)	2020-09-22 23:57:27
139.162.245.68	attackspam	Found on Block CINS-badguys / proto=6 . srcport=50055 . dstport=9200 . (3216)	2020-09-22 16:01:33
139.162.245.68	attackbotsspam	Found on Block CINS-badguys / proto=6 . srcport=50055 . dstport=9200 . (3216)	2020-09-22 08:05:11
139.162.252.121	attackspambots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li1537-121.members.linode.com.	2020-09-06 02:31:22
139.162.252.121	attack	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li1537-121.members.linode.com.	2020-09-05 18:06:32

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.162.2.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2760
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.162.2.91.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 04:07:34 CST 2022
;; MSG SIZE  rcvd: 105

Host info

91.2.162.139.in-addr.arpa domain name pointer 139-162-2-91.ip.linodeusercontent.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
91.2.162.139.in-addr.arpa	name = 139-162-2-91.ip.linodeusercontent.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
134.175.236.187	attack	Jun 5 15:20:37 vps647732 sshd[19460]: Failed password for root from 134.175.236.187 port 16361 ssh2 ...	2020-06-05 21:25:44
178.221.98.209	attackbots	xmlrpc attack	2020-06-05 21:36:56
106.12.56.143	attackbotsspam	Jun 5 12:58:52 pi sshd[30954]: Failed password for root from 106.12.56.143 port 38444 ssh2	2020-06-05 21:21:41
156.200.107.242	attackspambots	20 attempts against mh-misbehave-ban on tree	2020-06-05 21:25:20
35.200.203.6	attackbotsspam	35.200.203.6 (6.203.200.35.bc.googleusercontent.com), 12 distributed sshd attacks on account [root] in the last 3600 secs	2020-06-05 20:59:44
107.158.163.142	attack	2020-06-05 07:01:47.273497-0500 localhost smtpd[20938]: NOQUEUE: reject: RCPT from unknown[107.158.163.142]: 450 4.7.25 Client host rejected: cannot find your hostname, [107.158.163.142]; from= to= proto=ESMTP helo=	2020-06-05 21:05:00
106.13.168.31	attackspambots	2020-06-05T13:42:39.416559ns386461 sshd\[13226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.31 user=root 2020-06-05T13:42:40.991283ns386461 sshd\[13226\]: Failed password for root from 106.13.168.31 port 48164 ssh2 2020-06-05T13:58:40.367103ns386461 sshd\[28263\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.31 user=root 2020-06-05T13:58:41.872510ns386461 sshd\[28263\]: Failed password for root from 106.13.168.31 port 52444 ssh2 2020-06-05T14:02:52.128448ns386461 sshd\[31996\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.31 user=root ...	2020-06-05 21:17:28
27.221.97.3	attack	Jun 5 13:57:43 mail sshd\[31447\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.221.97.3 user=root Jun 5 13:57:46 mail sshd\[31447\]: Failed password for root from 27.221.97.3 port 48422 ssh2 Jun 5 14:02:36 mail sshd\[31657\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.221.97.3 user=root ...	2020-06-05 21:31:48
111.229.12.69	attackbotsspam	Jun 5 14:30:46 Ubuntu-1404-trusty-64-minimal sshd\[15525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.12.69 user=root Jun 5 14:30:48 Ubuntu-1404-trusty-64-minimal sshd\[15525\]: Failed password for root from 111.229.12.69 port 36258 ssh2 Jun 5 14:37:03 Ubuntu-1404-trusty-64-minimal sshd\[19700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.12.69 user=root Jun 5 14:37:05 Ubuntu-1404-trusty-64-minimal sshd\[19700\]: Failed password for root from 111.229.12.69 port 40904 ssh2 Jun 5 14:44:57 Ubuntu-1404-trusty-64-minimal sshd\[24746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.12.69 user=root	2020-06-05 21:26:59
45.9.148.215	attackspambots	xmlrpc attack	2020-06-05 21:27:32
1.38.221.136	attack	Email rejected due to spam filtering	2020-06-05 21:35:27
94.191.96.110	attackspam	"fail2ban match"	2020-06-05 21:33:13
183.224.149.234	attackbotsspam	Jun 5 14:51:24 server sshd[30122]: Failed password for root from 183.224.149.234 port 14107 ssh2 Jun 5 14:54:29 server sshd[30292]: Failed password for root from 183.224.149.234 port 34091 ssh2 ...	2020-06-05 21:13:05
14.162.39.190	attackbotsspam	1591358575 - 06/05/2020 14:02:55 Host: 14.162.39.190/14.162.39.190 Port: 445 TCP Blocked	2020-06-05 21:14:02
120.92.139.2	attack	Jun 5 13:52:58 mail sshd\[31409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.139.2 user=root Jun 5 13:53:00 mail sshd\[31409\]: Failed password for root from 120.92.139.2 port 16366 ssh2 Jun 5 14:02:57 mail sshd\[31707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.139.2 user=root ...	2020-06-05 21:10:49

Recently Reported IPs

120.85.92.28	41.239.226.90	189.175.68.100	165.49.28.101
45.136.193.73	200.148.157.4	187.138.208.62	185.217.189.65
94.198.55.77	190.184.222.46	42.224.85.81	197.51.46.52
181.48.184.206	3.81.45.86	194.158.74.214	95.68.151.183
185.239.229.164	108.160.205.121	134.122.34.186	14.110.235.228