Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
139.162.214.192 spambotsattack
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2023-02-18 16:15:46
139.162.247.102 attack
OSSEC HIDS Notification.
2020 Oct 15 19:14:19

Received From: shared->/var/log/secure
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

Oct 15 19:14:18 shared sshd[2970433]: ssh_dispatch_run_fatal: Connection from 139.162.247.102 port 41166: bignum is negative [preauth]

 --END OF NOTIFICATION
2020-10-20 08:52:36
139.162.217.250 attack
WebSpam Attack
2020-10-07 05:56:21
139.162.217.250 attackbots
WebSpam Attack
2020-10-06 22:09:25
139.162.217.250 attack
WebSpam Attack
2020-10-06 13:52:46
139.162.247.102 attack
firewall-block, port(s): 22/tcp
2020-10-01 03:25:46
139.162.247.102 attackspambots
honeypot 22 port
2020-09-30 01:51:04
139.162.247.102 attackspam
Sep 29 12:19:00 baraca inetd[76034]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
Sep 29 12:19:01 baraca inetd[76035]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
Sep 29 12:19:02 baraca inetd[76038]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
...
2020-09-29 17:51:13
139.162.247.102 attackbotsspam
IP 139.162.247.102 attacked honeypot on port: 22 at 9/26/2020 5:56:09 AM
2020-09-26 21:09:12
139.162.247.102 attackbotsspam
Sep2601:57:57server6sshd[14291]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:02server6sshd[14327]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:07server6sshd[14343]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:12server6sshd[14360]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:17server6sshd[14374]:refusedconnectfrom139.162.247.102\(139.162.247.102\)
2020-09-26 12:51:05
139.162.245.68 attackspam
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
2020-09-22 23:57:27
139.162.245.68 attackspam
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
2020-09-22 16:01:33
139.162.245.68 attackbotsspam
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
2020-09-22 08:05:11
139.162.252.121 attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li1537-121.members.linode.com.
2020-09-06 02:31:22
139.162.252.121 attack
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li1537-121.members.linode.com.
2020-09-05 18:06:32
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.162.2.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2760
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.162.2.91.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 04:07:34 CST 2022
;; MSG SIZE  rcvd: 105
Host info
91.2.162.139.in-addr.arpa domain name pointer 139-162-2-91.ip.linodeusercontent.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
91.2.162.139.in-addr.arpa	name = 139-162-2-91.ip.linodeusercontent.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
192.144.155.63 attackbotsspam
Jun 14 09:44:47 dhoomketu sshd[732386]: Failed password for root from 192.144.155.63 port 54534 ssh2
Jun 14 09:46:46 dhoomketu sshd[732429]: Invalid user admin from 192.144.155.63 port 45052
Jun 14 09:46:46 dhoomketu sshd[732429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.155.63 
Jun 14 09:46:46 dhoomketu sshd[732429]: Invalid user admin from 192.144.155.63 port 45052
Jun 14 09:46:48 dhoomketu sshd[732429]: Failed password for invalid user admin from 192.144.155.63 port 45052 ssh2
...
2020-06-14 12:36:57
49.88.112.112 attackbots
Jun 14 11:55:16 webhost01 sshd[10859]: Failed password for root from 49.88.112.112 port 46535 ssh2
...
2020-06-14 13:21:30
137.74.132.171 attackspambots
Invalid user gtadmin from 137.74.132.171 port 47520
2020-06-14 13:17:07
165.169.241.28 attackbotsspam
Jun 14 06:50:39 localhost sshd\[8996\]: Invalid user tomcat from 165.169.241.28
Jun 14 06:50:39 localhost sshd\[8996\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.169.241.28
Jun 14 06:50:41 localhost sshd\[8996\]: Failed password for invalid user tomcat from 165.169.241.28 port 36748 ssh2
Jun 14 06:52:44 localhost sshd\[9013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.169.241.28  user=root
Jun 14 06:52:46 localhost sshd\[9013\]: Failed password for root from 165.169.241.28 port 59614 ssh2
...
2020-06-14 13:03:31
45.170.73.7 attackspam
$f2bV_matches
2020-06-14 13:05:08
102.37.12.59 attack
Jun 14 13:44:49 web1 sshd[27953]: Invalid user joris from 102.37.12.59 port 1088
Jun 14 13:44:49 web1 sshd[27953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.37.12.59
Jun 14 13:44:49 web1 sshd[27953]: Invalid user joris from 102.37.12.59 port 1088
Jun 14 13:44:51 web1 sshd[27953]: Failed password for invalid user joris from 102.37.12.59 port 1088 ssh2
Jun 14 13:50:44 web1 sshd[29421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.37.12.59  user=root
Jun 14 13:50:46 web1 sshd[29421]: Failed password for root from 102.37.12.59 port 1088 ssh2
Jun 14 13:55:11 web1 sshd[30532]: Invalid user kkamja from 102.37.12.59 port 1088
Jun 14 13:55:11 web1 sshd[30532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.37.12.59
Jun 14 13:55:11 web1 sshd[30532]: Invalid user kkamja from 102.37.12.59 port 1088
Jun 14 13:55:12 web1 sshd[30532]: Failed password for invali
...
2020-06-14 13:04:17
51.75.66.142 attackbots
Jun 14 03:51:50 ip-172-31-61-156 sshd[31860]: Failed password for root from 51.75.66.142 port 38450 ssh2
Jun 14 03:55:18 ip-172-31-61-156 sshd[32021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.66.142  user=root
Jun 14 03:55:20 ip-172-31-61-156 sshd[32021]: Failed password for root from 51.75.66.142 port 40602 ssh2
Jun 14 03:55:18 ip-172-31-61-156 sshd[32021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.66.142  user=root
Jun 14 03:55:20 ip-172-31-61-156 sshd[32021]: Failed password for root from 51.75.66.142 port 40602 ssh2
...
2020-06-14 12:58:54
185.156.73.60 attackspambots
[H1.VM8] Blocked by UFW
2020-06-14 12:42:21
178.62.118.53 attackspam
Jun 14 05:47:35 OPSO sshd\[30119\]: Invalid user token from 178.62.118.53 port 46084
Jun 14 05:47:35 OPSO sshd\[30119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.118.53
Jun 14 05:47:37 OPSO sshd\[30119\]: Failed password for invalid user token from 178.62.118.53 port 46084 ssh2
Jun 14 05:54:58 OPSO sshd\[31992\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.118.53  user=root
Jun 14 05:55:00 OPSO sshd\[31992\]: Failed password for root from 178.62.118.53 port 46285 ssh2
2020-06-14 13:15:33
79.137.77.131 attack
2020-06-13T21:55:34.369428linuxbox-skyline sshd[368996]: Invalid user zwang from 79.137.77.131 port 51928
...
2020-06-14 12:49:42
222.186.31.127 attack
Jun 14 06:04:09 vmd17057 sshd[27659]: Failed password for root from 222.186.31.127 port 13694 ssh2
Jun 14 06:04:12 vmd17057 sshd[27659]: Failed password for root from 222.186.31.127 port 13694 ssh2
...
2020-06-14 12:31:55
180.108.196.203 attackbots
$f2bV_matches
2020-06-14 12:30:33
222.186.42.137 attackspambots
Jun 14 00:21:21 NPSTNNYC01T sshd[11919]: Failed password for root from 222.186.42.137 port 52839 ssh2
Jun 14 00:21:30 NPSTNNYC01T sshd[11923]: Failed password for root from 222.186.42.137 port 45555 ssh2
Jun 14 00:21:33 NPSTNNYC01T sshd[11923]: Failed password for root from 222.186.42.137 port 45555 ssh2
...
2020-06-14 12:28:44
49.232.43.151 attackbots
Invalid user fjseclib from 49.232.43.151 port 56536
2020-06-14 13:07:32
178.123.209.231 attackspambots
Fail2Ban Ban Triggered
2020-06-14 12:35:11

Recently Reported IPs

120.85.92.28 41.239.226.90 189.175.68.100 165.49.28.101
45.136.193.73 200.148.157.4 187.138.208.62 185.217.189.65
94.198.55.77 190.184.222.46 42.224.85.81 197.51.46.52
181.48.184.206 3.81.45.86 194.158.74.214 95.68.151.183
185.239.229.164 108.160.205.121 134.122.34.186 14.110.235.228