Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Singapore

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
139.162.214.192 spambotsattack
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2023-02-18 16:15:46
139.162.247.102 attack
OSSEC HIDS Notification.
2020 Oct 15 19:14:19

Received From: shared->/var/log/secure
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

Oct 15 19:14:18 shared sshd[2970433]: ssh_dispatch_run_fatal: Connection from 139.162.247.102 port 41166: bignum is negative [preauth]

 --END OF NOTIFICATION
2020-10-20 08:52:36
139.162.217.250 attack
WebSpam Attack
2020-10-07 05:56:21
139.162.217.250 attackbots
WebSpam Attack
2020-10-06 22:09:25
139.162.217.250 attack
WebSpam Attack
2020-10-06 13:52:46
139.162.247.102 attack
firewall-block, port(s): 22/tcp
2020-10-01 03:25:46
139.162.247.102 attackspambots
honeypot 22 port
2020-09-30 01:51:04
139.162.247.102 attackspam
Sep 29 12:19:00 baraca inetd[76034]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
Sep 29 12:19:01 baraca inetd[76035]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
Sep 29 12:19:02 baraca inetd[76038]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
...
2020-09-29 17:51:13
139.162.247.102 attackbotsspam
IP 139.162.247.102 attacked honeypot on port: 22 at 9/26/2020 5:56:09 AM
2020-09-26 21:09:12
139.162.247.102 attackbotsspam
Sep2601:57:57server6sshd[14291]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:02server6sshd[14327]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:07server6sshd[14343]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:12server6sshd[14360]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:17server6sshd[14374]:refusedconnectfrom139.162.247.102\(139.162.247.102\)
2020-09-26 12:51:05
139.162.245.68 attackspam
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
2020-09-22 23:57:27
139.162.245.68 attackspam
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
2020-09-22 16:01:33
139.162.245.68 attackbotsspam
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
2020-09-22 08:05:11
139.162.252.121 attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li1537-121.members.linode.com.
2020-09-06 02:31:22
139.162.252.121 attack
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li1537-121.members.linode.com.
2020-09-05 18:06:32
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.162.2.96
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63768
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.162.2.96.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:08:29 CST 2022
;; MSG SIZE  rcvd: 105
Host info
96.2.162.139.in-addr.arpa domain name pointer li844-96.members.linode.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
96.2.162.139.in-addr.arpa	name = li844-96.members.linode.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
139.9.33.214 attackspam
May314:27:51server2pure-ftpd:\(\?@139.9.33.214\)[WARNING]Authenticationfailedforuser[web]May314:33:58server2pure-ftpd:\(\?@139.9.33.214\)[WARNING]Authenticationfailedforuser[ftp]May314:34:03server2pure-ftpd:\(\?@139.9.33.214\)[WARNING]Authenticationfailedforuser[ftp]May314:34:10server2pure-ftpd:\(\?@139.9.33.214\)[WARNING]Authenticationfailedforuser[ftp]May314:34:16server2pure-ftpd:\(\?@139.9.33.214\)[WARNING]Authenticationfailedforuser[ftp]May314:34:20server2pure-ftpd:\(\?@139.9.33.214\)[WARNING]Authenticationfailedforuser[ftp]May314:34:26server2pure-ftpd:\(\?@139.9.33.214\)[WARNING]Authenticationfailedforuser[ftp]May314:34:32server2pure-ftpd:\(\?@139.9.33.214\)[WARNING]Authenticationfailedforuser[ftp]May314:34:37server2pure-ftpd:\(\?@139.9.33.214\)[WARNING]Authenticationfailedforuser[ftp]May314:34:42server2pure-ftpd:\(\?@139.9.33.214\)[WARNING]Authenticationfailedforuser[ftp]May314:34:48server2pure-ftpd:\(\?@139.9.33.214\)[WARNING]Authenticationfailedforuser[ftp]May314:34:52server2pure-ftpd:\(\?@139.9.33.21
2020-05-03 21:32:55
89.64.77.122 attack
Fail2Ban Ban Triggered
2020-05-03 21:37:08
195.158.220.39 attackbots
Unauthorized connection attempt from IP address 195.158.220.39 on Port 445(SMB)
2020-05-03 21:08:50
124.101.127.187 attackspam
Attempt to attack host OS, exploiting network vulnerabilities, on 03-05-2020 13:15:08.
2020-05-03 21:18:01
116.1.201.12 attack
May  3 15:10:52 h2779839 sshd[7567]: Invalid user ona from 116.1.201.12 port 30927
May  3 15:10:52 h2779839 sshd[7567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.1.201.12
May  3 15:10:52 h2779839 sshd[7567]: Invalid user ona from 116.1.201.12 port 30927
May  3 15:10:54 h2779839 sshd[7567]: Failed password for invalid user ona from 116.1.201.12 port 30927 ssh2
May  3 15:14:19 h2779839 sshd[7622]: Invalid user vivian from 116.1.201.12 port 21720
May  3 15:14:19 h2779839 sshd[7622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.1.201.12
May  3 15:14:19 h2779839 sshd[7622]: Invalid user vivian from 116.1.201.12 port 21720
May  3 15:14:21 h2779839 sshd[7622]: Failed password for invalid user vivian from 116.1.201.12 port 21720 ssh2
May  3 15:17:52 h2779839 sshd[7657]: Invalid user wen from 116.1.201.12 port 47567
...
2020-05-03 21:35:22
45.142.195.7 attackspam
May  3 14:44:33 websrv1.aknwsrv.net postfix/smtpd[272121]: warning: unknown[45.142.195.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  3 14:45:23 websrv1.aknwsrv.net postfix/smtpd[272121]: warning: unknown[45.142.195.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  3 14:46:13 websrv1.aknwsrv.net postfix/smtpd[272121]: warning: unknown[45.142.195.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  3 14:47:04 websrv1.aknwsrv.net postfix/smtpd[272121]: warning: unknown[45.142.195.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  3 14:47:53 websrv1.aknwsrv.net postfix/smtpd[272251]: warning: unknown[45.142.195.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-05-03 20:58:55
122.166.192.26 attack
May  3 15:09:25 master sshd[27315]: Failed password for invalid user caio from 122.166.192.26 port 35682 ssh2
May  3 15:19:54 master sshd[27406]: Failed password for invalid user friends from 122.166.192.26 port 53554 ssh2
May  3 15:24:45 master sshd[27449]: Failed password for invalid user thp from 122.166.192.26 port 35974 ssh2
May  3 15:30:00 master sshd[27461]: Failed password for root from 122.166.192.26 port 46616 ssh2
May  3 15:35:03 master sshd[27881]: Failed password for invalid user spamfilter from 122.166.192.26 port 57296 ssh2
May  3 15:40:12 master sshd[27963]: Failed password for invalid user ubuntu from 122.166.192.26 port 39722 ssh2
May  3 15:45:36 master sshd[28010]: Failed password for invalid user chad from 122.166.192.26 port 50426 ssh2
2020-05-03 21:24:14
46.188.94.27 attackspam
May  3 14:15:10 debian-2gb-nbg1-2 kernel: \[10767013.877957\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=46.188.94.27 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=10189 PROTO=TCP SPT=26892 DPT=23 WINDOW=24580 RES=0x00 SYN URGP=0
2020-05-03 21:13:16
150.109.149.170 attackbotsspam
May  3 09:10:38 dns1 sshd[7755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.149.170 
May  3 09:10:40 dns1 sshd[7755]: Failed password for invalid user ub from 150.109.149.170 port 35048 ssh2
May  3 09:14:53 dns1 sshd[7943]: Failed password for root from 150.109.149.170 port 45648 ssh2
2020-05-03 21:30:58
36.92.15.106 attackbots
Unauthorized connection attempt from IP address 36.92.15.106 on Port 445(SMB)
2020-05-03 21:18:38
65.98.111.218 attackbots
May  3 15:09:41 piServer sshd[10506]: Failed password for root from 65.98.111.218 port 51831 ssh2
May  3 15:14:28 piServer sshd[10924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.98.111.218 
May  3 15:14:30 piServer sshd[10924]: Failed password for invalid user gk from 65.98.111.218 port 48077 ssh2
...
2020-05-03 21:20:40
106.51.85.146 attackbots
05/03/2020-14:14:32.591767 106.51.85.146 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-05-03 21:41:20
122.252.239.5 attack
May  3 15:18:20 OPSO sshd\[13658\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.252.239.5  user=root
May  3 15:18:21 OPSO sshd\[13658\]: Failed password for root from 122.252.239.5 port 46902 ssh2
May  3 15:22:35 OPSO sshd\[14369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.252.239.5  user=root
May  3 15:22:38 OPSO sshd\[14369\]: Failed password for root from 122.252.239.5 port 56242 ssh2
May  3 15:26:43 OPSO sshd\[14893\]: Invalid user kaitlin from 122.252.239.5 port 37348
May  3 15:26:43 OPSO sshd\[14893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.252.239.5
2020-05-03 21:40:57
45.140.88.58 attack
Tried to recover my video game account
2020-05-03 21:01:12
182.75.216.190 attackspambots
(sshd) Failed SSH login from 182.75.216.190 (IN/India/nsg-static-190.216.75.182-airtel.com): 5 in the last 3600 secs
2020-05-03 21:35:05

Recently Reported IPs

139.162.198.195 139.162.2.76 139.162.2.110 139.162.2.234
139.162.20.119 139.162.20.109 118.212.107.185 139.162.20.240
139.162.20.144 139.162.20.229 139.162.20.189 118.212.107.187
118.212.107.191 118.212.107.192 118.212.107.194 126.168.249.146
118.212.107.196 118.212.107.198 118.212.107.20 139.162.218.203