Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
139.162.247.102 attack 
OSSEC HIDS Notification.
2020 Oct 15 19:14:19

Received From: shared->/var/log/secure
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

Oct 15 19:14:18 shared sshd[2970433]: ssh_dispatch_run_fatal: Connection from 139.162.247.102 port 41166: bignum is negative [preauth]

 --END OF NOTIFICATION
 2020-10-20 08:52:36
139.162.247.102 attack 
firewall-block, port(s): 22/tcp
 2020-10-01 03:25:46
139.162.247.102 attackspambots 
honeypot 22 port
 2020-09-30 01:51:04
139.162.247.102 attackspam 
Sep 29 12:19:00 baraca inetd[76034]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
Sep 29 12:19:01 baraca inetd[76035]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
Sep 29 12:19:02 baraca inetd[76038]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
...
 2020-09-29 17:51:13
139.162.247.102 attackbotsspam 
IP 139.162.247.102 attacked honeypot on port: 22 at 9/26/2020 5:56:09 AM
 2020-09-26 21:09:12
139.162.247.102 attackbotsspam 
Sep2601:57:57server6sshd[14291]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:02server6sshd[14327]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:07server6sshd[14343]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:12server6sshd[14360]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:17server6sshd[14374]:refusedconnectfrom139.162.247.102\(139.162.247.102\)
 2020-09-26 12:51:05
139.162.245.68 attackspam 
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
 2020-09-22 23:57:27
139.162.245.68 attackspam 
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
 2020-09-22 16:01:33
139.162.245.68 attackbotsspam 
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
 2020-09-22 08:05:11
139.162.240.117 attackbotsspam 
139.162.240.117 - - [27/Jul/2020:08:51:12 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2"
...
 2020-07-27 14:49:32
139.162.240.117 attackspambots 
139.162.240.117 - - [25/Jul/2020:20:24:22 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2"
...
 2020-07-26 00:45:19
139.162.247.56 attackbots 
 UDP 139.162.247.56:43859 -> port 5353, len 74
 2020-07-21 07:26:26
139.162.247.141 attackspam 
2020-06-29T23:43:46.057039lavrinenko.info sshd[29353]: Invalid user natanael from 139.162.247.141 port 53110
2020-06-29T23:43:46.061306lavrinenko.info sshd[29353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.162.247.141
2020-06-29T23:43:46.057039lavrinenko.info sshd[29353]: Invalid user natanael from 139.162.247.141 port 53110
2020-06-29T23:43:47.955905lavrinenko.info sshd[29353]: Failed password for invalid user natanael from 139.162.247.141 port 53110 ssh2
2020-06-29T23:47:07.400609lavrinenko.info sshd[29506]: Invalid user mk from 139.162.247.141 port 54198
...
 2020-06-30 08:33:43
139.162.242.157 attack 
4 failed login attempts (2 lockout(s)) from IP: 139.162.242.157

Last user attempted: [login]

IP was blocked for 100 hours
 2020-06-10 04:46:45
139.162.242.157 attackspam 
139.162.242.157 - - [07/Jun/2020:15:31:25 +0200] "GET /wp-login.php HTTP/1.1" 200 1900 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.162.242.157 - - [07/Jun/2020:15:31:25 +0200] "POST /wp-login.php HTTP/1.1" 200 2031 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.162.242.157 - - [07/Jun/2020:15:33:30 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.162.242.157 - - [07/Jun/2020:15:33:30 +0200] "POST /wp-login.php HTTP/1.1" 200 1790 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.162.242.157 - - [07/Jun/2020:15:40:48 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.162.242.157 - - [07/Jun/2020:15:40:48 +0200] "POST /wp-login.php HTTP/1.1" 200 1790 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/
...
 2020-06-08 00:01:29
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.162.24.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60996
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.162.24.105.			IN	A

;; AUTHORITY SECTION:
.			565	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:37:05 CST 2022
;; MSG SIZE  rcvd: 107
Host info
105.24.162.139.in-addr.arpa domain name pointer li866-105.members.linode.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
105.24.162.139.in-addr.arpa	name = li866-105.members.linode.com.

Authoritative answers can be found from:
Related IP info:
139.162.24.41
139.162.24.175
139.162.24.185
139.162.24.211
139.162.24.159
139.162.24.129
139.162.24.108
139.162.24.206
139.162.24.123
139.162.24.14
139.162.24.89
139.162.24.161
139.162.24.188
139.162.24.92
139.162.24.151
139.162.24.153
139.162.24.30
139.162.24.32
139.162.24.65
139.162.24.100
139.162.24.40
139.162.24.219
139.162.24.169
139.162.24.17
139.162.24.113
139.162.24.220
139.162.24.239
139.162.24.179
139.162.24.119
139.162.24.1
139.162.24.154
139.162.24.101
139.162.24.53
139.162.24.56
139.162.24.55
139.162.24.35
139.162.24.226
139.162.24.193
139.162.24.189
139.162.24.138
139.162.24.163
139.162.24.214
139.162.24.48
139.162.24.46
139.162.24.209
139.162.24.85
139.162.24.52
139.162.24.21
139.162.24.61
139.162.24.187
139.162.24.147
139.162.24.233
139.162.24.90
139.162.24.126
139.162.24.148
139.162.24.227
139.162.24.109
139.162.24.247
139.162.24.110
139.162.24.223
139.162.24.105
139.162.24.150
139.162.24.125
139.162.24.98
139.162.24.230
139.162.24.54
139.162.24.116
139.162.24.13
139.162.24.114
139.162.24.70
139.162.24.11
139.162.24.10
139.162.24.140
139.162.24.208
139.162.24.162
139.162.24.238
139.162.24.173
139.162.24.171
139.162.24.63
139.162.24.124
139.162.24.167
139.162.24.128
139.162.24.229
139.162.24.174
139.162.24.78
139.162.24.248
139.162.24.225
139.162.24.196
139.162.24.184
139.162.24.76
139.162.24.5
139.162.24.237
139.162.24.106
139.162.24.245
139.162.24.111
139.162.24.127
139.162.24.222
139.162.24.49
139.162.24.166
139.162.24.42
139.162.24.12
139.162.24.58
139.162.24.165
139.162.24.195
139.162.24.131
139.162.24.19
139.162.24.72
139.162.24.172
139.162.24.254
139.162.24.3
139.162.24.15
139.162.24.158
139.162.24.252
139.162.24.212
139.162.24.64
139.162.24.67
139.162.24.80
139.162.24.115
139.162.24.176
139.162.24.203
139.162.24.9
139.162.24.28
139.162.24.77
139.162.24.68
139.162.24.182
139.162.24.164
139.162.24.246
139.162.24.137
139.162.24.135
139.162.24.38
139.162.24.207
139.162.24.156
139.162.24.59
139.162.24.91
139.162.24.142
139.162.24.33
139.162.24.234
139.162.24.45
139.162.24.51
139.162.24.29
139.162.24.132
139.162.24.102
139.162.24.149
139.162.24.198
139.162.24.183
139.162.24.71
139.162.24.160
139.162.24.134
139.162.24.69
139.162.24.215
139.162.24.97
139.162.24.213
139.162.24.37
139.162.24.31
139.162.24.44
139.162.24.242
139.162.24.103
139.162.24.217
139.162.24.74
139.162.24.83
139.162.24.88
139.162.24.170
139.162.24.93
139.162.24.79
139.162.24.121
139.162.24.155
139.162.24.144
139.162.24.7
139.162.24.120
139.162.24.62
139.162.24.18
139.162.24.202
139.162.24.244
139.162.24.75
139.162.24.27
139.162.24.8
139.162.24.204
139.162.24.130
139.162.24.168
139.162.24.104
139.162.24.249
139.162.24.57
139.162.24.133
139.162.24.146
139.162.24.34
139.162.24.20
139.162.24.84
139.162.24.216
139.162.24.4
139.162.24.118
139.162.24.16
139.162.24.141
139.162.24.26
139.162.24.235
139.162.24.22
139.162.24.50
139.162.24.178
139.162.24.139
139.162.24.136
139.162.24.152
139.162.24.177
139.162.24.60
139.162.24.190
139.162.24.95
139.162.24.251
139.162.24.243
139.162.24.47
139.162.24.199
139.162.24.2
139.162.24.117
139.162.24.6
139.162.24.253
139.162.24.96
139.162.24.241
139.162.24.210
139.162.24.180
139.162.24.192
139.162.24.205
139.162.24.82
139.162.24.81
139.162.24.143
139.162.24.86
139.162.24.66
139.162.24.36
139.162.24.250
139.162.24.194
139.162.24.23
139.162.24.107
139.162.24.228
139.162.24.236
139.162.24.145
139.162.24.73
139.162.24.181
139.162.24.99
139.162.24.87
139.162.24.39
139.162.24.224
139.162.24.25
139.162.24.231
139.162.24.94
139.162.24.218
139.162.24.200
139.162.24.186
139.162.24.157
139.162.24.191
139.162.24.232
139.162.24.197
139.162.24.122
139.162.24.24
139.162.24.112
139.162.24.240
139.162.24.221
139.162.24.43
139.162.24.201
Related comments:
IP Type Details Datetime
154.83.15.91 attackbotsspam 
Sep  3 12:38:36 game-panel sshd[3085]: Failed password for root from 154.83.15.91 port 58352 ssh2
Sep  3 12:42:44 game-panel sshd[3310]: Failed password for root from 154.83.15.91 port 52529 ssh2
Sep  3 12:46:52 game-panel sshd[3481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.15.91
 2020-09-04 02:34:03
69.172.94.25 attack 
Port probing on unauthorized port 445
 2020-09-04 02:20:51
58.153.128.154 attack 
Invalid user pi from 58.153.128.154 port 49997
 2020-09-04 02:06:15
159.65.145.160 attackbotsspam 
php WP PHPmyadamin ABUSE blocked for 12h
 2020-09-04 02:21:27
51.83.98.104 attack 
(sshd) Failed SSH login from 51.83.98.104 (FR/France/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  3 13:13:31 server5 sshd[16572]: Invalid user central from 51.83.98.104
Sep  3 13:13:33 server5 sshd[16572]: Failed password for invalid user central from 51.83.98.104 port 37640 ssh2
Sep  3 13:19:49 server5 sshd[21918]: Invalid user lever from 51.83.98.104
Sep  3 13:19:51 server5 sshd[21918]: Failed password for invalid user lever from 51.83.98.104 port 34006 ssh2
Sep  3 13:24:34 server5 sshd[25843]: Invalid user postgres from 51.83.98.104
 2020-09-04 02:21:41
192.99.10.39 attackbotsspam 
20 attempts against mh-misbehave-ban on leaf
 2020-09-04 02:08:54
193.181.246.208 attackspam 
(sshd) Failed SSH login from 193.181.246.208 (SE/Sweden/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  3 12:27:37 server sshd[10906]: Invalid user tom from 193.181.246.208 port 23408
Sep  3 12:27:39 server sshd[10906]: Failed password for invalid user tom from 193.181.246.208 port 23408 ssh2
Sep  3 12:42:01 server sshd[14727]: Invalid user steam from 193.181.246.208 port 14237
Sep  3 12:42:03 server sshd[14727]: Failed password for invalid user steam from 193.181.246.208 port 14237 ssh2
Sep  3 12:46:07 server sshd[15840]: Invalid user riana from 193.181.246.208 port 11285
 2020-09-04 02:29:48
152.136.141.88 attackspam 
Sep  3 19:23:37 jane sshd[5541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.141.88 
Sep  3 19:23:39 jane sshd[5541]: Failed password for invalid user newtest from 152.136.141.88 port 48520 ssh2
...
 2020-09-04 02:09:59
111.72.194.154 attackbotsspam 
Sep  2 21:23:54 srv01 postfix/smtpd\[25375\]: warning: unknown\[111.72.194.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  2 21:24:05 srv01 postfix/smtpd\[25375\]: warning: unknown\[111.72.194.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  2 21:24:21 srv01 postfix/smtpd\[25375\]: warning: unknown\[111.72.194.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  2 21:24:39 srv01 postfix/smtpd\[25375\]: warning: unknown\[111.72.194.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  2 21:24:51 srv01 postfix/smtpd\[25375\]: warning: unknown\[111.72.194.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
 2020-09-04 02:16:42
112.226.244.11 attackspam 
(sshd) Failed SSH login from 112.226.244.11 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  2 12:42:28 server2 sshd[3717]: Invalid user admin from 112.226.244.11
Sep  2 12:42:29 server2 sshd[3717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.226.244.11 
Sep  2 12:42:30 server2 sshd[3717]: Failed password for invalid user admin from 112.226.244.11 port 35006 ssh2
Sep  2 12:42:34 server2 sshd[3759]: Invalid user admin from 112.226.244.11
Sep  2 12:42:35 server2 sshd[3759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.226.244.11
 2020-09-04 02:26:19
85.45.123.234 attack 
*Port Scan* detected from 85.45.123.234 (IT/Italy/Veneto/Vittorio Veneto/host-85-45-123-234.business.telecomitalia.it). 4 hits in the last 100 seconds
 2020-09-04 02:18:20
58.153.182.219 attackspam 
Sep  2 13:04:55 logopedia-1vcpu-1gb-nyc1-01 sshd[190181]: Failed password for root from 58.153.182.219 port 41348 ssh2
...
 2020-09-04 02:09:23
208.107.65.125 attack 
Brute forcing email accounts
 2020-09-04 02:06:44
108.62.121.180 attack 
[2020-09-03 14:10:59] NOTICE[1194] chan_sip.c: Registration from '"104" ' failed for '108.62.121.180:5094' - Wrong password
[2020-09-03 14:10:59] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-03T14:10:59.614-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="104",SessionID="0x7f2ddc023af8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/108.62.121.180/5094",Challenge="28e7e39a",ReceivedChallenge="28e7e39a",ReceivedHash="8eafc90611c91e013aa4e4be2bf418df"
[2020-09-03 14:10:59] NOTICE[1194] chan_sip.c: Registration from '"104" ' failed for '108.62.121.180:5094' - Wrong password
[2020-09-03 14:10:59] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-03T14:10:59.713-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="104",SessionID="0x7f2ddc00cc78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/108.6
...
 2020-09-04 02:34:23
167.172.56.36 attack 
Attempted WordPress login: "GET /wp-login.php"
 2020-09-04 02:27:38

Recently Reported IPs

139.162.238.169 139.162.24.237 139.162.242.50 139.162.245.165
139.162.243.105 139.162.245.179 139.162.244.130 139.162.245.91
139.162.246.6 139.162.246.29 139.162.246.146 139.162.248.90
139.162.249.76 139.162.249.9 139.162.252.248 139.162.253.131
139.162.251.247 139.162.253.81 139.162.253.205 139.162.255.31