Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Nuremberg

Region: Bavaria

Country: Germany

Internet Service Provider: Contabo GmbH

Hostname: unknown

Organization: Contabo GmbH

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Jul 26 17:12:19 aat-srv002 sshd[5412]: Failed password for root from 173.249.39.137 port 48302 ssh2
Jul 26 17:16:39 aat-srv002 sshd[5539]: Failed password for root from 173.249.39.137 port 44106 ssh2
Jul 26 17:20:52 aat-srv002 sshd[5677]: Failed password for root from 173.249.39.137 port 39910 ssh2
...
2019-07-27 06:44:07
attackspam
$f2bV_matches_ltvn
2019-07-27 03:08:21
Comments on same subnet:
IP Type Details Datetime
173.249.39.196 attack
May  3 14:27:49 vps647732 sshd[15558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.39.196
May  3 14:27:51 vps647732 sshd[15558]: Failed password for invalid user wm from 173.249.39.196 port 52256 ssh2
...
2020-05-04 03:03:26
173.249.39.196 attackspam
May  3 05:57:28 vps647732 sshd[26916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.39.196
May  3 05:57:29 vps647732 sshd[26916]: Failed password for invalid user server from 173.249.39.196 port 52072 ssh2
...
2020-05-03 12:01:43
173.249.39.196 attackbotsspam
Apr 13 21:18:57 pve sshd[27883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.39.196 
Apr 13 21:18:59 pve sshd[27883]: Failed password for invalid user ts3server from 173.249.39.196 port 37708 ssh2
Apr 13 21:20:22 pve sshd[29025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.39.196
2020-04-14 03:25:10
173.249.39.196 attackspambots
Mar 16 19:08:34 vm11 sshd[11833]: Did not receive identification string from 173.249.39.196 port 33166
Mar 16 19:10:33 vm11 sshd[11888]: Invalid user a from 173.249.39.196 port 34158
Mar 16 19:10:33 vm11 sshd[11888]: Received disconnect from 173.249.39.196 port 34158:11: Normal Shutdown, Thank you for playing [preauth]
Mar 16 19:10:33 vm11 sshd[11888]: Disconnected from 173.249.39.196 port 34158 [preauth]
Mar 16 19:11:13 vm11 sshd[11890]: Received disconnect from 173.249.39.196 port 35994:11: Normal Shutdown, Thank you for playing [preauth]
Mar 16 19:11:13 vm11 sshd[11890]: Disconnected from 173.249.39.196 port 35994 [preauth]
Mar 16 19:11:55 vm11 sshd[11892]: Received disconnect from 173.249.39.196 port 37826:11: Normal Shutdown, Thank you for playing [preauth]
Mar 16 19:11:55 vm11 sshd[11892]: Disconnected from 173.249.39.196 port 37826 [preauth]
Mar 16 19:12:37 vm11 sshd[11894]: Received disconnect from 173.249.39.196 port 39658:11: Normal Shutdown, Thank you for pla........
-------------------------------
2020-03-17 16:10:35
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 173.249.39.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44218
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;173.249.39.137.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072601 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jul 27 03:07:55 CST 2019
;; MSG SIZE  rcvd: 118
Host info
137.39.249.173.in-addr.arpa domain name pointer vmi284224.contaboserver.net.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
137.39.249.173.in-addr.arpa	name = vmi284224.contaboserver.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
51.158.104.58 attackbots
Nov 15 16:44:35 vpn01 sshd[31659]: Failed password for root from 51.158.104.58 port 44466 ssh2
Nov 15 16:48:10 vpn01 sshd[31720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.104.58
...
2019-11-16 00:32:17
124.163.214.106 attack
Nov 15 06:23:59 sachi sshd\[18686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.163.214.106  user=root
Nov 15 06:24:02 sachi sshd\[18686\]: Failed password for root from 124.163.214.106 port 56607 ssh2
Nov 15 06:29:41 sachi sshd\[19980\]: Invalid user Onni from 124.163.214.106
Nov 15 06:29:41 sachi sshd\[19980\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.163.214.106
Nov 15 06:29:43 sachi sshd\[19980\]: Failed password for invalid user Onni from 124.163.214.106 port 46080 ssh2
2019-11-16 00:40:15
202.111.174.150 attackbotsspam
Port 1433 Scan
2019-11-16 00:28:22
177.89.47.250 attackspambots
Fail2Ban Ban Triggered
2019-11-16 00:16:07
106.75.22.216 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-16 00:40:48
148.70.41.33 attackspam
Automatic report - Banned IP Access
2019-11-16 00:29:37
183.134.199.68 attack
Nov 15 16:47:00 MK-Soft-VM7 sshd[3815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.134.199.68 
Nov 15 16:47:02 MK-Soft-VM7 sshd[3815]: Failed password for invalid user ian from 183.134.199.68 port 33131 ssh2
...
2019-11-16 00:05:38
51.38.236.221 attackspambots
2019-11-15T16:19:54.950142abusebot-4.cloudsearch.cf sshd\[7714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.ip-51-38-236.eu  user=root
2019-11-16 00:20:30
91.149.210.78 attack
Scanning
2019-11-16 00:06:10
88.252.188.212 attack
Automatic report - Port Scan Attack
2019-11-16 00:11:49
84.118.168.95 attackbots
Scanning
2019-11-16 00:18:24
218.92.0.193 attackspam
[Aegis] @ 2019-11-15 14:44:40  0000 -> Multiple SSHD authentication failures.
2019-11-16 00:17:49
94.62.42.46 attack
FTP brute force
...
2019-11-16 00:20:48
209.17.96.138 attack
Automatic report - Banned IP Access
2019-11-16 00:49:47
92.118.37.95 attackbotsspam
11/15/2019-10:54:43.688987 92.118.37.95 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-11-16 00:14:45

Recently Reported IPs

166.60.240.199 191.53.116.41 80.159.100.8 213.210.33.183
225.23.241.221 82.103.122.181 27.69.225.41 14.246.153.186
98.102.244.152 144.201.127.240 162.116.23.182 167.250.64.122
234.198.59.2 125.224.8.84 201.36.225.135 109.126.106.96
193.173.163.58 77.192.217.194 78.170.185.38 200.228.171.43