184.105.139.80

Basic Info

City: Fremont

Region: California

Country: United States

Internet Service Provider: Hurricane Electric LLC

Hostname: unknown

Organization: Hurricane Electric LLC

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	TCP (SYN) 184.105.139.80:35425 -> port 7547, len 44	2020-08-31 17:57:38
attack	Hit honeypot r.	2020-06-12 12:00:38
attack	Port scan denied	2020-06-08 14:48:37
attackbotsspam	srv03 Mass scanning activity detected Target: 123(ntp) ..	2020-04-21 16:51:50
attackspambots	Honeypot hit.	2020-04-09 19:37:07
attack	scan z	2020-03-27 20:03:54
attackbots	Feb 20 17:22:44 debian-2gb-nbg1-2 kernel: \[4474974.813845\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=184.105.139.80 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=43213 DPT=9200 WINDOW=65535 RES=0x00 SYN URGP=0	2020-02-21 05:14:18
attackspambots	389/tcp 873/tcp 8080/tcp... [2019-10-17/12-12]21pkt,9pt.(tcp),1pt.(udp)	2019-12-12 23:25:17
attack	5555/tcp 23/tcp 9200/tcp... [2019-09-05/11-03]32pkt,13pt.(tcp),1pt.(udp)	2019-11-03 13:22:06
attack	scan r	2019-10-11 16:08:50
attackbotsspam	Honeypot hit.	2019-09-04 12:59:21
attackbots	Scanning random ports - tries to find possible vulnerable services	2019-09-01 15:58:46
attackbotsspam	Honeypot hit.	2019-08-21 14:23:18

Comments on same subnet:

IP	Type	Details	Datetime
184.105.139.105	attackproxy	Compromised IP	2024-05-09 23:09:39
184.105.139.109	attackproxy	Vulnerability Scanner	2024-04-30 12:59:43
184.105.139.70	attack	Vulnerability Scanner	2024-04-20 00:30:49
184.105.139.90	botsattackproxy	Ddos bot	2024-04-20 00:26:45
184.105.139.68	attack	Vulnerability Scanner	2024-04-10 01:16:38
184.105.139.69	proxy	VPN fraud	2023-05-15 19:23:33
184.105.139.120	proxy	VPN fraud	2023-05-10 13:17:43
184.105.139.103	proxy	VPN fraud	2023-03-20 14:02:25
184.105.139.99	proxy	VPN fraud	2023-03-20 13:57:09
184.105.139.74	proxy	VPN	2023-01-30 14:03:54
184.105.139.86	proxy	VPN	2023-01-19 13:51:12
184.105.139.124	attackproxy	VPN	2022-12-29 20:40:24
184.105.139.124	attack	VPN	2022-12-29 20:40:21
184.105.139.126	proxy	Attack VPN	2022-12-09 13:59:02
184.105.139.70	attackbotsspam	TCP (SYN) 184.105.139.70:51140 -> port 5900, len 40	2020-10-14 04:24:47

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 184.105.139.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11734
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;184.105.139.80.			IN	A

;; AUTHORITY SECTION:
.			3575	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019033001 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Mar 31 11:10:24 +08 2019
;; MSG SIZE  rcvd: 118

Host info

80.139.105.184.in-addr.arpa is an alias for 80.64-26.139.105.184.in-addr.arpa.
80.64-26.139.105.184.in-addr.arpa domain name pointer scan-02c.shadowserver.org.

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
80.139.105.184.in-addr.arpa	canonical name = 80.64-26.139.105.184.in-addr.arpa.
80.64-26.139.105.184.in-addr.arpa	name = scan-02c.shadowserver.org.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
82.102.173.94	attackbotsspam	firewall-block, port(s): 21022/tcp	2020-02-05 06:56:44
112.30.133.241	attackbots	Feb 4 22:40:00 lnxded64 sshd[12467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.30.133.241	2020-02-05 06:51:07
106.13.122.102	attackbotsspam	Feb 4 17:42:01 plusreed sshd[27922]: Invalid user nadya from 106.13.122.102 ...	2020-02-05 06:51:34
101.89.197.232	attackspambots	SASL PLAIN auth failed: ruser=...	2020-02-05 07:14:23
138.122.146.162	attackspam	Unauthorized connection attempt detected from IP address 138.122.146.162 to port 2220 [J]	2020-02-05 07:15:21
51.38.185.121	attack	Feb 4 17:38:27 plusreed sshd[26810]: Invalid user lend from 51.38.185.121 ...	2020-02-05 06:43:44
183.177.51.48	attack	Feb 5 05:55:57 webhost01 sshd[12900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.177.51.48 Feb 5 05:55:59 webhost01 sshd[12900]: Failed password for invalid user vvk from 183.177.51.48 port 48774 ssh2 ...	2020-02-05 07:13:53
107.170.244.110	attackspambots	Feb 4 19:20:07 vps46666688 sshd[27080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.244.110 Feb 4 19:20:08 vps46666688 sshd[27080]: Failed password for invalid user testtest from 107.170.244.110 port 38666 ssh2 ...	2020-02-05 06:35:41
141.255.45.213	attackbots	Feb 4 21:18:20 grey postfix/smtpd\[25106\]: NOQUEUE: reject: RCPT from ppp141255045213.access.hol.gr\[141.255.45.213\]: 554 5.7.1 Service unavailable\; Client host \[141.255.45.213\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?141.255.45.213\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-05 07:11:53
42.58.90.88	attackbots	Unauthorized connection attempt detected from IP address 42.58.90.88 to port 23 [J]	2020-02-05 07:12:25
178.128.30.243	attackspam	Feb 4 23:37:04 dedicated sshd[6675]: Invalid user postgres from 178.128.30.243 port 49750	2020-02-05 06:55:07
60.249.21.132	attackspam	Feb 4 23:40:46 silence02 sshd[509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.249.21.132 Feb 4 23:40:47 silence02 sshd[509]: Failed password for invalid user shree from 60.249.21.132 port 47874 ssh2 Feb 4 23:43:59 silence02 sshd[743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.249.21.132	2020-02-05 06:49:42
132.145.196.193	attackbots	Unauthorized connection attempt detected from IP address 132.145.196.193 to port 2220 [J]	2020-02-05 06:52:14
161.189.83.105	attack	Feb 4 23:20:14 pornomens sshd\[1599\]: Invalid user ts3 from 161.189.83.105 port 54717 Feb 4 23:20:14 pornomens sshd\[1599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.189.83.105 Feb 4 23:20:16 pornomens sshd\[1599\]: Failed password for invalid user ts3 from 161.189.83.105 port 54717 ssh2 ...	2020-02-05 07:11:31
123.25.11.113	attack	Honeypot attack, port: 445, PTR: static.vnpt-hanoi.com.vn.	2020-02-05 06:46:06

Recently Reported IPs

79.9.27.174	79.41.201.109	46.101.230.131	211.181.72.238
117.156.94.32	115.238.245.8	79.137.35.70	59.93.115.42
212.96.44.113	159.65.9.28	106.13.69.15	157.230.218.21
68.183.148.78	13.114.26.103	223.171.46.146	103.27.239.160
73.78.107.125	34.225.242.190	185.176.26.100	178.128.162.10