Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Betanzos

Region: Galicia

Country: Spain

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
2.139.185.217 attack
firewall-block, port(s): 445/tcp
2020-09-21 01:24:53
2.139.185.217 attack
firewall-block, port(s): 445/tcp
2020-09-20 17:23:44
2.139.155.90 attackspambots
 TCP (SYN) 2.139.155.90:37352 -> port 23, len 44
2020-08-27 02:14:51
2.139.155.90 attackspambots
2323/tcp 23/tcp...
[2020-08-05/23]7pkt,2pt.(tcp)
2020-08-24 06:40:41
2.139.174.205 attackspam
2020-07-23T10:33:47.011024shield sshd\[10750\]: Invalid user stc from 2.139.174.205 port 53007
2020-07-23T10:33:47.019853shield sshd\[10750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.red-2-139-174.staticip.rima-tde.net
2020-07-23T10:33:48.682281shield sshd\[10750\]: Failed password for invalid user stc from 2.139.174.205 port 53007 ssh2
2020-07-23T10:35:42.228881shield sshd\[10959\]: Invalid user mailman from 2.139.174.205 port 34730
2020-07-23T10:35:42.237257shield sshd\[10959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.red-2-139-174.staticip.rima-tde.net
2020-07-23 18:41:36
2.139.174.205 attackbots
Jul 19 16:57:48 vm1 sshd[15250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.174.205
Jul 19 16:57:50 vm1 sshd[15250]: Failed password for invalid user radicale from 2.139.174.205 port 39494 ssh2
...
2020-07-19 23:26:06
2.139.174.205 attackspam
2020-06-25T06:33:18.606214galaxy.wi.uni-potsdam.de sshd[25659]: Invalid user lu from 2.139.174.205 port 55704
2020-06-25T06:33:18.608072galaxy.wi.uni-potsdam.de sshd[25659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.red-2-139-174.staticip.rima-tde.net
2020-06-25T06:33:18.606214galaxy.wi.uni-potsdam.de sshd[25659]: Invalid user lu from 2.139.174.205 port 55704
2020-06-25T06:33:20.617995galaxy.wi.uni-potsdam.de sshd[25659]: Failed password for invalid user lu from 2.139.174.205 port 55704 ssh2
2020-06-25T06:34:59.656449galaxy.wi.uni-potsdam.de sshd[25867]: Invalid user benoit from 2.139.174.205 port 36155
2020-06-25T06:34:59.658442galaxy.wi.uni-potsdam.de sshd[25867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.red-2-139-174.staticip.rima-tde.net
2020-06-25T06:34:59.656449galaxy.wi.uni-potsdam.de sshd[25867]: Invalid user benoit from 2.139.174.205 port 36155
2020-06-25T06:35:00.870243galaxy.
...
2020-06-25 16:41:51
2.139.174.205 attackbotsspam
2020-06-24T09:50:30.624840xentho-1 sshd[631956]: Invalid user mali from 2.139.174.205 port 33589
2020-06-24T09:50:31.724284xentho-1 sshd[631956]: Failed password for invalid user mali from 2.139.174.205 port 33589 ssh2
2020-06-24T09:52:36.543017xentho-1 sshd[632010]: Invalid user mono from 2.139.174.205 port 44864
2020-06-24T09:52:36.551473xentho-1 sshd[632010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.174.205
2020-06-24T09:52:36.543017xentho-1 sshd[632010]: Invalid user mono from 2.139.174.205 port 44864
2020-06-24T09:52:37.942693xentho-1 sshd[632010]: Failed password for invalid user mono from 2.139.174.205 port 44864 ssh2
2020-06-24T09:54:48.238307xentho-1 sshd[632058]: Invalid user kye from 2.139.174.205 port 56144
2020-06-24T09:54:48.244155xentho-1 sshd[632058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.174.205
2020-06-24T09:54:48.238307xentho-1 sshd[632058]: Invalid user kye f
...
2020-06-24 21:55:04
2.139.174.205 attack
Jun 22 08:20:06 rush sshd[763]: Failed password for root from 2.139.174.205 port 37206 ssh2
Jun 22 08:21:35 rush sshd[797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.174.205
Jun 22 08:21:38 rush sshd[797]: Failed password for invalid user ramses from 2.139.174.205 port 44832 ssh2
...
2020-06-22 16:46:01
2.139.174.205 attack
Jun 20 05:54:38 mout sshd[23038]: Invalid user edo from 2.139.174.205 port 41740
2020-06-20 13:31:52
2.139.174.205 attack
bruteforce detected
2020-05-29 03:10:25
2.139.159.96 attack
Unauthorized connection attempt from IP address 2.139.159.96 on Port 445(SMB)
2020-05-14 04:14:23
2.139.174.205 attackspam
May  4 14:18:07 ip-172-31-62-245 sshd\[7488\]: Invalid user sasha from 2.139.174.205\
May  4 14:18:10 ip-172-31-62-245 sshd\[7488\]: Failed password for invalid user sasha from 2.139.174.205 port 58241 ssh2\
May  4 14:18:38 ip-172-31-62-245 sshd\[7490\]: Invalid user opi from 2.139.174.205\
May  4 14:18:41 ip-172-31-62-245 sshd\[7490\]: Failed password for invalid user opi from 2.139.174.205 port 60313 ssh2\
May  4 14:19:03 ip-172-31-62-245 sshd\[7492\]: Invalid user admin from 2.139.174.205\
2020-05-04 22:25:30
2.139.174.205 attack
Brute force attempt
2020-04-27 08:28:16
2.139.174.205 attack
(sshd) Failed SSH login from 2.139.174.205 (ES/Spain/205.red-2-139-174.staticip.rima-tde.net): 5 in the last 3600 secs
2020-04-20 17:10:41
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.139.1.23
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47462
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.139.1.23.			IN	A

;; AUTHORITY SECTION:
.			214	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051001 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 11 09:26:13 CST 2020
;; MSG SIZE  rcvd: 114
Host info
23.1.139.2.in-addr.arpa domain name pointer 23.red-2-139-1.dynamicip.rima-tde.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
23.1.139.2.in-addr.arpa	name = 23.red-2-139-1.dynamicip.rima-tde.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
125.46.139.88 attackbotsspam
IP 125.46.139.88 attacked honeypot on port: 23 at 9/22/2020 1:40:37 PM
2020-09-24 01:14:32
159.224.54.18 attackbots
Sep 23 10:03:26 vps639187 sshd\[20394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.224.54.18  user=root
Sep 23 10:03:28 vps639187 sshd\[20394\]: Failed password for root from 159.224.54.18 port 59754 ssh2
Sep 23 10:03:29 vps639187 sshd\[20413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.224.54.18  user=root
...
2020-09-24 01:18:35
185.191.171.24 attackspam
diw-Joomla User : try to access forms...
2020-09-24 01:21:53
190.143.125.12 attack
Unauthorized connection attempt from IP address 190.143.125.12 on Port 445(SMB)
2020-09-24 00:57:38
47.49.12.165 attackspam
47.49.12.165 (US/United States/047-049-012-165.biz.spectrum.com), 10 distributed imapd attacks on account [hr@fondationcrevier.ca] in the last 3600 secs
2020-09-24 00:43:28
218.250.75.81 attack
Sep 22 17:01:54 ssh2 sshd[20582]: User root from n218250075081.netvigator.com not allowed because not listed in AllowUsers
Sep 22 17:01:54 ssh2 sshd[20582]: Failed password for invalid user root from 218.250.75.81 port 52579 ssh2
Sep 22 17:01:54 ssh2 sshd[20582]: Connection closed by invalid user root 218.250.75.81 port 52579 [preauth]
...
2020-09-24 00:58:47
110.185.174.154 attackbots
Sep 23 10:39:48 mellenthin postfix/smtpd[17982]: warning: unknown[110.185.174.154]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 23 10:39:55 mellenthin postfix/smtpd[17978]: warning: unknown[110.185.174.154]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-09-24 00:58:34
45.129.33.81 attackbots
scans 8 times in preceeding hours on the ports (in chronological order) 5977 5892 5817 5935 5961 5973 5971 5987 resulting in total of 174 scans from 45.129.33.0/24 block.
2020-09-24 01:13:41
188.246.226.71 attackbots
scans 2 times in preceeding hours on the ports (in chronological order) 29474 44306
2020-09-24 01:00:30
49.235.151.50 attackspam
SSH brute force
2020-09-24 01:24:26
201.184.136.122 attack
Failed password for root from 201.184.136.122 port 33590
2020-09-24 01:15:00
200.73.131.100 attackbotsspam
Sep 23 18:27:03 dev0-dcde-rnet sshd[16643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.73.131.100
Sep 23 18:27:05 dev0-dcde-rnet sshd[16643]: Failed password for invalid user smart from 200.73.131.100 port 55428 ssh2
Sep 23 18:36:22 dev0-dcde-rnet sshd[16717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.73.131.100
2020-09-24 01:25:07
115.204.25.140 attack
SSH Brute Force
2020-09-24 01:13:16
83.255.209.56 attackspambots
Sep 22 17:01:47 ssh2 sshd[20518]: User root from c83-255-209-56.bredband.comhem.se not allowed because not listed in AllowUsers
Sep 22 17:01:47 ssh2 sshd[20518]: Failed password for invalid user root from 83.255.209.56 port 42711 ssh2
Sep 22 17:01:47 ssh2 sshd[20518]: Connection closed by invalid user root 83.255.209.56 port 42711 [preauth]
...
2020-09-24 01:20:57
142.93.62.231 attack
2020-09-22 UTC: (2x) - chart(2x)
2020-09-24 01:07:59

Recently Reported IPs

102.158.7.238 61.94.149.39 217.163.30.51 141.98.81.208
185.182.180.140 148.244.249.66 173.201.196.202 109.66.182.65
113.213.182.196 197.239.94.57 87.106.153.177 213.176.34.173
140.143.145.55 186.90.204.4 217.165.22.147 189.94.67.51
112.73.0.146 91.211.188.60 148.229.139.66 152.10.176.224