This IP address has been reported a total of
23
times from
20 distinct
sources.
139.129.20.17 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
139.129.20.17 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ...
show more139.129.20.17 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 6s. Total bytes sent by tarpit: 462B. Report generated by Endlessh Report Generator v1.2.3
show less
2026-06-16T01:00:22.496520+03:30 digitalogic sshd-session[2188054]: Failed password for root from 13 ...
show more2026-06-16T01:00:22.496520+03:30 digitalogic sshd-session[2188054]: Failed password for root from 139.129.20.17 port 37798 ssh2
2026-06-16T01:00:25.623618+03:30 digitalogic sshd-session[2188054]: Failed password for root from 139.129.20.17 port 37798 ssh2
2026-06-16T01:00:29.072873+03:30 digitalogic sshd-session[2188054]: Failed password for root from 139.129.20.17 port 37798 ssh2
...
show less
139.129.20.17 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ...
show more139.129.20.17 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 6s. Total bytes sent by tarpit: 462B. Report generated by Endlessh Report Generator v1.2.3
show less
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show moreVerified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=6379 | HITS=2 | IPSET=ADD | FIRST=2026-06-12 11:09:57 | LAST=2026-06-12 11:09:57. Last seen 2026-06-12 11:09:57.
show less
Jun 9 10:43:30 gen sshd[1874562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreJun 9 10:43:30 gen sshd[1874562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.129.20.17 user=root
Jun 9 10:43:33 gen sshd[1874562]: Failed password for root from 139.129.20.17 port 45992 ssh2
Jun 9 10:43:38 gen sshd[1874561]: Failed password for root from 139.129.20.17 port 44122 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-06-09T08:44:34.656597+02:00 vm986549.cloud.nuxt.network sshd-session[57951]: Failed password fo ...
show more2026-06-09T08:44:34.656597+02:00 vm986549.cloud.nuxt.network sshd-session[57951]: Failed password for root from 139.129.20.17 port 56892 ssh2
2026-06-09T08:44:37.976840+02:00 vm986549.cloud.nuxt.network sshd-session[57951]: Failed password for root from 139.129.20.17 port 56892 ssh2
2026-06-09T08:44:40.625537+02:00 vm986549.cloud.nuxt.network sshd-session[57951]: Failed password for root from 139.129.20.17 port 56892 ssh2
...
show less
Blocked by UFW (TCP on 6379)
Source port: 55384
TTL: 111
Packet length: 40
TOS: 0x00
This report (f ...
show moreBlocked by UFW (TCP on 6379)
Source port: 55384
TTL: 111
Packet length: 40
TOS: 0x00
This report (for 139.129.20.17) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 2222)
Source port: 54834
TTL: 109
Packet length: 40
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 2222)
Source port: 54834
TTL: 109
Packet length: 40
TOS: 0x08
This report (for 139.129.20.17) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Showing 1 to
15
of 23 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩