Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 171.244.39.139:
This IP address has been reported a total of
469
times from
278 distinct
sources.
171.244.39.139 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 105
reports;
United States of America
with 101
reports;
France
with 61
reports.
The most common categories in these recent reports were:
Brute-Force
447
times;
SSH
422
times;
Hacking
10
times;
Port Scan
9
times;
Email Spam
5
times;
Other
10
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Sep 10 10:01:58 obsidian sshd[762215]: Invalid user git from 171.244.39.139 port 48090
Sep 10 10:03: ...
show moreSep 10 10:01:58 obsidian sshd[762215]: Invalid user git from 171.244.39.139 port 48090
Sep 10 10:03:40 obsidian sshd[763969]: Invalid user git from 171.244.39.139 port 40504
Sep 10 10:07:22 obsidian sshd[767754]: Invalid user git from 171.244.39.139 port 52494
...
show less
used brute-forced credential git/1111111 via Go SSH client. Initial foothold achieved; executed syst ...
show moreused brute-forced credential git/1111111 via Go SSH client. Initial foothold achieved; executed system recon (uname -a) followed by malware deployment. Primary payload: curl-based download from hxxp://154[.]70[.]152[.]216/zed piped to perl interpreter with output redirection to /dev/null, executed in background via nohup with 60-second timeout. Attack pattern indicates automated scanning and exploitation targeting Git service access. Perl execution suggests script-based malware or payload staging. Background execution with timeout constraints typical of worm/botnet propagation behavior. External command infrastructure at 154.70.152.216 likely serves malicious scripts or binaries. Single session, rapid exploitation timeline (5 minutes), suggests scripted attack from automated scanner. No persistence mechanisms observed beyond initial payload execution, though perl script execution may have installed additional components not captured in command logging.
show less
Sep 10 06:56:29 proxy-03 sshd[2894098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreSep 10 06:56:29 proxy-03 sshd[2894098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.39.139
Sep 10 06:56:30 proxy-03 sshd[2894098]: Failed password for invalid user git from 171.244.39.139 port 55280 ssh2
Sep 10 07:01:02 proxy-03 sshd[2901041]: Invalid user git from 171.244.39.139 port 33176
Sep 10 07:01:02 proxy-03 sshd[2901041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.39.139
Sep 10 07:01:04 proxy-03 sshd[2901041]: Failed password for invalid user git from 171.244.39.139 port 33176 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-09-10T11:00:38.652307+02:00 PRACSNew sshd-session[3025103]: pam_unix(sshd:auth): authentication ...
show more2026-09-10T11:00:38.652307+02:00 PRACSNew sshd-session[3025103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.39.139
2026-09-10T11:00:40.795323+02:00 PRACSNew sshd-session[3025103]: Failed password for invalid user nagios from 171.244.39.139 port 57106 ssh2
2026-09-10T11:59:51.529152+02:00 PRACSNew sshd-session[3072327]: Invalid user git from 171.244.39.139 port 36774
...
show less
Sep 10 09:56:35 instance-20221219-1303 sshd[747976]: Invalid user git from 171.244.39.139 port 36240 ...
show moreSep 10 09:56:35 instance-20221219-1303 sshd[747976]: Invalid user git from 171.244.39.139 port 36240
...
show less
Sep 10 09:11:33 msk-1-vm-2sd9 sshd[310620]: Failed password for invalid user user from 171.244.39.13 ...
show moreSep 10 09:11:33 msk-1-vm-2sd9 sshd[310620]: Failed password for invalid user user from 171.244.39.139 port 43036 ssh2
Sep 10 09:17:31 msk-1-vm-2sd9 sshd[310777]: Invalid user ftp from 171.244.39.139 port 42244
Sep 10 09:17:31 msk-1-vm-2sd9 sshd[310777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.39.139
Sep 10 09:17:33 msk-1-vm-2sd9 sshd[310777]: Failed password for invalid user ftp from 171.244.39.139 port 42244 ssh2
Sep 10 09:56:15 msk-1-vm-2sd9 sshd[311857]: Invalid user git from 171.244.39.139 port 33728
...
show less
Detected multiple authentication failures and invalid user attempts from IP address 171.244.39.139 o ...
show moreDetected multiple authentication failures and invalid user attempts from IP address 171.244.39.139 on [PT] SP01 Node
show less
2026-09-10T11:04:19.415993+02:00 fangorn sshd[3588227]: pam_unix(sshd:auth): authentication failure; ...
show more2026-09-10T11:04:19.415993+02:00 fangorn sshd[3588227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.39.139
2026-09-10T11:04:21.182833+02:00 fangorn sshd[3588227]: Failed password for invalid user nagios from 171.244.39.139 port 44556 ssh2
2026-09-10T11:43:30.757556+02:00 fangorn sshd[3593169]: Invalid user git from 171.244.39.139 port 49594
...
show less
Brute-Force
SSH
Anonymous
(sshd) Failed SSH login from 171.244.39.139 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: *; Direc ...
show more(sshd) Failed SSH login from 171.244.39.139 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 10 05:18:34 server5 sshd[22462]: Failed password for ftp from 171.244.39.139 port 36530 ssh2
Sep 10 05:39:08 server5 sshd[11691]: Invalid user git from 171.244.39.139
Sep 10 05:39:10 server5 sshd[11691]: Failed password for invalid user git from 171.244.39.139 port 46566 ssh2
Sep 10 05:41:59 server5 sshd[14871]: Invalid user git from 171.244.39.139
Sep 10 05:42:01 server5 sshd[14871]: Failed password for invalid user git from 171.244.39.139 port 52624 ssh2
show less
