JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2.139.53.86

Recent Activity

Abuse Confidence Score

4% Caution

304 reports

114 reporters · latest 4 hours ago

ISP: TELEFONICA DE ESPANA S.A.U.
Usage Type: Fixed Line ISP
ASN: AS3352
Hostname(s): 86.red-2-139-53.dynamicip.rima-tde.net
Domain Name: movistar.es
Country: 🇪🇸 Spain
City: Madrid, Madrid

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

304 from 114 distinct reporters

First reported

January 23rd 2023

Most recent report

4 hours ago

Last 60 days

Top reporter locations 🇷🇺 Russian Federation 1

Most common categories Bad Web Bot 1 Web App Attack 1 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-07 15:15:03 UTC · (4 hours ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Attack Signature Blocked: /catalog/product_compare/add/product/10938/uenc/aHR0cHM6Ly93d3cuZDJvZmZpY2UucnUvYnJhbmRzL25lYy9zaG9wYnkvcHJvamVjdG9yX2NsYXNzLXBvcnRhdGl2bnlqLXVsX3RyYWtvcm90a29mb2t1c255ZS9wcm9qZWN0b3JfbHVtZW4tMjgwMC9wcm9qZWN0b3JfcmVzb2x1dGlvbi0xMjgwX3hfODAwLTE5MjBfeF8xMjAwLmh0bWw_ZGlyPWFzYyZhbXA7bW9kZT1saXN0JmFtcDtvcmRlcj1tb3N0X3ZpZXdlZA,,/form_key/McYXi7o4dXHaom3g/ \| UA: Mozilla/5.0 (iPod; U; CPU iPhone OS 3_3 like Mac OS X; hy-AM) AppleWebKit/531.24.7 (KHTML, like Gecko) Version/3.0.5 Mobile/8B111 Safari/6531.24.7 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇩🇪 ManagedStack	2023-02-13 18:59:34 UTC · (3 years ago)	Unauthorized path/IP Access (full log not revealed as it contains sensitive data)	Hacking Web App Attack
🇨🇳 ThreatBook.io	2023-01-27 22:52:42 UTC · (3 years ago)	ThreatBook Intelligence: Brute Force,Dynamic IP more details on https://threatbook.io/ip/2.139.53.86	SSH
🇩🇪 ipcop.net	2023-01-27 08:26:43 UTC · (3 years ago)	Jan 27 09:17:15 router01.feuchter-stiftung.de sshd[3316877]: Disconnected from authenticating user root 2.139.53.86 port 56395 [preauth] Jan 27 09:21:45 router01.feuchter-stiftung.de sshd[3317407]: Disconnected from authenticating user root 2.139.53. ... show more Jan 27 09:17:15 router01.feuchter-stiftung.de sshd[3316877]: Disconnected from authenticating user root 2.139.53.86 port 56395 [preauth] Jan 27 09:21:45 router01.feuchter-stiftung.de sshd[3317407]: Disconnected from authenticating user root 2.139.53.86 port 57788 [preauth] Jan 27 09:23:27 router01.feuchter-stiftung.de sshd[3317639]: Disconnected from authenticating user root 2.139.53.86 port 47659 [preauth] Jan 27 09:25:05 router01.feuchter-stiftung.de sshd[3317861]: Disconnected from authenticating user root 2.139.53.86 port 37533 [preauth] Jan 27 09:26:41 router01.feuchter-stiftung.de sshd[3318008]: Disconnected from authenticating user root 2.139.53.86 port 55636 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2023-01-27 08:26:43 UTC · (3 years ago)	Jan 27 09:17:15 router01.feuchter-stiftung.de sshd[3316877]: Disconnected from authenticating user root 2.139.53.86 port 56395 [preauth] Jan 27 09:21:45 router01.feuchter-stiftung.de sshd[3317407]: Disconnected from authenticating user root 2.139.53. ... show more Jan 27 09:17:15 router01.feuchter-stiftung.de sshd[3316877]: Disconnected from authenticating user root 2.139.53.86 port 56395 [preauth] Jan 27 09:21:45 router01.feuchter-stiftung.de sshd[3317407]: Disconnected from authenticating user root 2.139.53.86 port 57788 [preauth] Jan 27 09:23:27 router01.feuchter-stiftung.de sshd[3317639]: Disconnected from authenticating user root 2.139.53.86 port 47659 [preauth] Jan 27 09:25:05 router01.feuchter-stiftung.de sshd[3317861]: Disconnected from authenticating user root 2.139.53.86 port 37533 [preauth] Jan 27 09:26:41 router01.feuchter-stiftung.de sshd[3318008]: Disconnected from authenticating user root 2.139.53.86 port 55636 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2023-01-27 08:26:43 UTC · (3 years ago)	Jan 27 09:17:15 router01.feuchter-stiftung.de sshd[3316877]: Disconnected from authenticating user root 2.139.53.86 port 56395 [preauth] Jan 27 09:21:45 router01.feuchter-stiftung.de sshd[3317407]: Disconnected from authenticating user root 2.139.53. ... show more Jan 27 09:17:15 router01.feuchter-stiftung.de sshd[3316877]: Disconnected from authenticating user root 2.139.53.86 port 56395 [preauth] Jan 27 09:21:45 router01.feuchter-stiftung.de sshd[3317407]: Disconnected from authenticating user root 2.139.53.86 port 57788 [preauth] Jan 27 09:23:27 router01.feuchter-stiftung.de sshd[3317639]: Disconnected from authenticating user root 2.139.53.86 port 47659 [preauth] Jan 27 09:25:05 router01.feuchter-stiftung.de sshd[3317861]: Disconnected from authenticating user root 2.139.53.86 port 37533 [preauth] Jan 27 09:26:41 router01.feuchter-stiftung.de sshd[3318008]: Disconnected from authenticating user root 2.139.53.86 port 55636 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2023-01-27 08:26:43 UTC · (3 years ago)	Jan 27 09:17:15 router01.feuchter-stiftung.de sshd[3316877]: Disconnected from authenticating user root 2.139.53.86 port 56395 [preauth] Jan 27 09:21:45 router01.feuchter-stiftung.de sshd[3317407]: Disconnected from authenticating user root 2.139.53. ... show more Jan 27 09:17:15 router01.feuchter-stiftung.de sshd[3316877]: Disconnected from authenticating user root 2.139.53.86 port 56395 [preauth] Jan 27 09:21:45 router01.feuchter-stiftung.de sshd[3317407]: Disconnected from authenticating user root 2.139.53.86 port 57788 [preauth] Jan 27 09:23:27 router01.feuchter-stiftung.de sshd[3317639]: Disconnected from authenticating user root 2.139.53.86 port 47659 [preauth] Jan 27 09:25:05 router01.feuchter-stiftung.de sshd[3317861]: Disconnected from authenticating user root 2.139.53.86 port 37533 [preauth] Jan 27 09:26:41 router01.feuchter-stiftung.de sshd[3318008]: Disconnected from authenticating user root 2.139.53.86 port 55636 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2023-01-27 08:26:43 UTC · (3 years ago)	Jan 27 09:17:15 router01.feuchter-stiftung.de sshd[3316877]: Disconnected from authenticating user root 2.139.53.86 port 56395 [preauth] Jan 27 09:21:45 router01.feuchter-stiftung.de sshd[3317407]: Disconnected from authenticating user root 2.139.53. ... show more Jan 27 09:17:15 router01.feuchter-stiftung.de sshd[3316877]: Disconnected from authenticating user root 2.139.53.86 port 56395 [preauth] Jan 27 09:21:45 router01.feuchter-stiftung.de sshd[3317407]: Disconnected from authenticating user root 2.139.53.86 port 57788 [preauth] Jan 27 09:23:27 router01.feuchter-stiftung.de sshd[3317639]: Disconnected from authenticating user root 2.139.53.86 port 47659 [preauth] Jan 27 09:25:05 router01.feuchter-stiftung.de sshd[3317861]: Disconnected from authenticating user root 2.139.53.86 port 37533 [preauth] Jan 27 09:26:41 router01.feuchter-stiftung.de sshd[3318008]: Disconnected from authenticating user root 2.139.53.86 port 55636 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2023-01-27 08:26:43 UTC · (3 years ago)	Jan 27 09:17:15 router01.feuchter-stiftung.de sshd[3316877]: Disconnected from authenticating user root 2.139.53.86 port 56395 [preauth] Jan 27 09:21:45 router01.feuchter-stiftung.de sshd[3317407]: Disconnected from authenticating user root 2.139.53. ... show more Jan 27 09:17:15 router01.feuchter-stiftung.de sshd[3316877]: Disconnected from authenticating user root 2.139.53.86 port 56395 [preauth] Jan 27 09:21:45 router01.feuchter-stiftung.de sshd[3317407]: Disconnected from authenticating user root 2.139.53.86 port 57788 [preauth] Jan 27 09:23:27 router01.feuchter-stiftung.de sshd[3317639]: Disconnected from authenticating user root 2.139.53.86 port 47659 [preauth] Jan 27 09:25:05 router01.feuchter-stiftung.de sshd[3317861]: Disconnected from authenticating user root 2.139.53.86 port 37533 [preauth] Jan 27 09:26:41 router01.feuchter-stiftung.de sshd[3318008]: Disconnected from authenticating user root 2.139.53.86 port 55636 [preauth] show less	Brute-Force
🇺🇸 filip2cz	2023-01-27 08:24:05 UTC · (3 years ago)	Jan 27 09:22:25 status sshd[287075]: Failed password for root from 2.139.53.86 port 50620 ssh2 Jan 27 09:24:03 status sshd[289166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.53.86 user=root Jan 27 ... show more Jan 27 09:22:25 status sshd[287075]: Failed password for root from 2.139.53.86 port 50620 ssh2 Jan 27 09:24:03 status sshd[289166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.53.86 user=root Jan 27 09:24:04 status sshd[289166]: Failed password for root from 2.139.53.86 port 40491 ssh2 ... show less	Brute-Force SSH
🇺🇸 mhhdr	2023-01-27 08:21:50 UTC · (3 years ago)	SSH Brute-force. Last login: root.	Brute-Force SSH
🇺🇸 bigscoots.com	2023-01-27 07:26:48 UTC · (3 years ago)	2.139.53.86 (86.red-2-139-53.dynamicip.rima-tde.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 27 01:26:45 16440 sshd[5844]: pam_unix(sshd:auth): authentication fail ... show more 2.139.53.86 (86.red-2-139-53.dynamicip.rima-tde.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 27 01:26:45 16440 sshd[5844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.144.26.60 user=root Jan 27 01:25:36 16440 sshd[5776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.53.86 user=root Jan 27 01:25:39 16440 sshd[5776]: Failed password for root from 2.139.53.86 port 60550 ssh2 Jan 27 01:25:44 16440 sshd[5778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.12.114.231 user=root Jan 27 01:25:45 16440 sshd[5778]: Failed password for root from 198.12.114.231 port 40230 ssh2 IP Addresses Blocked: 139.144.26.60 (US/United States/139-144-26-60.ip.linodeusercontent.com) show less	Brute-Force SSH
🇩🇪 www.blocklist.de	2023-01-27 07:06:44 UTC · (3 years ago)	Lines containing failures of 2.139.53.86 (max 1000) Jan 23 08:57:43 neweola sshd[3803]: AD user kafka from 2.139.53.86 port 37700 Jan 23 08:57:43 neweola sshd[3803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh ... show more Lines containing failures of 2.139.53.86 (max 1000) Jan 23 08:57:43 neweola sshd[3803]: AD user kafka from 2.139.53.86 port 37700 Jan 23 08:57:43 neweola sshd[3803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.53.86 Jan 23 08:57:45 neweola sshd[3803]: Failed password for AD user kafka from 2.139.53.86 port 37700 ssh2 Jan 23 08:57:45 neweola sshd[3803]: Received disconnect from 2.139.53.86 port 37700:11: Bye Bye [preauth] Jan 23 08:57:45 neweola sshd[3803]: Disconnected from AD user kafka 2.139.53.86 port 37700 [preauth] Jan 23 08:59:39 neweola sshd[3968]: AD user adminixxxr from 2.139.53.86 port 52916 Jan 23 08:59:39 neweola sshd[3968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.53.86 Jan 23 08:59:41 neweola sshd[3968]: Failed password for AD user adminixxxr from 2.139.53.86 port 52916 ssh2 Jan 23 08:59:43 neweola sshd[3968]: Received disconnect from 2.139.53.86 port 52........ ------------------------------ show less	FTP Brute-Force Hacking
🇺🇸 bigscoots.com	2023-01-27 06:23:34 UTC · (3 years ago)	2.139.53.86 (86.red-2-139-53.dynamicip.rima-tde.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 27 00:23:30 14612 sshd[24487]: pam_unix(sshd:auth): authentication fai ... show more 2.139.53.86 (86.red-2-139-53.dynamicip.rima-tde.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 27 00:23:30 14612 sshd[24487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.48.205.81 user=root Jan 27 00:22:41 14612 sshd[24400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.109.124 user=root Jan 27 00:22:44 14612 sshd[24400]: Failed password for root from 178.128.109.124 port 34132 ssh2 Jan 27 00:21:01 14612 sshd[24101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.53.86 user=root Jan 27 00:21:04 14612 sshd[24101]: Failed password for root from 2.139.53.86 port 39530 ssh2 IP Addresses Blocked: 111.48.205.81 (CN/China/-) 178.128.109.124 (SG/Singapore/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-01-27 05:31:49 UTC · (3 years ago)	2.139.53.86 (86.red-2-139-53.dynamicip.rima-tde.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 27 05:31:35 24073 sshd[20411]: pam_unix(sshd:auth): authentication fai ... show more 2.139.53.86 (86.red-2-139-53.dynamicip.rima-tde.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 27 05:31:35 24073 sshd[20411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.231.34 user=root Jan 27 05:31:24 24073 sshd[20408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.53.86 user=root Jan 27 05:31:26 24073 sshd[20408]: Failed password for root from 2.139.53.86 port 34905 ssh2 Jan 27 05:30:20 24073 sshd[20361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.68.61.105 user=root Jan 27 05:30:23 24073 sshd[20361]: Failed password for root from 103.68.61.105 port 60704 ssh2 IP Addresses Blocked: 165.154.231.34 (JP/Japan/-) show less	Brute-Force SSH

Showing 1 to 15 of 304 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 147.185.132.195

🇮🇳 122.160.137.230

🇧🇩 118.179.20.189

🇳🇱 109.160.32.124

🇨🇦 104.194.37.176

🇺🇸 70.167.235.132

🇺🇸 70.166.140.36

🇺🇸 50.6.207.102

🇨🇳 36.106.166.134

🇺🇸 20.12.41.6

🇺🇸 172.59.80.89

🇨🇦 85.217.149.22

🇦🇪 5.192.75.8

🇺🇸 216.131.107.186

🇪🇸 212.97.173.118

🇸🇪 193.235.141.21

🇨🇳 111.15.21.242

🇳🇱 109.160.32.146

🇫🇷 87.88.231.35

🇬🇧 35.203.210.5