103.117.139.55

Basic Info

City: unknown

Region: Tianjin

Country: China

Internet Service Provider: Nahe (Tianjin) Network Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	"INDICATOR-SCAN PHP backdoor scan attempt"	2020-01-22 07:08:09

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.117.139.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18131
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.117.139.55.			IN	A

;; AUTHORITY SECTION:
.			314	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012101 1800 900 604800 86400

;; Query time: 125 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 07:08:06 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 55.139.117.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 55.139.117.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
129.211.74.86	attackbotsspam	Aug 26 13:07:04 XXX sshd[55545]: Invalid user postgres from 129.211.74.86 port 58920	2020-08-27 08:52:44
123.149.23.45	attack	Port scan: Attack repeated for 24 hours	2020-08-27 08:53:57
222.186.175.182	attackspam	Aug 27 02:52:43 pve1 sshd[23026]: Failed password for root from 222.186.175.182 port 45300 ssh2 Aug 27 02:52:46 pve1 sshd[23026]: Failed password for root from 222.186.175.182 port 45300 ssh2 ...	2020-08-27 08:53:31
31.131.69.14	attackbots	[portscan] Port scan	2020-08-27 09:12:06
51.158.171.117	attackbotsspam	2020-08-26T22:44:43.137008shield sshd\[7465\]: Invalid user php from 51.158.171.117 port 45746 2020-08-26T22:44:43.156573shield sshd\[7465\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.171.117 2020-08-26T22:44:45.460052shield sshd\[7465\]: Failed password for invalid user php from 51.158.171.117 port 45746 ssh2 2020-08-26T22:46:08.041275shield sshd\[7592\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.171.117 user=root 2020-08-26T22:46:09.542251shield sshd\[7592\]: Failed password for root from 51.158.171.117 port 41044 ssh2	2020-08-27 09:02:02
212.52.131.9	attackbotsspam	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-26T22:33:09Z and 2020-08-26T22:48:34Z	2020-08-27 08:58:33
62.210.37.82	attackspam	Aug 27 02:52:05 marvibiene sshd[21978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.210.37.82 Aug 27 02:52:07 marvibiene sshd[21978]: Failed password for invalid user admin from 62.210.37.82 port 36217 ssh2	2020-08-27 09:20:05
218.204.17.44	attackbotsspam	Invalid user spencer from 218.204.17.44 port 51955	2020-08-27 08:44:53
223.95.186.74	attackbots	Aug 26 22:42:01 prod4 sshd\[22244\]: Invalid user cacti from 223.95.186.74 Aug 26 22:42:03 prod4 sshd\[22244\]: Failed password for invalid user cacti from 223.95.186.74 port 34744 ssh2 Aug 26 22:48:24 prod4 sshd\[24848\]: Invalid user yac from 223.95.186.74 ...	2020-08-27 09:08:25
118.89.159.234	attackbotsspam	Aug 27 00:54:20 server sshd[2567]: Failed password for root from 118.89.159.234 port 45986 ssh2 Aug 27 00:57:59 server sshd[7298]: Failed password for invalid user oracle from 118.89.159.234 port 37382 ssh2 Aug 27 01:01:41 server sshd[12451]: Failed password for invalid user carla from 118.89.159.234 port 57012 ssh2	2020-08-27 08:54:11
167.172.98.198	attackbotsspam	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-26T22:36:06Z and 2020-08-26T22:42:40Z	2020-08-27 09:14:03
2a02:a03f:3a4e:bb00:9945:113b:ae6:1db4	attackbots	Aug 26 22:48:05 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 3 secs): user=, method=PLAIN, rip=2a02:a03f:3a4e:bb00:9945:113b:ae6:1db4, lip=2a01:7e01:e001:164::, session= Aug 26 22:48:05 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 3 secs): user=, method=PLAIN, rip=2a02:a03f:3a4e:bb00:9945:113b:ae6:1db4, lip=2a01:7e01:e001:164::, session= Aug 26 22:48:12 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=2a02:a03f:3a4e:bb00:9945:113b:ae6:1db4, lip=2a01:7e01:e001:164::, session=<3sUD8M2tFsgqAqA/Ok67AJlFETsK5h20> Aug 26 22:48:14 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=2a02:a03f:3a4e:bb00:9945:113b:ae6:1db4, lip=2a01:7e01:e001:164::, session=	2020-08-27 09:15:14
114.67.80.209	attackspam	Aug 27 01:48:34 prod4 sshd\[30984\]: Invalid user dsa from 114.67.80.209 Aug 27 01:48:35 prod4 sshd\[30984\]: Failed password for invalid user dsa from 114.67.80.209 port 50058 ssh2 Aug 27 01:58:31 prod4 sshd\[1887\]: Invalid user webaccess from 114.67.80.209 ...	2020-08-27 08:55:01
106.13.185.97	attack	SP-Scan 57319:6117 detected 2020.08.26 19:57:08 blocked until 2020.10.15 12:59:55	2020-08-27 09:17:39
107.173.137.144	attack	SSH brute force	2020-08-27 09:03:19

Recently Reported IPs

221.13.12.162	213.195.98.173	213.174.18.134	210.109.97.60
193.164.205.93	69.21.163.213	183.88.234.73	175.6.98.155
159.238.177.11	18.181.53.94	64.83.187.38	99.175.136.231
156.218.4.148	156.213.139.144	181.57.159.86	49.99.142.67
221.209.207.78	188.238.231.169	134.236.150.201	65.98.182.76