Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
103.139.212.208 attackbotsspam 
[H1.VM10] Blocked by UFW
 2020-10-01 03:04:53
103.139.212.208 attackspambots 
[H1.VM10] Blocked by UFW
 2020-09-30 19:18:22
103.139.212.205 attackbots 
Found on   Alienvault    / proto=6  .  srcport=4051  .  dstport=8443  .     (3339)
 2020-09-25 07:10:18
103.139.212.213 attackspam 
443
 2020-09-02 05:08:44
103.139.219.20 attackbotsspam 
Sep  1 14:21:28 inter-technics sshd[19038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.219.20  user=ts3
Sep  1 14:21:29 inter-technics sshd[19038]: Failed password for ts3 from 103.139.219.20 port 33042 ssh2
Sep  1 14:29:33 inter-technics sshd[19391]: Invalid user nexus from 103.139.219.20 port 40660
Sep  1 14:29:33 inter-technics sshd[19391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.219.20
Sep  1 14:29:33 inter-technics sshd[19391]: Invalid user nexus from 103.139.219.20 port 40660
Sep  1 14:29:35 inter-technics sshd[19391]: Failed password for invalid user nexus from 103.139.219.20 port 40660 ssh2
...
 2020-09-02 01:17:21
103.139.212.212 attackspambots 
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
 2020-09-01 02:36:38
103.139.212.8 attack 
Attempted connection to port 1433.
 2020-08-27 17:28:54
103.139.212.213 attackspam 
Excessive Port-Scanning
 2020-08-23 12:05:32
103.139.219.20 attack 
$f2bV_matches
 2020-08-19 16:42:30
103.139.208.128 attackbotsspam 
Port Scan
...
 2020-08-18 19:08:36
103.139.219.20 attackbotsspam 
Aug 17 03:58:46 IngegnereFirenze sshd[9061]: Failed password for invalid user administrator from 103.139.219.20 port 40654 ssh2
...
 2020-08-17 14:19:18
103.139.219.20 attackbotsspam 
Bruteforce detected by fail2ban
 2020-08-15 07:26:01
103.139.219.20 attack 
Aug  7 00:56:38 jane sshd[30273]: Failed password for root from 103.139.219.20 port 44166 ssh2
...
 2020-08-07 07:36:11
103.139.219.20 attack 
Aug  4 20:30:57 haigwepa sshd[326]: Failed password for root from 103.139.219.20 port 37648 ssh2
...
 2020-08-05 03:55:00
103.139.219.20 attack 
SSH Brute Force
 2020-08-01 15:39:15
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.139.2.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35589
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.139.2.14.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031100 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 11 16:38:42 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 14.2.139.103.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 14.2.139.103.in-addr.arpa: NXDOMAIN
Related IP info:
103.139.2.59
103.139.2.238
103.139.2.42
103.139.2.136
103.139.2.203
103.139.2.162
103.139.2.120
103.139.2.26
103.139.2.94
103.139.2.28
103.139.2.44
103.139.2.10
103.139.2.79
103.139.2.135
103.139.2.105
103.139.2.57
103.139.2.14
103.139.2.118
103.139.2.217
103.139.2.82
103.139.2.149
103.139.2.75
103.139.2.233
103.139.2.237
103.139.2.47
103.139.2.112
103.139.2.12
103.139.2.71
103.139.2.244
103.139.2.88
103.139.2.205
103.139.2.174
103.139.2.130
103.139.2.204
103.139.2.206
103.139.2.125
103.139.2.111
103.139.2.214
103.139.2.99
103.139.2.153
103.139.2.140
103.139.2.34
103.139.2.182
103.139.2.232
103.139.2.191
103.139.2.146
103.139.2.200
103.139.2.247
103.139.2.67
103.139.2.229
103.139.2.225
103.139.2.127
103.139.2.148
103.139.2.147
103.139.2.250
103.139.2.52
103.139.2.68
103.139.2.143
103.139.2.176
103.139.2.197
103.139.2.185
103.139.2.24
103.139.2.77
103.139.2.113
103.139.2.93
103.139.2.121
103.139.2.240
103.139.2.132
103.139.2.199
103.139.2.133
103.139.2.69
103.139.2.150
103.139.2.207
103.139.2.29
103.139.2.152
103.139.2.63
103.139.2.80
103.139.2.106
103.139.2.2
103.139.2.177
103.139.2.36
103.139.2.181
103.139.2.189
103.139.2.72
103.139.2.124
103.139.2.254
103.139.2.20
103.139.2.151
103.139.2.39
103.139.2.11
103.139.2.103
103.139.2.89
103.139.2.98
103.139.2.128
103.139.2.100
103.139.2.167
103.139.2.178
103.139.2.7
103.139.2.31
103.139.2.55
103.139.2.70
103.139.2.49
103.139.2.241
103.139.2.215
103.139.2.109
103.139.2.179
103.139.2.188
103.139.2.194
103.139.2.96
103.139.2.144
103.139.2.92
103.139.2.84
103.139.2.161
103.139.2.117
103.139.2.74
103.139.2.226
103.139.2.21
103.139.2.16
103.139.2.61
103.139.2.81
103.139.2.210
103.139.2.164
103.139.2.139
103.139.2.220
103.139.2.30
103.139.2.251
103.139.2.37
103.139.2.50
103.139.2.51
103.139.2.65
103.139.2.38
103.139.2.1
103.139.2.154
103.139.2.157
103.139.2.48
103.139.2.183
103.139.2.8
103.139.2.107
103.139.2.53
103.139.2.211
103.139.2.25
103.139.2.165
103.139.2.18
103.139.2.116
103.139.2.248
103.139.2.208
103.139.2.221
103.139.2.186
103.139.2.234
103.139.2.231
103.139.2.115
103.139.2.56
103.139.2.193
103.139.2.212
103.139.2.246
103.139.2.62
103.139.2.17
103.139.2.95
103.139.2.19
103.139.2.54
103.139.2.15
103.139.2.5
103.139.2.66
103.139.2.158
103.139.2.137
103.139.2.252
103.139.2.172
103.139.2.32
103.139.2.122
103.139.2.83
103.139.2.22
103.139.2.209
103.139.2.129
103.139.2.33
103.139.2.159
103.139.2.102
103.139.2.142
103.139.2.141
103.139.2.170
103.139.2.169
103.139.2.76
103.139.2.27
103.139.2.223
103.139.2.9
103.139.2.156
103.139.2.236
103.139.2.108
103.139.2.192
103.139.2.78
103.139.2.46
103.139.2.243
103.139.2.4
103.139.2.87
103.139.2.97
103.139.2.43
103.139.2.195
103.139.2.166
103.139.2.114
103.139.2.190
103.139.2.160
103.139.2.23
103.139.2.171
103.139.2.245
103.139.2.101
103.139.2.155
103.139.2.202
103.139.2.224
103.139.2.64
103.139.2.228
103.139.2.138
103.139.2.184
103.139.2.230
103.139.2.86
103.139.2.13
103.139.2.242
103.139.2.58
103.139.2.180
103.139.2.123
103.139.2.73
103.139.2.40
103.139.2.35
103.139.2.90
103.139.2.253
103.139.2.168
103.139.2.131
103.139.2.219
103.139.2.126
103.139.2.201
103.139.2.60
103.139.2.173
103.139.2.45
103.139.2.213
103.139.2.175
103.139.2.196
103.139.2.227
103.139.2.163
103.139.2.85
103.139.2.91
103.139.2.119
103.139.2.222
103.139.2.104
103.139.2.134
103.139.2.41
103.139.2.218
103.139.2.110
103.139.2.187
103.139.2.249
103.139.2.3
103.139.2.198
103.139.2.239
103.139.2.235
103.139.2.145
103.139.2.216
103.139.2.6
Related comments:
IP Type Details Datetime
37.139.1.197 attackbots 
Jun 15 08:26:33 cosmoit sshd[7755]: Failed password for root from 37.139.1.197 port 44361 ssh2
 2020-06-15 19:29:39
222.186.15.62 attackbotsspam 
Jun 15 07:56:56 NPSTNNYC01T sshd[5823]: Failed password for root from 222.186.15.62 port 33867 ssh2
Jun 15 07:57:06 NPSTNNYC01T sshd[5831]: Failed password for root from 222.186.15.62 port 13549 ssh2
...
 2020-06-15 19:57:59
95.71.117.9 attackspambots 
Lines containing failures of 95.71.117.9
Jun 15 02:31:12 zabbix sshd[3737]: Invalid user admin from 95.71.117.9 port 55618
Jun 15 02:31:12 zabbix sshd[3737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.71.117.9
Jun 15 02:31:14 zabbix sshd[3737]: Failed password for invalid user admin from 95.71.117.9 port 55618 ssh2
Jun 15 02:31:14 zabbix sshd[3737]: Received disconnect from 95.71.117.9 port 55618:11: Bye Bye [preauth]
Jun 15 02:31:14 zabbix sshd[3737]: Disconnected from invalid user admin 95.71.117.9 port 55618 [preauth]
Jun 15 02:49:04 zabbix sshd[6250]: Invalid user anon from 95.71.117.9 port 55052
Jun 15 02:49:04 zabbix sshd[6250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.71.117.9
Jun 15 02:49:06 zabbix sshd[6250]: Failed password for invalid user anon from 95.71.117.9 port 55052 ssh2
Jun 15 02:49:06 zabbix sshd[6250]: Received disconnect from 95.71.117.9 port 55052:11: B........
------------------------------
 2020-06-15 20:04:50
182.61.55.155 attackbots 
Invalid user alexis from 182.61.55.155 port 45348
 2020-06-15 19:38:11
122.51.60.39 attackbotsspam 
Jun 15 09:45:48 zulu412 sshd\[28317\]: Invalid user sysop from 122.51.60.39 port 55992
Jun 15 09:45:48 zulu412 sshd\[28317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.60.39
Jun 15 09:45:49 zulu412 sshd\[28317\]: Failed password for invalid user sysop from 122.51.60.39 port 55992 ssh2
...
 2020-06-15 19:35:47
37.139.16.229 attackspam 
Jun 15 11:34:10 odroid64 sshd\[26476\]: Invalid user samir from 37.139.16.229
Jun 15 11:34:10 odroid64 sshd\[26476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.16.229
...
 2020-06-15 20:02:59
112.211.3.69 attackspambots 
Automatic report - XMLRPC Attack
 2020-06-15 19:32:18
45.55.184.78 attackspambots 
Invalid user igor from 45.55.184.78 port 54662
 2020-06-15 19:46:28
192.243.119.201 attackspambots 
Jun 15 07:11:11 home sshd[6924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.243.119.201
Jun 15 07:11:13 home sshd[6924]: Failed password for invalid user oracle from 192.243.119.201 port 54924 ssh2
Jun 15 07:18:03 home sshd[7648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.243.119.201
...
 2020-06-15 19:36:59
80.104.174.58 attackspam 
2020-06-15T14:09:14.974808mail.standpoint.com.ua sshd[2756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-80-104-174-58.retail.telecomitalia.it
2020-06-15T14:09:14.970575mail.standpoint.com.ua sshd[2756]: Invalid user hari from 80.104.174.58 port 46500
2020-06-15T14:09:16.480815mail.standpoint.com.ua sshd[2756]: Failed password for invalid user hari from 80.104.174.58 port 46500 ssh2
2020-06-15T14:13:49.761081mail.standpoint.com.ua sshd[3573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-80-104-174-58.retail.telecomitalia.it  user=root
2020-06-15T14:13:51.687672mail.standpoint.com.ua sshd[3573]: Failed password for root from 80.104.174.58 port 49210 ssh2
...
 2020-06-15 19:31:44
103.81.156.10 attackspambots 
Jun 15 08:48:32 ourumov-web sshd\[24681\]: Invalid user dev from 103.81.156.10 port 51084
Jun 15 08:48:32 ourumov-web sshd\[24681\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.81.156.10
Jun 15 08:48:35 ourumov-web sshd\[24681\]: Failed password for invalid user dev from 103.81.156.10 port 51084 ssh2
...
 2020-06-15 19:54:03
120.132.13.131 attack 
k+ssh-bruteforce
 2020-06-15 19:34:11
130.162.71.237 attackbotsspam 
Jun 15 09:42:48 vps1 sshd[1630320]: Invalid user ctopup from 130.162.71.237 port 37201
Jun 15 09:42:50 vps1 sshd[1630320]: Failed password for invalid user ctopup from 130.162.71.237 port 37201 ssh2
...
 2020-06-15 20:02:04
200.116.105.213 attackspam 
bruteforce detected
 2020-06-15 19:51:59
2a02:a03f:3ea0:9200:8da4:34b7:a93d:9ae7 attackspambots 
Jun 15 07:11:03 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=2a02:a03f:3ea0:9200:8da4:34b7:a93d:9ae7, lip=2a01:7e01:e001:164::, session=<8HDtcxioLtgqAqA/PqCSAI2kNLepPZrn>
Jun 15 07:11:09 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3ea0:9200:8da4:34b7:a93d:9ae7, lip=2a01:7e01:e001:164::, session=
Jun 15 07:11:09 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3ea0:9200:8da4:34b7:a93d:9ae7, lip=2a01:7e01:e001:164::, session=<5n4SdBioMtgqAqA/PqCSAI2kNLepPZrn>
Jun 15 07:11:15 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3ea0:9200:8da4:34b7:a93d:9ae7, lip=2a01:7e01:e001:164::, session=
 2020-06-15 19:44:11

Recently Reported IPs

103.139.103.172 103.139.224.128 103.139.3.56 103.139.48.10
103.139.48.136 103.142.25.102 103.142.25.136 103.142.25.187
103.142.25.196 103.142.25.214 103.142.25.38 103.142.25.60
103.142.254.2 103.142.26.120 103.142.26.13 103.142.26.165
103.142.26.186 103.142.26.246 103.142.26.46 103.142.39.156