103.139.2.2 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.139.212.208	attackbotsspam	[H1.VM10] Blocked by UFW	2020-10-01 03:04:53
103.139.212.208	attackspambots	[H1.VM10] Blocked by UFW	2020-09-30 19:18:22
103.139.212.205	attackbots	Found on Alienvault / proto=6 . srcport=4051 . dstport=8443 . (3339)	2020-09-25 07:10:18
103.139.212.213	attackspam	443	2020-09-02 05:08:44
103.139.219.20	attackbotsspam	Sep 1 14:21:28 inter-technics sshd[19038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.219.20 user=ts3 Sep 1 14:21:29 inter-technics sshd[19038]: Failed password for ts3 from 103.139.219.20 port 33042 ssh2 Sep 1 14:29:33 inter-technics sshd[19391]: Invalid user nexus from 103.139.219.20 port 40660 Sep 1 14:29:33 inter-technics sshd[19391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.219.20 Sep 1 14:29:33 inter-technics sshd[19391]: Invalid user nexus from 103.139.219.20 port 40660 Sep 1 14:29:35 inter-technics sshd[19391]: Failed password for invalid user nexus from 103.139.219.20 port 40660 ssh2 ...	2020-09-02 01:17:21
103.139.212.212	attackspambots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-09-01 02:36:38
103.139.212.8	attack	Attempted connection to port 1433.	2020-08-27 17:28:54
103.139.212.213	attackspam	Excessive Port-Scanning	2020-08-23 12:05:32
103.139.219.20	attack	$f2bV_matches	2020-08-19 16:42:30
103.139.208.128	attackbotsspam	Port Scan ...	2020-08-18 19:08:36
103.139.219.20	attackbotsspam	Aug 17 03:58:46 IngegnereFirenze sshd[9061]: Failed password for invalid user administrator from 103.139.219.20 port 40654 ssh2 ...	2020-08-17 14:19:18
103.139.219.20	attackbotsspam	Bruteforce detected by fail2ban	2020-08-15 07:26:01
103.139.219.20	attack	Aug 7 00:56:38 jane sshd[30273]: Failed password for root from 103.139.219.20 port 44166 ssh2 ...	2020-08-07 07:36:11
103.139.219.20	attack	Aug 4 20:30:57 haigwepa sshd[326]: Failed password for root from 103.139.219.20 port 37648 ssh2 ...	2020-08-05 03:55:00
103.139.219.20	attack	SSH Brute Force	2020-08-01 15:39:15

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.139.2.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15997
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.139.2.2.			IN	A

;; AUTHORITY SECTION:
.			487	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040901 1800 900 604800 86400

;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 10 05:25:54 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 2.2.139.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.2.139.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
86.57.168.223	attackspambots	Autoban 86.57.168.223 ABORTED AUTH	2019-07-05 14:40:55
94.191.70.31	attackbotsspam	leo_www	2019-07-05 15:01:03
177.226.247.118	attackbotsspam	2019-07-05 00:33:11 unexpected disconnection while reading SMTP command from (customer-PUE-247-118.megared.net.mx) [177.226.247.118]:61670 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-07-05 00:33:35 unexpected disconnection while reading SMTP command from (customer-PUE-247-118.megared.net.mx) [177.226.247.118]:6369 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-07-05 00:34:21 unexpected disconnection while reading SMTP command from (customer-PUE-247-118.megared.net.mx) [177.226.247.118]:37767 I=[10.100.18.23]:25 (error: Connection reset by peer) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=177.226.247.118	2019-07-05 14:54:27
5.62.19.38	attack	\[2019-07-05 08:42:37\] NOTICE\[9010\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '5.62.19.38:2669' $callid: 1607899011-1218836479-350376500$ - Failed to authenticate \[2019-07-05 08:42:37\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-05T08:42:37.281+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1607899011-1218836479-350376500",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/5.62.19.38/2669",Challenge="1562308957/67e1a425429539186f67546dabcc0ce7",Response="8878be6b4cabada3dbc8b1b47f6cc2d4",ExpectedResponse="" \[2019-07-05 08:42:37\] NOTICE\[5109\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '5.62.19.38:2669' $callid: 1607899011-1218836479-350376500$ - Failed to authenticate \[2019-07-05 08:42:37\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",Eve	2019-07-05 15:03:48
122.190.107.209	attack	Jul 4 17:43:14 mailman postfix/smtpd[11681]: NOQUEUE: reject: RCPT from unknown[122.190.107.209]: 554 5.7.1 Service unavailable; Client host [122.190.107.209] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/122.190.107.209 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to=<[munged][at][munged]> proto=ESMTP helo= Jul 4 17:43:15 mailman postfix/smtpd[11683]: NOQUEUE: reject: RCPT from unknown[122.190.107.209]: 554 5.7.1 Service unavailable; Client host [122.190.107.209] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/122.190.107.209 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to=<[munged][at][munged]> proto=ESMTP helo=	2019-07-05 14:33:58
158.69.198.5	attackbots	Jul 5 08:04:29 MK-Soft-Root2 sshd\[22158\]: Invalid user miner from 158.69.198.5 port 54820 Jul 5 08:04:29 MK-Soft-Root2 sshd\[22158\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.198.5 Jul 5 08:04:32 MK-Soft-Root2 sshd\[22158\]: Failed password for invalid user miner from 158.69.198.5 port 54820 ssh2 ...	2019-07-05 14:29:56
125.212.254.144	attackspambots	Jul 5 06:09:59 localhost sshd\[10748\]: Invalid user steve from 125.212.254.144 port 40482 Jul 5 06:09:59 localhost sshd\[10748\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.212.254.144 Jul 5 06:10:00 localhost sshd\[10748\]: Failed password for invalid user steve from 125.212.254.144 port 40482 ssh2 ...	2019-07-05 14:38:36
54.38.227.116	attackspam	Jul 4 16:14:56 mxgate1 postfix/postscreen[12930]: CONNECT from [54.38.227.116]:46285 to [176.31.12.44]:25 Jul 4 16:14:56 mxgate1 postfix/dnsblog[13036]: addr 54.38.227.116 listed by domain zen.spamhaus.org as 127.0.0.3 Jul 4 16:14:56 mxgate1 postfix/dnsblog[13036]: addr 54.38.227.116 listed by domain zen.spamhaus.org as 127.0.0.4 Jul 4 16:14:56 mxgate1 postfix/dnsblog[13039]: addr 54.38.227.116 listed by domain cbl.abuseat.org as 127.0.0.2 Jul 4 16:15:02 mxgate1 postfix/postscreen[12930]: DNSBL rank 3 for [54.38.227.116]:46285 Jul 4 16:15:02 mxgate1 postfix/tlsproxy[13100]: CONNECT from [54.38.227.116]:46285 Jul 4 16:15:02 mxgate1 postfix/postscreen[12930]: DISCONNECT [54.38.227.116]:46285 Jul 4 16:15:02 mxgate1 postfix/tlsproxy[13100]: DISCONNECT [54.38.227.116]:46285 Jul 4 16:16:56 mxgate1 postfix/postscreen[12930]: CONNECT fr .... truncated .... Jul 4 16:14:56 mxgate1 postfix/postscreen[12930]: CONNECT from [54.38.227.116]:46285 to [176.31.12.44]:25 Jul ........ -------------------------------	2019-07-05 14:34:54
132.232.102.60	attackspam	Invalid user ciserve from 132.232.102.60 port 35682 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.102.60 Failed password for invalid user ciserve from 132.232.102.60 port 35682 ssh2 Invalid user zhun from 132.232.102.60 port 32786 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.102.60	2019-07-05 14:31:34
85.242.231.236	attackspam	2019-07-05 00:23:44 unexpected disconnection while reading SMTP command from bl9-231-236.dsl.telepac.pt [85.242.231.236]:64028 I=[10.100.18.22]:25 (error: Connection reset by peer) 2019-07-05 00:24:53 unexpected disconnection while reading SMTP command from bl9-231-236.dsl.telepac.pt [85.242.231.236]:49690 I=[10.100.18.22]:25 (error: Connection reset by peer) 2019-07-05 00:27:16 unexpected disconnection while reading SMTP command from bl9-231-236.dsl.telepac.pt [85.242.231.236]:55278 I=[10.100.18.22]:25 (error: Connection reset by peer) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=85.242.231.236	2019-07-05 14:34:31
193.29.15.56	attack	" "	2019-07-05 14:27:25
194.100.22.66	attackbotsspam	2019-07-05 00:36:05 unexpected disconnection while reading SMTP command from ([194.100.22.66]) [194.100.22.66]:41190 I=[10.100.18.25]:25 (error: Connection reset by peer) 2019-07-05 00:36:39 unexpected disconnection while reading SMTP command from ([194.100.22.66]) [194.100.22.66]:46379 I=[10.100.18.25]:25 (error: Connection reset by peer) 2019-07-05 00:37:03 unexpected disconnection while reading SMTP command from ([194.100.22.66]) [194.100.22.66]:13631 I=[10.100.18.25]:25 (error: Connection reset by peer) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=194.100.22.66	2019-07-05 15:05:15
124.31.204.116	attack	SMB Server BruteForce Attack	2019-07-05 14:40:18
31.41.114.163	attackbotsspam	445/tcp 445/tcp 445/tcp [2019-05-05/07-04]3pkt	2019-07-05 15:08:47
117.64.219.52	attackspam	Jul 5 05:27:10 vps691689 sshd[24894]: Failed password for root from 117.64.219.52 port 30118 ssh2 Jul 5 05:27:12 vps691689 sshd[24894]: Failed password for root from 117.64.219.52 port 30118 ssh2 Jul 5 05:27:15 vps691689 sshd[24894]: Failed password for root from 117.64.219.52 port 30118 ssh2 ...	2019-07-05 14:48:17

Recently Reported IPs

103.139.102.115	103.139.48.110	103.139.48.111	103.139.48.113
103.139.48.121	103.139.48.122	103.139.48.127	103.139.48.147
103.139.48.151	103.139.48.155	103.139.48.156	103.139.48.157
103.139.48.169	103.139.48.170	103.139.48.172	103.139.48.176
103.139.48.178	103.139.48.18	103.139.48.182	103.139.48.183