Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
103.139.212.208 attackbotsspam
[H1.VM10] Blocked by UFW
2020-10-01 03:04:53
103.139.212.208 attackspambots
[H1.VM10] Blocked by UFW
2020-09-30 19:18:22
103.139.212.205 attackbots
Found on   Alienvault    / proto=6  .  srcport=4051  .  dstport=8443  .     (3339)
2020-09-25 07:10:18
103.139.212.213 attackspam
443
2020-09-02 05:08:44
103.139.219.20 attackbotsspam
Sep  1 14:21:28 inter-technics sshd[19038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.219.20  user=ts3
Sep  1 14:21:29 inter-technics sshd[19038]: Failed password for ts3 from 103.139.219.20 port 33042 ssh2
Sep  1 14:29:33 inter-technics sshd[19391]: Invalid user nexus from 103.139.219.20 port 40660
Sep  1 14:29:33 inter-technics sshd[19391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.219.20
Sep  1 14:29:33 inter-technics sshd[19391]: Invalid user nexus from 103.139.219.20 port 40660
Sep  1 14:29:35 inter-technics sshd[19391]: Failed password for invalid user nexus from 103.139.219.20 port 40660 ssh2
...
2020-09-02 01:17:21
103.139.212.212 attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-09-01 02:36:38
103.139.212.8 attack
Attempted connection to port 1433.
2020-08-27 17:28:54
103.139.212.213 attackspam
Excessive Port-Scanning
2020-08-23 12:05:32
103.139.219.20 attack
$f2bV_matches
2020-08-19 16:42:30
103.139.208.128 attackbotsspam
Port Scan
...
2020-08-18 19:08:36
103.139.219.20 attackbotsspam
Aug 17 03:58:46 IngegnereFirenze sshd[9061]: Failed password for invalid user administrator from 103.139.219.20 port 40654 ssh2
...
2020-08-17 14:19:18
103.139.219.20 attackbotsspam
Bruteforce detected by fail2ban
2020-08-15 07:26:01
103.139.219.20 attack
Aug  7 00:56:38 jane sshd[30273]: Failed password for root from 103.139.219.20 port 44166 ssh2
...
2020-08-07 07:36:11
103.139.219.20 attack
Aug  4 20:30:57 haigwepa sshd[326]: Failed password for root from 103.139.219.20 port 37648 ssh2
...
2020-08-05 03:55:00
103.139.219.20 attack
SSH Brute Force
2020-08-01 15:39:15
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.139.2.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50652
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.139.2.44.			IN	A

;; AUTHORITY SECTION:
.			505	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 10:37:29 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 44.2.139.103.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 44.2.139.103.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
103.21.143.192 attack
May 26 17:17:58 ncomp sshd[19833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.21.143.192  user=root
May 26 17:18:00 ncomp sshd[19833]: Failed password for root from 103.21.143.192 port 56368 ssh2
May 26 17:49:45 ncomp sshd[21222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.21.143.192  user=root
May 26 17:49:47 ncomp sshd[21222]: Failed password for root from 103.21.143.192 port 43768 ssh2
2020-05-27 05:25:08
222.65.249.48 attack
May 26 18:17:08 vps sshd[265988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.65.249.48
May 26 18:17:09 vps sshd[265988]: Failed password for invalid user art from 222.65.249.48 port 46240 ssh2
May 26 18:22:33 vps sshd[288835]: Invalid user phpmy from 222.65.249.48 port 7968
May 26 18:22:33 vps sshd[288835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.65.249.48
May 26 18:22:35 vps sshd[288835]: Failed password for invalid user phpmy from 222.65.249.48 port 7968 ssh2
...
2020-05-27 05:27:03
185.220.101.251 attack
0,55-01/02 [bc01/m19] PostRequest-Spammer scoring: essen
2020-05-27 05:28:33
68.183.98.175 attackbots
May 26 20:06:42 vps sshd[754679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.98.175  user=root
May 26 20:06:44 vps sshd[754679]: Failed password for root from 68.183.98.175 port 36344 ssh2
May 26 20:10:18 vps sshd[774332]: Invalid user fujita from 68.183.98.175 port 43078
May 26 20:10:18 vps sshd[774332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.98.175
May 26 20:10:21 vps sshd[774332]: Failed password for invalid user fujita from 68.183.98.175 port 43078 ssh2
...
2020-05-27 05:11:18
129.204.19.9 attackspam
May 26 23:02:50 * sshd[12363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.19.9
May 26 23:02:53 * sshd[12363]: Failed password for invalid user toor from 129.204.19.9 port 56258 ssh2
2020-05-27 05:24:45
202.107.226.3 attackbotsspam
port scans
2020-05-27 05:22:39
14.187.99.131 attack
'IP reached maximum auth failures for a one day block'
2020-05-27 05:36:57
88.153.217.112 attack
May 26 17:41:22 srv01 dovecot: imap-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=88.153.217.112, lip=144.76.84.212, TLS, session=\
May 26 17:41:28 srv01 dovecot: imap-login: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=88.153.217.112, lip=144.76.84.212, TLS, session=\
May 26 17:41:40 srv01 dovecot: imap-login: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=88.153.217.112, lip=144.76.84.212, TLS, session=\
May 26 17:41:42 srv01 dovecot: imap-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=88.153.217.112, lip=144.76.84.212, TLS, session=\<43mA7o6mN9tYmdlw\>
May 26 17:41:44 srv01 dovecot: imap-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=88.153.217.112, lip=144.76.84.212, TLS,
...
2020-05-27 05:47:07
31.129.68.164 attackspam
May 26 23:06:13 pornomens sshd\[24649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.129.68.164  user=root
May 26 23:06:16 pornomens sshd\[24649\]: Failed password for root from 31.129.68.164 port 54594 ssh2
May 26 23:15:01 pornomens sshd\[24778\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.129.68.164  user=root
...
2020-05-27 05:38:29
148.251.10.183 attackspambots
20 attempts against mh-misbehave-ban on storm
2020-05-27 05:37:39
66.147.225.110 attackbots
2020-05-26T22:56:15.603703vps773228.ovh.net sshd[8980]: Failed password for root from 66.147.225.110 port 33156 ssh2
2020-05-26T23:00:46.857877vps773228.ovh.net sshd[9108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.147.225.110  user=root
2020-05-26T23:00:48.796662vps773228.ovh.net sshd[9108]: Failed password for root from 66.147.225.110 port 36025 ssh2
2020-05-26T23:05:22.642581vps773228.ovh.net sshd[9169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.147.225.110  user=root
2020-05-26T23:05:24.470756vps773228.ovh.net sshd[9169]: Failed password for root from 66.147.225.110 port 38897 ssh2
...
2020-05-27 05:17:20
104.244.77.101 attackspambots
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed MON_LIST Requests IMPL 0x03 - port: 123 proto: UDP cat: Attempted Denial of Service
2020-05-27 05:48:47
95.6.5.233 attack
Automatic report - Banned IP Access
2020-05-27 05:51:31
20.43.32.253 attackspambots
"Test Inject  un'a=0"
2020-05-27 05:28:12
59.102.102.13 attackspambots
Automatic report - Port Scan Attack
2020-05-27 05:20:11

Recently Reported IPs

103.139.2.217 103.140.253.187 103.142.24.49 103.143.0.35
103.141.131.71 103.143.182.143 103.144.14.79 103.142.108.213
103.143.190.124 103.144.169.135 103.143.209.126 103.144.14.147
103.144.175.54 103.144.170.225 103.142.198.210 103.144.178.64
103.144.15.122 103.144.176.243 103.153.58.77 103.153.36.169