103.139.2.44 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.139.212.208	attackbotsspam	[H1.VM10] Blocked by UFW	2020-10-01 03:04:53
103.139.212.208	attackspambots	[H1.VM10] Blocked by UFW	2020-09-30 19:18:22
103.139.212.205	attackbots	Found on Alienvault / proto=6 . srcport=4051 . dstport=8443 . (3339)	2020-09-25 07:10:18
103.139.212.213	attackspam	443	2020-09-02 05:08:44
103.139.219.20	attackbotsspam	Sep 1 14:21:28 inter-technics sshd[19038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.219.20 user=ts3 Sep 1 14:21:29 inter-technics sshd[19038]: Failed password for ts3 from 103.139.219.20 port 33042 ssh2 Sep 1 14:29:33 inter-technics sshd[19391]: Invalid user nexus from 103.139.219.20 port 40660 Sep 1 14:29:33 inter-technics sshd[19391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.219.20 Sep 1 14:29:33 inter-technics sshd[19391]: Invalid user nexus from 103.139.219.20 port 40660 Sep 1 14:29:35 inter-technics sshd[19391]: Failed password for invalid user nexus from 103.139.219.20 port 40660 ssh2 ...	2020-09-02 01:17:21
103.139.212.212	attackspambots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-09-01 02:36:38
103.139.212.8	attack	Attempted connection to port 1433.	2020-08-27 17:28:54
103.139.212.213	attackspam	Excessive Port-Scanning	2020-08-23 12:05:32
103.139.219.20	attack	$f2bV_matches	2020-08-19 16:42:30
103.139.208.128	attackbotsspam	Port Scan ...	2020-08-18 19:08:36
103.139.219.20	attackbotsspam	Aug 17 03:58:46 IngegnereFirenze sshd[9061]: Failed password for invalid user administrator from 103.139.219.20 port 40654 ssh2 ...	2020-08-17 14:19:18
103.139.219.20	attackbotsspam	Bruteforce detected by fail2ban	2020-08-15 07:26:01
103.139.219.20	attack	Aug 7 00:56:38 jane sshd[30273]: Failed password for root from 103.139.219.20 port 44166 ssh2 ...	2020-08-07 07:36:11
103.139.219.20	attack	Aug 4 20:30:57 haigwepa sshd[326]: Failed password for root from 103.139.219.20 port 37648 ssh2 ...	2020-08-05 03:55:00
103.139.219.20	attack	SSH Brute Force	2020-08-01 15:39:15

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.139.2.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50652
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.139.2.44.			IN	A

;; AUTHORITY SECTION:
.			505	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 10:37:29 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 44.2.139.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 44.2.139.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.21.143.192	attack	May 26 17:17:58 ncomp sshd[19833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.21.143.192 user=root May 26 17:18:00 ncomp sshd[19833]: Failed password for root from 103.21.143.192 port 56368 ssh2 May 26 17:49:45 ncomp sshd[21222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.21.143.192 user=root May 26 17:49:47 ncomp sshd[21222]: Failed password for root from 103.21.143.192 port 43768 ssh2	2020-05-27 05:25:08
222.65.249.48	attack	May 26 18:17:08 vps sshd[265988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.65.249.48 May 26 18:17:09 vps sshd[265988]: Failed password for invalid user art from 222.65.249.48 port 46240 ssh2 May 26 18:22:33 vps sshd[288835]: Invalid user phpmy from 222.65.249.48 port 7968 May 26 18:22:33 vps sshd[288835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.65.249.48 May 26 18:22:35 vps sshd[288835]: Failed password for invalid user phpmy from 222.65.249.48 port 7968 ssh2 ...	2020-05-27 05:27:03
185.220.101.251	attack	0,55-01/02 [bc01/m19] PostRequest-Spammer scoring: essen	2020-05-27 05:28:33
68.183.98.175	attackbots	May 26 20:06:42 vps sshd[754679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.98.175 user=root May 26 20:06:44 vps sshd[754679]: Failed password for root from 68.183.98.175 port 36344 ssh2 May 26 20:10:18 vps sshd[774332]: Invalid user fujita from 68.183.98.175 port 43078 May 26 20:10:18 vps sshd[774332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.98.175 May 26 20:10:21 vps sshd[774332]: Failed password for invalid user fujita from 68.183.98.175 port 43078 ssh2 ...	2020-05-27 05:11:18
129.204.19.9	attackspam	May 26 23:02:50 * sshd[12363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.19.9 May 26 23:02:53 * sshd[12363]: Failed password for invalid user toor from 129.204.19.9 port 56258 ssh2	2020-05-27 05:24:45
202.107.226.3	attackbotsspam	port scans	2020-05-27 05:22:39
14.187.99.131	attack	'IP reached maximum auth failures for a one day block'	2020-05-27 05:36:57
88.153.217.112	attack	May 26 17:41:22 srv01 dovecot: imap-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=88.153.217.112, lip=144.76.84.212, TLS, session=\ May 26 17:41:28 srv01 dovecot: imap-login: Aborted login $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=88.153.217.112, lip=144.76.84.212, TLS, session=\ May 26 17:41:40 srv01 dovecot: imap-login: Aborted login $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=88.153.217.112, lip=144.76.84.212, TLS, session=\ May 26 17:41:42 srv01 dovecot: imap-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=88.153.217.112, lip=144.76.84.212, TLS, session=\<43mA7o6mN9tYmdlw\> May 26 17:41:44 srv01 dovecot: imap-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=88.153.217.112, lip=144.76.84.212, TLS, ...	2020-05-27 05:47:07
31.129.68.164	attackspam	May 26 23:06:13 pornomens sshd\[24649\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.129.68.164 user=root May 26 23:06:16 pornomens sshd\[24649\]: Failed password for root from 31.129.68.164 port 54594 ssh2 May 26 23:15:01 pornomens sshd\[24778\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.129.68.164 user=root ...	2020-05-27 05:38:29
148.251.10.183	attackspambots	20 attempts against mh-misbehave-ban on storm	2020-05-27 05:37:39
66.147.225.110	attackbots	2020-05-26T22:56:15.603703vps773228.ovh.net sshd[8980]: Failed password for root from 66.147.225.110 port 33156 ssh2 2020-05-26T23:00:46.857877vps773228.ovh.net sshd[9108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.147.225.110 user=root 2020-05-26T23:00:48.796662vps773228.ovh.net sshd[9108]: Failed password for root from 66.147.225.110 port 36025 ssh2 2020-05-26T23:05:22.642581vps773228.ovh.net sshd[9169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.147.225.110 user=root 2020-05-26T23:05:24.470756vps773228.ovh.net sshd[9169]: Failed password for root from 66.147.225.110 port 38897 ssh2 ...	2020-05-27 05:17:20
104.244.77.101	attackspambots	ET DOS Possible NTP DDoS Inbound Frequent Un-Authed MON_LIST Requests IMPL 0x03 - port: 123 proto: UDP cat: Attempted Denial of Service	2020-05-27 05:48:47
95.6.5.233	attack	Automatic report - Banned IP Access	2020-05-27 05:51:31
20.43.32.253	attackspambots	"Test Inject un'a=0"	2020-05-27 05:28:12
59.102.102.13	attackspambots	Automatic report - Port Scan Attack	2020-05-27 05:20:11

Recently Reported IPs

103.139.2.217	103.140.253.187	103.142.24.49	103.143.0.35
103.141.131.71	103.143.182.143	103.144.14.79	103.142.108.213
103.143.190.124	103.144.169.135	103.143.209.126	103.144.14.147
103.144.175.54	103.144.170.225	103.142.198.210	103.144.178.64
103.144.15.122	103.144.176.243	103.153.58.77	103.153.36.169