Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
103.139.212.208 attackbotsspam
[H1.VM10] Blocked by UFW
2020-10-01 03:04:53
103.139.212.208 attackspambots
[H1.VM10] Blocked by UFW
2020-09-30 19:18:22
103.139.212.205 attackbots
Found on   Alienvault    / proto=6  .  srcport=4051  .  dstport=8443  .     (3339)
2020-09-25 07:10:18
103.139.212.213 attackspam
443
2020-09-02 05:08:44
103.139.219.20 attackbotsspam
Sep  1 14:21:28 inter-technics sshd[19038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.219.20  user=ts3
Sep  1 14:21:29 inter-technics sshd[19038]: Failed password for ts3 from 103.139.219.20 port 33042 ssh2
Sep  1 14:29:33 inter-technics sshd[19391]: Invalid user nexus from 103.139.219.20 port 40660
Sep  1 14:29:33 inter-technics sshd[19391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.219.20
Sep  1 14:29:33 inter-technics sshd[19391]: Invalid user nexus from 103.139.219.20 port 40660
Sep  1 14:29:35 inter-technics sshd[19391]: Failed password for invalid user nexus from 103.139.219.20 port 40660 ssh2
...
2020-09-02 01:17:21
103.139.212.212 attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-09-01 02:36:38
103.139.212.8 attack
Attempted connection to port 1433.
2020-08-27 17:28:54
103.139.212.213 attackspam
Excessive Port-Scanning
2020-08-23 12:05:32
103.139.219.20 attack
$f2bV_matches
2020-08-19 16:42:30
103.139.208.128 attackbotsspam
Port Scan
...
2020-08-18 19:08:36
103.139.219.20 attackbotsspam
Aug 17 03:58:46 IngegnereFirenze sshd[9061]: Failed password for invalid user administrator from 103.139.219.20 port 40654 ssh2
...
2020-08-17 14:19:18
103.139.219.20 attackbotsspam
Bruteforce detected by fail2ban
2020-08-15 07:26:01
103.139.219.20 attack
Aug  7 00:56:38 jane sshd[30273]: Failed password for root from 103.139.219.20 port 44166 ssh2
...
2020-08-07 07:36:11
103.139.219.20 attack
Aug  4 20:30:57 haigwepa sshd[326]: Failed password for root from 103.139.219.20 port 37648 ssh2
...
2020-08-05 03:55:00
103.139.219.20 attack
SSH Brute Force
2020-08-01 15:39:15
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.139.2.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48438
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.139.2.52.			IN	A

;; AUTHORITY SECTION:
.			273	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040600 1800 900 604800 86400

;; Query time: 84 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 06 22:32:59 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 52.2.139.103.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.2.139.103.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
201.38.219.136 attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-20 12:20:37,716 INFO [shellcode_manager] (201.38.219.136) no match, writing hexdump (ae2e78d9309a8f28c279f4ae23a8ed75 :2459835) - MS17010 (EternalBlue)
2019-07-22 16:28:22
14.244.11.42 attackbots
Unauthorized connection attempt from IP address 14.244.11.42 on Port 445(SMB)
2019-07-22 16:30:14
110.77.138.39 attackbots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-22 02:55:16,517 INFO [amun_request_handler] PortScan Detected on Port: 445 (110.77.138.39)
2019-07-22 16:22:47
46.229.168.151 attackspambots
Malicious Traffic/Form Submission
2019-07-22 16:15:56
222.174.251.202 attackbots
[SMB remote code execution attempt: port tcp/445]
[scan/connect: 3 time(s)]
*(RWIN=8192)(07221037)
2019-07-22 16:46:56
36.84.86.40 attackspambots
Unauthorized connection attempt from IP address 36.84.86.40 on Port 445(SMB)
2019-07-22 16:49:32
196.38.156.146 attack
2019-07-22T09:35:01.134752  sshd[22686]: Invalid user ubuntu from 196.38.156.146 port 50530
2019-07-22T09:35:01.148838  sshd[22686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.38.156.146
2019-07-22T09:35:01.134752  sshd[22686]: Invalid user ubuntu from 196.38.156.146 port 50530
2019-07-22T09:35:02.998661  sshd[22686]: Failed password for invalid user ubuntu from 196.38.156.146 port 50530 ssh2
2019-07-22T09:40:37.269405  sshd[22736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.38.156.146  user=root
2019-07-22T09:40:38.913039  sshd[22736]: Failed password for root from 196.38.156.146 port 48265 ssh2
...
2019-07-22 16:10:17
202.51.110.214 attackspam
Jul 22 08:39:21 localhost sshd\[69371\]: Invalid user zte from 202.51.110.214 port 39201
Jul 22 08:39:21 localhost sshd\[69371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.51.110.214
Jul 22 08:39:23 localhost sshd\[69371\]: Failed password for invalid user zte from 202.51.110.214 port 39201 ssh2
Jul 22 08:45:06 localhost sshd\[69493\]: Invalid user lutz from 202.51.110.214 port 35337
Jul 22 08:45:06 localhost sshd\[69493\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.51.110.214
...
2019-07-22 16:50:35
203.183.40.240 attackspam
Jul 22 10:30:01 nextcloud sshd\[25061\]: Invalid user ftb from 203.183.40.240
Jul 22 10:30:01 nextcloud sshd\[25061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.183.40.240
Jul 22 10:30:02 nextcloud sshd\[25061\]: Failed password for invalid user ftb from 203.183.40.240 port 37548 ssh2
...
2019-07-22 16:33:22
103.201.142.203 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-22 06:57:50,480 INFO [amun_request_handler] PortScan Detected on Port: 445 (103.201.142.203)
2019-07-22 16:56:58
109.94.69.123 attackspam
[portscan] Port scan
2019-07-22 16:43:08
154.118.141.90 attackspam
Jul 22 11:07:24 yabzik sshd[16377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.118.141.90
Jul 22 11:07:26 yabzik sshd[16377]: Failed password for invalid user jorge from 154.118.141.90 port 34402 ssh2
Jul 22 11:12:47 yabzik sshd[18155]: Failed password for root from 154.118.141.90 port 60577 ssh2
2019-07-22 16:15:06
110.139.97.46 attackbots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-22 02:57:19,470 INFO [amun_request_handler] PortScan Detected on Port: 445 (110.139.97.46)
2019-07-22 16:12:20
103.236.178.58 attack
Unauthorized connection attempt from IP address 103.236.178.58 on Port 445(SMB)
2019-07-22 16:41:13
167.114.0.23 attackspam
Jul 22 10:28:34 bouncer sshd\[23886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.0.23  user=root
Jul 22 10:28:37 bouncer sshd\[23886\]: Failed password for root from 167.114.0.23 port 51402 ssh2
Jul 22 10:33:10 bouncer sshd\[23896\]: Invalid user janine from 167.114.0.23 port 47210
...
2019-07-22 16:55:48

Recently Reported IPs

103.138.251.164 194.33.183.28 103.139.3.46 103.139.48.14
103.14.12.73 103.14.120.179 103.14.123.105 103.14.15.121
103.140.126.57 103.140.126.61 103.140.138.88 103.140.142.249
103.140.16.40 103.140.180.229 103.140.180.56 103.140.217.60
103.140.24.24 103.140.24.25 103.140.24.30 103.140.24.31