103.139.2.52 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.139.212.208	attackbotsspam	[H1.VM10] Blocked by UFW	2020-10-01 03:04:53
103.139.212.208	attackspambots	[H1.VM10] Blocked by UFW	2020-09-30 19:18:22
103.139.212.205	attackbots	Found on Alienvault / proto=6 . srcport=4051 . dstport=8443 . (3339)	2020-09-25 07:10:18
103.139.212.213	attackspam	443	2020-09-02 05:08:44
103.139.219.20	attackbotsspam	Sep 1 14:21:28 inter-technics sshd[19038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.219.20 user=ts3 Sep 1 14:21:29 inter-technics sshd[19038]: Failed password for ts3 from 103.139.219.20 port 33042 ssh2 Sep 1 14:29:33 inter-technics sshd[19391]: Invalid user nexus from 103.139.219.20 port 40660 Sep 1 14:29:33 inter-technics sshd[19391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.219.20 Sep 1 14:29:33 inter-technics sshd[19391]: Invalid user nexus from 103.139.219.20 port 40660 Sep 1 14:29:35 inter-technics sshd[19391]: Failed password for invalid user nexus from 103.139.219.20 port 40660 ssh2 ...	2020-09-02 01:17:21
103.139.212.212	attackspambots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-09-01 02:36:38
103.139.212.8	attack	Attempted connection to port 1433.	2020-08-27 17:28:54
103.139.212.213	attackspam	Excessive Port-Scanning	2020-08-23 12:05:32
103.139.219.20	attack	$f2bV_matches	2020-08-19 16:42:30
103.139.208.128	attackbotsspam	Port Scan ...	2020-08-18 19:08:36
103.139.219.20	attackbotsspam	Aug 17 03:58:46 IngegnereFirenze sshd[9061]: Failed password for invalid user administrator from 103.139.219.20 port 40654 ssh2 ...	2020-08-17 14:19:18
103.139.219.20	attackbotsspam	Bruteforce detected by fail2ban	2020-08-15 07:26:01
103.139.219.20	attack	Aug 7 00:56:38 jane sshd[30273]: Failed password for root from 103.139.219.20 port 44166 ssh2 ...	2020-08-07 07:36:11
103.139.219.20	attack	Aug 4 20:30:57 haigwepa sshd[326]: Failed password for root from 103.139.219.20 port 37648 ssh2 ...	2020-08-05 03:55:00
103.139.219.20	attack	SSH Brute Force	2020-08-01 15:39:15

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.139.2.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48438
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.139.2.52.			IN	A

;; AUTHORITY SECTION:
.			273	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040600 1800 900 604800 86400

;; Query time: 84 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 06 22:32:59 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 52.2.139.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.2.139.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
182.247.245.213	attackspambots	php WP PHPmyadamin ABUSE blocked for 12h	2019-10-14 20:49:11
183.6.155.108	attackspam	Oct 14 02:37:32 sachi sshd\[6283\]: Invalid user postgres from 183.6.155.108 Oct 14 02:37:32 sachi sshd\[6283\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.6.155.108 Oct 14 02:37:34 sachi sshd\[6283\]: Failed password for invalid user postgres from 183.6.155.108 port 6147 ssh2 Oct 14 02:43:06 sachi sshd\[6756\]: Invalid user print from 183.6.155.108 Oct 14 02:43:06 sachi sshd\[6756\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.6.155.108	2019-10-14 20:54:18
138.197.189.138	attackbotsspam	2019-10-14T11:55:40.918545abusebot-7.cloudsearch.cf sshd\[24514\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.138 user=root	2019-10-14 20:26:57
118.26.22.50	attack	2019-10-14T12:26:53.827693abusebot-4.cloudsearch.cf sshd\[23654\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.26.22.50 user=root	2019-10-14 20:58:47
195.251.40.14	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-10-14 20:25:30
27.211.168.245	attackspambots	'IP reached maximum auth failures for a one day block'	2019-10-14 20:31:47
222.186.175.161	attackbotsspam	Oct 14 14:40:56 MK-Soft-Root1 sshd[23045]: Failed password for root from 222.186.175.161 port 16286 ssh2 Oct 14 14:41:00 MK-Soft-Root1 sshd[23045]: Failed password for root from 222.186.175.161 port 16286 ssh2 ...	2019-10-14 20:43:15
185.176.27.6	attackbots	Oct 14 11:53:57 TCP Attack: SRC=185.176.27.6 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=244 PROTO=TCP SPT=49606 DPT=6513 WINDOW=1024 RES=0x00 SYN URGP=0	2019-10-14 20:55:33
106.12.195.224	attack	Oct 14 01:49:06 kapalua sshd\[16110\]: Invalid user glace from 106.12.195.224 Oct 14 01:49:06 kapalua sshd\[16110\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.195.224 Oct 14 01:49:08 kapalua sshd\[16110\]: Failed password for invalid user glace from 106.12.195.224 port 36848 ssh2 Oct 14 01:54:29 kapalua sshd\[16539\]: Invalid user test_user from 106.12.195.224 Oct 14 01:54:29 kapalua sshd\[16539\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.195.224	2019-10-14 21:01:37
91.82.85.177	attackspam	Automatic report - Port Scan Attack	2019-10-14 21:00:23
149.202.59.85	attackspam	Oct 14 13:51:11 meumeu sshd[21929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.59.85 Oct 14 13:51:12 meumeu sshd[21929]: Failed password for invalid user C3ntos2016 from 149.202.59.85 port 40659 ssh2 Oct 14 13:55:17 meumeu sshd[22585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.59.85 ...	2019-10-14 20:39:01
107.173.168.16	attack	Oct 14 08:37:12 debian sshd\[7321\]: Invalid user vinod from 107.173.168.16 port 47524 Oct 14 08:37:12 debian sshd\[7321\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.168.16 Oct 14 08:37:14 debian sshd\[7321\]: Failed password for invalid user vinod from 107.173.168.16 port 47524 ssh2 ...	2019-10-14 20:42:01
178.128.193.158	attack	[MonOct1413:54:17.9267702019][:error][pid11910:tid47845725062912][client178.128.193.158:36300][client178.128.193.158]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch"$\?:\<\?script\\|\(\?:\<\\|\<\?/$$\?:\(\?:java\\|vb$script\\|about\\|applet\\|activex\\|chrome\\|qx\?ss\\|embed\)\\|\<\?/\?i\?frame\\\\\\\\b\)"atARGS:read-more-text.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1079"][id"340147"][rev"141"][msg"Atomicorp.comWAFRules:PotentialCrossSiteScriptingAttack"][data"\	2019-10-14 21:01:52
193.32.160.141	attackbotsspam	2019-10-14 H=$\[193.32.160.142\]$ \[193.32.160.141\] F=\<7psty427pi4k1@mu17.ru\> rejected RCPT \: Unrouteable address 2019-10-14 H=$\[193.32.160.142\]$ \[193.32.160.141\] F=\<7psty427pi4k1@mu17.ru\> rejected RCPT \: Unrouteable address 2019-10-14 H=$\[193.32.160.142\]$ \[193.32.160.141\] F=\<7psty427pi4k1@mu17.ru\> rejected RCPT \: Unrouteable address	2019-10-14 20:33:23
193.32.161.119	attackspam	RDP Bruteforce	2019-10-14 20:32:24

Recently Reported IPs

103.138.251.164	194.33.183.28	103.139.3.46	103.139.48.14
103.14.12.73	103.14.120.179	103.14.123.105	103.14.15.121
103.140.126.57	103.140.126.61	103.140.138.88	103.140.142.249
103.140.16.40	103.140.180.229	103.140.180.56	103.140.217.60
103.140.24.24	103.140.24.25	103.140.24.30	103.140.24.31