103.139.212.205

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Yunduan Interchange (Beijing) Computer Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Found on Alienvault / proto=6 . srcport=4051 . dstport=8443 . (3339)	2020-09-25 07:10:18

Comments on same subnet:

IP	Type	Details	Datetime
103.139.212.208	attackbotsspam	[H1.VM10] Blocked by UFW	2020-10-01 03:04:53
103.139.212.208	attackspambots	[H1.VM10] Blocked by UFW	2020-09-30 19:18:22
103.139.212.213	attackspam	443	2020-09-02 05:08:44
103.139.212.212	attackspambots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-09-01 02:36:38
103.139.212.8	attack	Attempted connection to port 1433.	2020-08-27 17:28:54
103.139.212.213	attackspam	Excessive Port-Scanning	2020-08-23 12:05:32
103.139.212.21	attackbots	SSH Brute Force	2020-05-10 02:04:35
103.139.212.21	attackspam	SSH invalid-user multiple login try	2020-05-08 15:47:20
103.139.212.20	attackspam	Unauthorized connection attempt detected from IP address 103.139.212.20 to port 1433 [J]	2020-01-06 14:47:31

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.139.212.205
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50279
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.139.212.205.		IN	A

;; AUTHORITY SECTION:
.			353	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092402 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 25 07:10:16 CST 2020
;; MSG SIZE  rcvd: 119

Host info

Host 205.212.139.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 205.212.139.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
140.143.233.29	attackspam	Jun 3 13:50:11 cloud sshd[628]: Failed password for root from 140.143.233.29 port 59068 ssh2	2020-06-03 23:25:03
111.229.226.212	attackbots	SSH Brute-Force reported by Fail2Ban	2020-06-03 22:48:15
49.88.112.55	attack	2020-06-03T14:45:03.159939shield sshd\[26200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.55 user=root 2020-06-03T14:45:04.725398shield sshd\[26200\]: Failed password for root from 49.88.112.55 port 61768 ssh2 2020-06-03T14:45:08.506043shield sshd\[26200\]: Failed password for root from 49.88.112.55 port 61768 ssh2 2020-06-03T14:45:11.833085shield sshd\[26200\]: Failed password for root from 49.88.112.55 port 61768 ssh2 2020-06-03T14:45:15.370040shield sshd\[26200\]: Failed password for root from 49.88.112.55 port 61768 ssh2	2020-06-03 22:52:23
185.130.184.207	attackspam	[2020-06-03 10:44:02] NOTICE[1288] chan_sip.c: Registration from '' failed for '185.130.184.207:65474' - Wrong password [2020-06-03 10:44:02] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-03T10:44:02.582-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3007",SessionID="0x7f4d740413e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.130.184.207/65474",Challenge="24edebfd",ReceivedChallenge="24edebfd",ReceivedHash="de2b93aa9221a26a4efb7bdeca7656ad" [2020-06-03 10:44:27] NOTICE[1288] chan_sip.c: Registration from '' failed for '185.130.184.207:61689' - Wrong password [2020-06-03 10:44:27] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-03T10:44:27.431-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6524",SessionID="0x7f4d7403e5e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.130 ...	2020-06-03 22:51:06
88.227.90.8	attack	1591185228 - 06/03/2020 13:53:48 Host: 88.227.90.8/88.227.90.8 Port: 445 TCP Blocked	2020-06-03 23:09:18
123.24.188.130	attackbotsspam	5x Failed Password	2020-06-03 22:47:42
179.124.180.69	attackspambots	Jun 3 14:53:38 debian kernel: [87782.893013] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=179.124.180.69 DST=89.252.131.35 LEN=44 TOS=0x00 PREC=0x00 TTL=48 ID=46985 PROTO=TCP SPT=41930 DPT=80 WINDOW=34794 RES=0x00 SYN URGP=0	2020-06-03 23:16:40
31.133.67.58	attackbotsspam	Automatic report - Port Scan Attack	2020-06-03 23:22:23
163.172.172.177	attackbots	2020-06-03T17:28:55.560209lavrinenko.info sshd[23245]: Failed password for root from 163.172.172.177 port 34792 ssh2 2020-06-03T17:29:47.328297lavrinenko.info sshd[23254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.172.177 user=root 2020-06-03T17:29:49.144644lavrinenko.info sshd[23254]: Failed password for root from 163.172.172.177 port 52532 ssh2 2020-06-03T17:30:34.611650lavrinenko.info sshd[23294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.172.177 user=root 2020-06-03T17:30:36.212391lavrinenko.info sshd[23294]: Failed password for root from 163.172.172.177 port 42008 ssh2 ...	2020-06-03 22:53:10
13.68.158.99	attackbotsspam	Jun 3 13:43:16 vlre-nyc-1 sshd\[12719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.158.99 user=root Jun 3 13:43:18 vlre-nyc-1 sshd\[12719\]: Failed password for root from 13.68.158.99 port 47200 ssh2 Jun 3 13:47:03 vlre-nyc-1 sshd\[12800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.158.99 user=root Jun 3 13:47:04 vlre-nyc-1 sshd\[12800\]: Failed password for root from 13.68.158.99 port 53046 ssh2 Jun 3 13:50:41 vlre-nyc-1 sshd\[12882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.158.99 user=root ...	2020-06-03 23:10:14
191.243.146.59	attackspam	20/6/3@07:53:57: FAIL: Alarm-Network address from=191.243.146.59 20/6/3@07:53:57: FAIL: Alarm-Network address from=191.243.146.59 ...	2020-06-03 23:03:36
222.186.175.217	attack	Too many connections or unauthorized access detected from Arctic banned ip	2020-06-03 23:01:42
51.75.124.215	attack	Jun 3 14:57:03 nextcloud sshd\[26858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215 user=root Jun 3 14:57:06 nextcloud sshd\[26858\]: Failed password for root from 51.75.124.215 port 45414 ssh2 Jun 3 15:00:46 nextcloud sshd\[506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215 user=root	2020-06-03 23:06:16
139.162.122.110	attack	SSH Brute Force	2020-06-03 22:42:31
193.112.213.248	attackspam	5x Failed Password	2020-06-03 22:55:02

Recently Reported IPs

14.194.144.135	94.242.76.248	200.147.70.145	198.84.233.210
85.144.212.143	197.231.143.250	22.193.21.238	126.20.163.93
79.14.145.243	147.5.147.2	55.208.241.219	85.202.51.136
196.188.136.145	244.157.153.93	51.143.90.180	192.241.218.92
13.68.152.200	185.191.171.15	52.136.121.186	217.219.173.200