103.16.198.139

Basic Info

City: Jakarta

Region: Jakarta

Country: Indonesia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.16.198.91	attackbotsspam	Jul 10 05:38:15 ajax sshd[9592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.16.198.91 Jul 10 05:38:17 ajax sshd[9592]: Failed password for invalid user student01 from 103.16.198.91 port 64487 ssh2	2020-07-10 15:26:41

Type

Details

Datetime

103.16.198.91

attackbotsspam

Jul 10 05:38:15 ajax sshd[9592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.16.198.91 
Jul 10 05:38:17 ajax sshd[9592]: Failed password for invalid user student01 from 103.16.198.91 port 64487 ssh2

2020-07-10 15:26:41

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.16.198.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30153
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.16.198.139.			IN	A

;; AUTHORITY SECTION:
.			378	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021602 1800 900 604800 86400

;; Query time: 77 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 11:15:27 CST 2022
;; MSG SIZE  rcvd: 107

Host info

139.198.16.103.in-addr.arpa domain name pointer eidelweisshare.ardetamedia.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.198.16.103.in-addr.arpa	name = eidelweisshare.ardetamedia.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.40.243.99	attackbots	Invalid user nick from 45.40.243.99 port 53860	2020-09-04 17:48:17
162.142.125.35	attackspam	Automatic report - Banned IP Access	2020-09-04 17:44:34
103.145.12.40	attackbotsspam	[2020-09-04 05:57:33] NOTICE[1194][C-00000457] chan_sip.c: Call from '' (103.145.12.40:61977) to extension '501146812420166' rejected because extension not found in context 'public'. [2020-09-04 05:57:33] SECURITY[1233] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-04T05:57:33.773-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="501146812420166",SessionID="0x7f2ddc0bf9a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.40/61977",ACLName="no_extension_match" [2020-09-04 06:03:38] NOTICE[1194][C-00000460] chan_sip.c: Call from '' (103.145.12.40:61784) to extension '01146812420166' rejected because extension not found in context 'public'. [2020-09-04 06:03:38] SECURITY[1233] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-04T06:03:38.994-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146812420166",SessionID="0x7f2ddc00cc78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/10 ...	2020-09-04 18:06:21
124.123.177.102	attackbots	Sep 3 18:45:11 mellenthin postfix/smtpd[20438]: NOQUEUE: reject: RCPT from unknown[124.123.177.102]: 554 5.7.1 Service unavailable; Client host [124.123.177.102] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/124.123.177.102; from= to= proto=ESMTP helo=	2020-09-04 17:56:10
113.190.34.227	attack	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-09-04 18:07:39
42.225.147.38	attack	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root	2020-09-04 17:51:05
123.206.33.56	attack	Sep 4 11:05:31 melroy-server sshd[10043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.33.56 Sep 4 11:05:34 melroy-server sshd[10043]: Failed password for invalid user perform from 123.206.33.56 port 58378 ssh2 ...	2020-09-04 17:40:34
177.136.39.254	attackbotsspam	Sep 4 10:29:41 nextcloud sshd\[21845\]: Invalid user joanna from 177.136.39.254 Sep 4 10:29:41 nextcloud sshd\[21845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.136.39.254 Sep 4 10:29:43 nextcloud sshd\[21845\]: Failed password for invalid user joanna from 177.136.39.254 port 7074 ssh2	2020-09-04 18:04:18
185.127.24.64	attack	Sep 4 03:50:32 server postfix/smtps/smtpd[26409]: warning: unknown[185.127.24.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 4 06:16:04 server postfix/smtps/smtpd[4581]: warning: unknown[185.127.24.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 4 07:47:56 server postfix/smtps/smtpd[11322]: warning: unknown[185.127.24.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-09-04 18:02:50
222.186.175.151	attackbotsspam	Sep 4 12:05:55 vps639187 sshd\[25477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root Sep 4 12:05:57 vps639187 sshd\[25477\]: Failed password for root from 222.186.175.151 port 12286 ssh2 Sep 4 12:05:59 vps639187 sshd\[25477\]: Failed password for root from 222.186.175.151 port 12286 ssh2 ...	2020-09-04 18:08:00
118.186.197.82	attackspambots	SQL	2020-09-04 17:50:13
162.243.130.35	attack	firewall-block, port(s): 3011/tcp	2020-09-04 17:41:17
211.114.131.193	attackspam	1599151509 - 09/03/2020 23:45:09 Host: 211.114.131.193/211.114.131.193 Port: 23 TCP Blocked ...	2020-09-04 17:56:58
176.248.187.114	attackspam	Port Scan: TCP/443	2020-09-04 17:46:50
170.84.163.206	attack	Sep 3 18:44:57 mellenthin postfix/smtpd[20408]: NOQUEUE: reject: RCPT from unknown[170.84.163.206]: 554 5.7.1 Service unavailable; Client host [170.84.163.206] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/170.84.163.206; from= to= proto=ESMTP helo=<206.163.84.170.ampernet.com.br>	2020-09-04 18:06:48

Recently Reported IPs

103.159.85.189	103.16.198.39	103.16.199.143	103.16.61.37
103.16.72.114	103.16.74.234	103.16.74.246	103.16.79.44
103.160.77.194	103.160.77.195	103.160.77.196	103.160.84.184
103.160.85.100	103.160.85.134	103.160.85.98	103.160.85.99
217.109.89.48	103.160.89.236	103.162.194.24	103.162.73.2