Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
103.40.132.19 attackbotsspam
CMS (WordPress or Joomla) login attempt.
2020-08-26 17:58:02
103.40.135.130 attackbots
Unauthorised access (Aug  9) SRC=103.40.135.130 LEN=52 TTL=115 ID=28760 DF TCP DPT=445 WINDOW=8192 SYN
2020-08-09 21:01:44
103.40.132.19 attack
(imapd) Failed IMAP login from 103.40.132.19 (TH/Thailand/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul  7 16:25:46 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=103.40.132.19, lip=5.63.12.44, TLS: Connection closed, session=
2020-07-08 03:26:26
103.40.132.19 attackspambots
Brute force attempt
2020-07-04 12:17:10
103.40.132.19 attackbots
'IP reached maximum auth failures for a one day block'
2020-06-20 17:07:11
103.40.135.130 attackbots
Port scan on 1 port(s): 445
2020-04-17 12:29:27
103.40.132.22 attackbots
Mar 12 04:55:32 mail sshd[11816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.40.132.22
Mar 12 04:55:35 mail sshd[11816]: Failed password for invalid user tech from 103.40.132.22 port 52650 ssh2
...
2020-03-12 13:05:40
103.40.135.131 attackbotsspam
Icarus honeypot on github
2020-03-10 14:32:47
103.40.135.130 attack
Honeypot attack, port: 445, PTR: PTR record not found
2019-11-12 20:05:18
103.40.132.19 attackbots
Automatic report - Banned IP Access
2019-10-14 15:45:18
103.40.132.19 attackspam
Automatic report - Banned IP Access
2019-09-14 20:36:00
103.40.132.19 attack
Automatic report - Banned IP Access
2019-08-22 05:18:58
103.40.135.130 attack
Unauthorized connection attempt from IP address 103.40.135.130 on Port 445(SMB)
2019-08-14 11:33:46
103.40.132.19 attackspam
Brute force attempt
2019-07-07 07:09:27
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '103.40.12.0 - 103.40.15.255'

% Abuse contact for '103.40.12.0 - 103.40.15.255' is '2851391893@qq.com'

inetnum:        103.40.12.0 - 103.40.15.255
netname:        PGYIDC
descr:          Suqian Pugongying Network Service Co.,Ltd
country:        CN
admin-c:        YW5840-AP
tech-c:         YL3404-AP
abuse-c:        AC1601-AP
status:         ALLOCATED PORTABLE
mnt-by:         MAINT-CNNIC-AP
mnt-irt:        IRT-PGYIDC-CN
mnt-lower:      MAINT-CNNIC-AP
mnt-routes:     MAINT-CNCGROUP-RR
last-modified:  2023-11-28T00:56:29Z
source:         APNIC

irt:            IRT-PGYIDC-CN
address:        Room 1301,
address:        Xingfu Suqing Jiangsu
e-mail:         2851391893@qq.com
abuse-mailbox:  2851391893@qq.com
admin-c:        YW5840-AP
tech-c:         YL3404-AP
auth:           # Filtered
mnt-by:         MAINT-CNNIC-AP
last-modified:  2025-11-18T00:34:59Z
source:         APNIC

role:           ABUSE CNNICCN
country:        ZZ
address:        Beijing, China
phone:          +000000000
e-mail:         ipas@cnnic.cn
admin-c:        IP50-AP
tech-c:         IP50-AP
nic-hdl:        AC1601-AP
remarks:        Generated from irt object IRT-CNNIC-CN
remarks:        ipas@cnnic.cn is invalid
abuse-mailbox:  ipas@cnnic.cn
mnt-by:         APNIC-ABUSE
last-modified:  2025-09-19T17:20:32Z
source:         APNIC

person:         Yang Long
address:        Room 1301,#3, Yijinghuating S.R.
address:        Xingfu Suqing Jiangsu
country:        CN
phone:          +86-0527-84224055
e-mail:         yangleon@vip.qq.com
nic-hdl:        YL3404-AP
mnt-by:         MAINT-CNNIC-AP
last-modified:  2014-08-20T02:40:01Z
source:         APNIC

person:         Yang Wenshan
address:        Room 1301,#3, Yijinghuating S.R.
address:        Xingfu Suqing Jiangsu
country:        CN
phone:          +86-0527-84224055
e-mail:         ywssl@tom.com
nic-hdl:        YW5840-AP
mnt-by:         MAINT-CNNIC-AP
last-modified:  2014-08-20T02:40:01Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.40.13.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16411
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.40.13.52.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026071403 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 15 11:03:13 CST 2026
;; MSG SIZE  rcvd: 105
Host info
Host 52.13.40.103.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.13.40.103.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
165.227.140.123 attack
Invalid user ming from 165.227.140.123 port 50952
2019-06-21 20:48:51
221.4.128.114 attackbots
Brute force attempt
2019-06-21 20:42:35
45.55.12.248 attackbotsspam
Invalid user shit from 45.55.12.248 port 33538
2019-06-21 20:56:28
54.39.98.253 attackbots
Jun 21 12:55:35 host sshd\[49366\]: Invalid user testsite from 54.39.98.253 port 44952
Jun 21 12:55:37 host sshd\[49366\]: Failed password for invalid user testsite from 54.39.98.253 port 44952 ssh2
...
2019-06-21 20:55:46
113.163.87.242 attackspam
TCP port 445 (SMB) attempt blocked by firewall. [2019-06-21 11:14:38]
2019-06-21 21:01:54
218.98.32.150 attack
phpmyadmin
2019-06-21 20:29:08
40.118.44.199 attackbotsspam
/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2019-06-21 20:24:28
139.0.170.30 attackspambots
Autoban   139.0.170.30 AUTH/CONNECT
2019-06-21 20:46:35
41.42.114.150 attack
19/6/21@05:17:13: FAIL: IoT-SSH address from=41.42.114.150
...
2019-06-21 20:20:21
141.98.80.31 attackspam
Jun 21 14:22:59 srv-4 sshd\[26266\]: Invalid user admin from 141.98.80.31
Jun 21 14:22:59 srv-4 sshd\[26266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.80.31
Jun 21 14:22:59 srv-4 sshd\[26267\]: Invalid user admin from 141.98.80.31
Jun 21 14:22:59 srv-4 sshd\[26267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.80.31
...
2019-06-21 20:31:22
62.173.149.176 attack
Jun 21 11:16:51 [munged] sshd[31378]: Invalid user         2019-06-21 20:29:44
129.204.200.85 attackspambots
SSH/22 MH Probe, BF, Hack -
2019-06-21 20:26:38
113.156.28.4 attackspambots
2222/tcp
[2019-06-21]1pkt
2019-06-21 20:33:44
113.189.135.88 attack
TCP Port: 25 _    invalid blocked abuseat-org barracudacentral _  _  _ _ (330)
2019-06-21 20:28:16
178.128.119.134 attackspambots
Jun 19 14:21:37 pi01 sshd[29930]: Connection from 178.128.119.134 port 54806 on 192.168.1.10 port 22
Jun 19 14:21:39 pi01 sshd[29930]: Invalid user discord from 178.128.119.134 port 54806
Jun 19 14:21:39 pi01 sshd[29930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.119.134
Jun 19 14:21:41 pi01 sshd[29930]: Failed password for invalid user discord from 178.128.119.134 port 54806 ssh2
Jun 19 14:21:41 pi01 sshd[29930]: Received disconnect from 178.128.119.134 port 54806:11: Bye Bye [preauth]
Jun 19 14:21:41 pi01 sshd[29930]: Disconnected from 178.128.119.134 port 54806 [preauth]
Jun 19 14:25:58 pi01 sshd[30027]: Connection from 178.128.119.134 port 41658 on 192.168.1.10 port 22
Jun 19 14:25:59 pi01 sshd[30027]: Invalid user kong from 178.128.119.134 port 41658
Jun 19 14:25:59 pi01 sshd[30027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.119.134
Jun 19 14:26:01 pi01 sshd[........
-------------------------------
2019-06-21 21:09:58

Recently Reported IPs

40.124.173.157 194.164.57.119 2606:4700:10::6816:4413 52.91.27.64
34.204.50.181 110.90.229.215 65.111.25.31 54.208.186.172
44.203.114.235 2606:4700:10::6814:8873 115.237.31.95 35.192.232.168
142.249.36.163 20.220.9.199 192.161.49.2 62.210.142.175
110.43.37.145 2606:4700:10::6814:4666 2606:4700:10::6816:2174 14.212.127.100