13.92.139.102 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	(pop3d) Failed POP3 login from 13.92.139.102 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 1 08:24:14 ir1 dovecot[566034]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=13.92.139.102, lip=5.63.12.44, session=	2020-04-01 14:04:26

Type

Details

Datetime

attackspambots

(pop3d) Failed POP3 login from 13.92.139.102 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr  1 08:24:14 ir1 dovecot[566034]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=13.92.139.102, lip=5.63.12.44, session=

2020-04-01 14:04:26

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.92.139.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39913
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;13.92.139.102.			IN	A

;; AUTHORITY SECTION:
.			317	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020033102 1800 900 604800 86400

;; Query time: 92 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 01 14:04:21 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 102.139.92.13.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 102.139.92.13.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.40.201.73	attack	$f2bV_matches	2020-04-01 12:22:35
45.95.168.247	attack	$f2bV_matches	2020-04-01 12:14:22
112.85.42.188	attackspam	04/01/2020-00:12:47.840525 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan	2020-04-01 12:15:07
45.227.255.119	attackbots	port scan and connect, tcp 22 (ssh)	2020-04-01 12:41:26
165.227.94.166	attackbots	165.227.94.166 - - [01/Apr/2020:07:18:10 +0300] "POST /wp-login.php HTTP/1.1" 200 2790 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-01 12:44:12
137.117.81.135	attackbots	Apr 1 03:53:55 ws26vmsma01 sshd[44395]: Failed password for root from 137.117.81.135 port 35652 ssh2 ...	2020-04-01 12:16:50
185.234.217.184	attackspambots	Apr 1 05:56:42 debian-2gb-nbg1-2 kernel: \[7972452.129937\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.234.217.184 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=42952 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0	2020-04-01 12:12:26
92.63.194.59	attack	Apr 1 06:19:22 vps647732 sshd[31445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.59 Apr 1 06:19:23 vps647732 sshd[31445]: Failed password for invalid user admin from 92.63.194.59 port 38299 ssh2 ...	2020-04-01 12:32:42
106.54.101.235	attackbots	Apr 1 05:40:23 ns382633 sshd\[10682\]: Invalid user xc from 106.54.101.235 port 54052 Apr 1 05:40:23 ns382633 sshd\[10682\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.101.235 Apr 1 05:40:25 ns382633 sshd\[10682\]: Failed password for invalid user xc from 106.54.101.235 port 54052 ssh2 Apr 1 05:56:30 ns382633 sshd\[13657\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.101.235 user=root Apr 1 05:56:32 ns382633 sshd\[13657\]: Failed password for root from 106.54.101.235 port 39446 ssh2	2020-04-01 12:17:51
92.63.194.90	attackspam	Apr 1 06:19:29 vps647732 sshd[31447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.90 Apr 1 06:19:31 vps647732 sshd[31447]: Failed password for invalid user 1234 from 92.63.194.90 port 57220 ssh2 ...	2020-04-01 12:25:02
178.62.21.80	attackbots	Apr 1 06:25:23 vpn01 sshd[17907]: Failed password for root from 178.62.21.80 port 56694 ssh2 Apr 1 06:31:54 vpn01 sshd[18096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.21.80 ...	2020-04-01 12:38:09
148.77.14.106	attackspambots	Apr 1 05:48:11 srv01 sshd[11236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.77.14.106 user=root Apr 1 05:48:13 srv01 sshd[11236]: Failed password for root from 148.77.14.106 port 65368 ssh2 Apr 1 05:52:24 srv01 sshd[11511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.77.14.106 user=root Apr 1 05:52:26 srv01 sshd[11511]: Failed password for root from 148.77.14.106 port 63786 ssh2 Apr 1 05:56:32 srv01 sshd[11773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.77.14.106 user=root Apr 1 05:56:35 srv01 sshd[11773]: Failed password for root from 148.77.14.106 port 18285 ssh2 ...	2020-04-01 12:16:27
51.68.84.36	attack	Automatic report - SSH Brute-Force Attack	2020-04-01 12:28:00
185.56.153.229	attackbotsspam	Mar 31 23:56:26 mail sshd\[3524\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.56.153.229 user=root ...	2020-04-01 12:20:47
120.68.244.205	attack	trying to access non-authorized port	2020-04-01 12:42:21

Recently Reported IPs

162.217.167.70	210.246.138.85	163.238.20.114	51.84.55.186
150.194.38.148	62.97.44.33	198.65.12.118	43.10.222.205
35.36.58.163	164.156.127.81	49.56.93.77	118.89.60.105
223.15.146.235	172.104.235.73	121.148.0.153	125.234.134.225
105.83.144.5	180.241.45.167	61.65.249.152	77.81.191.142