139.9.34.13 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Huawei Public Cloud Service

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Connection by 139.9.34.13 on port: 2020 got caught by honeypot at 11/13/2019 5:30:03 AM	2019-11-13 14:56:15
attack	Connection by 139.9.34.13 on port: 2020 got caught by honeypot at 11/11/2019 5:22:46 AM	2019-11-11 19:43:05

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.9.34.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36552
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.9.34.13.			IN	A

;; AUTHORITY SECTION:
.			290	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111100 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 11 19:43:00 CST 2019
;; MSG SIZE  rcvd: 115

Host info

13.34.9.139.in-addr.arpa domain name pointer ecs-139-9-34-13.compute.hwclouds-dns.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
13.34.9.139.in-addr.arpa	name = ecs-139-9-34-13.compute.hwclouds-dns.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.215.221.124	attackspam	Invalid user staff from 103.215.221.124 port 41217	2020-08-27 15:34:16
212.129.25.123	attackspambots	212.129.25.123 - - [27/Aug/2020:07:34:06 +0100] "POST /wp-login.php HTTP/1.1" 200 2216 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 212.129.25.123 - - [27/Aug/2020:07:34:07 +0100] "POST /wp-login.php HTTP/1.1" 200 2182 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 212.129.25.123 - - [27/Aug/2020:07:34:07 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-27 15:36:43
218.92.0.210	attackbotsspam	2020-08-27T06:16:16.752679server.espacesoutien.com sshd[505]: Failed password for root from 218.92.0.210 port 40408 ssh2 2020-08-27T06:16:20.128667server.espacesoutien.com sshd[505]: Failed password for root from 218.92.0.210 port 40408 ssh2 2020-08-27T06:17:27.740411server.espacesoutien.com sshd[521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.210 user=root 2020-08-27T06:17:29.853786server.espacesoutien.com sshd[521]: Failed password for root from 218.92.0.210 port 45606 ssh2 ...	2020-08-27 15:31:37
109.70.100.25	attackspam	localhost 109.70.100.25 - - [27/Aug/2020:11:48:43 +0800] "GET /wp-json/wp/v2/users/1 HTTP/1.1" 404 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0" VLOG=- localhost 109.70.100.25 - - [27/Aug/2020:11:48:43 +0800] "GET /wp-json/wp/v2/users/2 HTTP/1.1" 404 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0" VLOG=- localhost 109.70.100.25 - - [27/Aug/2020:11:48:44 +0800] "GET /wp-json/wp/v2/users/3 HTTP/1.1" 404 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0" VLOG=- localhost 109.70.100.25 - - [27/Aug/2020:11:48:44 +0800] "GET /wp-json/wp/v2/users/4 HTTP/1.1" 404 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0" VLOG=- localhost 109.70.100.25 - - [27/Aug/2020:11:48:44 +0800] "GET /wp-json/wp/v2/users/5 HTTP/1.1" 404 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0" VLOG=- localhost 109.70.100.25 - ...	2020-08-27 15:24:16
170.244.130.109	attackspambots	2020-08-26 22:38:24.291324-0500 localhost smtpd[75750]: NOQUEUE: reject: RCPT from unknown[170.244.130.109]: 554 5.7.1 Service unavailable; Client host [170.244.130.109] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/170.244.130.109; from= to= proto=ESMTP helo=	2020-08-27 15:40:57
45.136.7.195	attackspam	2020-08-26 22:47:45.019245-0500 localhost smtpd[76824]: NOQUEUE: reject: RCPT from unknown[45.136.7.195]: 554 5.7.1 Service unavailable; Client host [45.136.7.195] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=	2020-08-27 15:41:28
118.27.11.79	attack	Firewall Dropped Connection	2020-08-27 15:45:44
66.33.205.189	attackbots	Automatic report - XMLRPC Attack	2020-08-27 15:19:28
222.186.175.151	attackbots	Aug 27 06:31:33 scw-6657dc sshd[10529]: Failed password for root from 222.186.175.151 port 12768 ssh2 Aug 27 06:31:33 scw-6657dc sshd[10529]: Failed password for root from 222.186.175.151 port 12768 ssh2 Aug 27 06:31:36 scw-6657dc sshd[10529]: Failed password for root from 222.186.175.151 port 12768 ssh2 ...	2020-08-27 15:12:29
144.217.79.194	attack	[2020-08-27 02:33:14] NOTICE[1185] chan_sip.c: Registration from '' failed for '144.217.79.194:52220' - Wrong password [2020-08-27 02:33:14] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-27T02:33:14.958-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/144.217.79.194/52220",Challenge="6ccc0905",ReceivedChallenge="6ccc0905",ReceivedHash="aa2f72234ed8d2d5bbdd0936ded1fecc" [2020-08-27 02:33:14] NOTICE[1185] chan_sip.c: Registration from '' failed for '144.217.79.194:52221' - Wrong password [2020-08-27 02:33:14] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-27T02:33:14.958-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7f10c4ab1618",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/144.217.79.194 ...	2020-08-27 15:31:55
191.102.156.130	attackspam	Contact form spam	2020-08-27 15:11:51
49.234.67.23	attackbotsspam	Invalid user rustserver from 49.234.67.23 port 60482	2020-08-27 15:15:11
84.176.116.225	attackspam	Chat Spam	2020-08-27 15:16:53
182.137.62.70	attackbotsspam	spam (f2b h2)	2020-08-27 15:27:09
42.118.142.1	attack	2020-08-26 22:36:52.049113-0500 localhost smtpd[75750]: NOQUEUE: reject: RCPT from unknown[42.118.142.1]: 554 5.7.1 Service unavailable; Client host [42.118.142.1] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/42.118.142.1; from= to= proto=ESMTP helo=<[42.118.142.1]>	2020-08-27 15:43:35

Recently Reported IPs

90.219.144.8	27.109.139.150	103.43.155.10	202.137.142.68
131.221.121.128	14.187.129.172	91.92.190.219	218.39.45.93
125.22.76.25	115.164.221.138	131.255.133.218	111.231.50.90
203.109.82.104	94.45.149.101	42.112.180.93	27.105.38.135
195.158.21.148	120.244.110.242	113.225.129.214	151.243.29.200