184.105.139.102

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Hurricane Electric LLC

Hostname: unknown

Organization: Hurricane Electric LLC

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	2323/tcp 11211/tcp 7547/tcp... [2019-11-18/2020-01-09]35pkt,13pt.(tcp),2pt.(udp)	2020-01-10 18:39:24
attack	Scanning random ports - tries to find possible vulnerable services	2019-11-30 19:32:56
attackspam	30005/tcp 445/tcp 23/tcp... [2019-08-31/10-30]39pkt,9pt.(tcp),2pt.(udp)	2019-10-30 14:01:16
attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-10-16 22:15:23
attack	Automated reporting of bulk port scanning	2019-08-30 03:13:31
attackbots	Honeypot hit.	2019-08-14 19:04:24
attackspam	3389BruteforceFW23	2019-07-16 02:33:36
attackbotsspam	firewall-block, port(s): 123/udp	2019-07-04 18:43:43

Comments on same subnet:

IP	Type	Details	Datetime
184.105.139.105	attackproxy	Compromised IP	2024-05-09 23:09:39
184.105.139.109	attackproxy	Vulnerability Scanner	2024-04-30 12:59:43
184.105.139.70	attack	Vulnerability Scanner	2024-04-20 00:30:49
184.105.139.90	botsattackproxy	Ddos bot	2024-04-20 00:26:45
184.105.139.68	attack	Vulnerability Scanner	2024-04-10 01:16:38
184.105.139.69	proxy	VPN fraud	2023-05-15 19:23:33
184.105.139.120	proxy	VPN fraud	2023-05-10 13:17:43
184.105.139.103	proxy	VPN fraud	2023-03-20 14:02:25
184.105.139.99	proxy	VPN fraud	2023-03-20 13:57:09
184.105.139.74	proxy	VPN	2023-01-30 14:03:54
184.105.139.86	proxy	VPN	2023-01-19 13:51:12
184.105.139.124	attackproxy	VPN	2022-12-29 20:40:24
184.105.139.124	attack	VPN	2022-12-29 20:40:21
184.105.139.126	proxy	Attack VPN	2022-12-09 13:59:02
184.105.139.70	attackbotsspam	TCP (SYN) 184.105.139.70:51140 -> port 5900, len 40	2020-10-14 04:24:47

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 184.105.139.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32000
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;184.105.139.102.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041601 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Wed Apr 17 10:35:52 +08 2019
;; MSG SIZE  rcvd: 119

Host info

102.139.105.184.in-addr.arpa is an alias for 102.64-26.139.105.184.in-addr.arpa.
102.64-26.139.105.184.in-addr.arpa domain name pointer scan-04h.shadowserver.org.

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
102.139.105.184.in-addr.arpa	canonical name = 102.64-26.139.105.184.in-addr.arpa.
102.64-26.139.105.184.in-addr.arpa	name = scan-04h.shadowserver.org.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
184.154.189.94	attackbots	UDP 184.154.189.94:32957 -> port 53, len 58	2020-10-04 22:08:10
167.99.66.2	attack	Found on Github Combined on 3 lists / proto=6 . srcport=42890 . dstport=19208 . (1886)	2020-10-04 22:07:35
192.35.169.22	attackspam	TCP (SYN) 192.35.169.22:43875 -> port 143, len 44	2020-10-04 22:02:45
83.12.171.68	attackbotsspam	Oct 4 12:11:18 sip sshd[1812098]: Failed password for invalid user gitlab-runner from 83.12.171.68 port 49398 ssh2 Oct 4 12:15:04 sip sshd[1812149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.12.171.68 user=root Oct 4 12:15:06 sip sshd[1812149]: Failed password for root from 83.12.171.68 port 40007 ssh2 ...	2020-10-04 21:51:01
45.142.120.53	attackbotsspam	Oct 4 14:21:51 nlmail01.srvfarm.net postfix/smtpd[387770]: warning: unknown[45.142.120.53]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 14:21:59 nlmail01.srvfarm.net postfix/smtpd[387912]: warning: unknown[45.142.120.53]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 14:22:01 nlmail01.srvfarm.net postfix/smtpd[387915]: warning: unknown[45.142.120.53]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 14:22:04 nlmail01.srvfarm.net postfix/smtpd[387770]: warning: unknown[45.142.120.53]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 14:22:10 nlmail01.srvfarm.net postfix/smtpd[387920]: warning: unknown[45.142.120.53]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-10-04 21:35:39
165.232.106.249	attackspambots	Oct 3 23:35:00 jane sshd[21582]: Failed password for root from 165.232.106.249 port 50264 ssh2 ...	2020-10-04 21:45:09
121.241.244.92	attackbotsspam	Oct 4 13:57:48 dev0-dcde-rnet sshd[30119]: Failed password for root from 121.241.244.92 port 42564 ssh2 Oct 4 14:12:18 dev0-dcde-rnet sshd[30238]: Failed password for root from 121.241.244.92 port 54354 ssh2 Oct 4 14:15:58 dev0-dcde-rnet sshd[30244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.241.244.92	2020-10-04 22:06:55
111.72.193.182	attackspambots	Oct 4 00:53:58 srv01 postfix/smtpd\[30998\]: warning: unknown\[111.72.193.182\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 00:54:10 srv01 postfix/smtpd\[30998\]: warning: unknown\[111.72.193.182\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 00:54:26 srv01 postfix/smtpd\[30998\]: warning: unknown\[111.72.193.182\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 00:54:45 srv01 postfix/smtpd\[30998\]: warning: unknown\[111.72.193.182\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 00:54:57 srv01 postfix/smtpd\[30998\]: warning: unknown\[111.72.193.182\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-10-04 21:45:56
208.109.11.224	attackspambots	208.109.11.224 - - [04/Oct/2020:09:42:01 +0100] "POST /wp-login.php HTTP/1.1" 200 2682 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 208.109.11.224 - - [04/Oct/2020:09:42:05 +0100] "POST /wp-login.php HTTP/1.1" 200 2638 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 208.109.11.224 - - [04/Oct/2020:09:42:11 +0100] "POST /wp-login.php HTTP/1.1" 200 2640 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-04 22:11:51
123.149.215.93	attackbots	(sshd) Failed SSH login from 123.149.215.93 (CN/China/Henan/Yingchuan/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 4 07:52:18 atlas sshd[20090]: Invalid user trace from 123.149.215.93 port 13122 Oct 4 07:52:20 atlas sshd[20090]: Failed password for invalid user trace from 123.149.215.93 port 13122 ssh2 Oct 4 08:07:43 atlas sshd[24475]: Invalid user hb from 123.149.215.93 port 13074 Oct 4 08:07:45 atlas sshd[24475]: Failed password for invalid user hb from 123.149.215.93 port 13074 ssh2 Oct 4 08:10:56 atlas sshd[25765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.149.215.93 user=root	2020-10-04 21:50:16
52.231.92.23	attackspambots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-10-04 22:16:09
192.241.222.11	attack	21	2020-10-04 21:40:38
40.73.103.7	attack	TCP (SYN) 40.73.103.7:43932 -> port 10312, len 44	2020-10-04 21:51:33
193.169.254.109	attackbots	2020-10-04T04:37:39+02:00 exim[22421]: fixed_login authenticator failed for (217.116.47.120) [193.169.254.109]: 535 Incorrect authentication data (set_id=connie)	2020-10-04 21:48:58
40.69.101.92	attack	Oct 3 22:12:31 web01.agentur-b-2.de postfix/smtpd[1067123]: NOQUEUE: reject: RCPT from unknown[40.69.101.92]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:14:31 web01.agentur-b-2.de postfix/smtpd[1067123]: NOQUEUE: reject: RCPT from unknown[40.69.101.92]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:17:17 web01.agentur-b-2.de postfix/smtpd[1068527]: NOQUEUE: reject: RCPT from unknown[40.69.101.92]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:18:49 web01.agentur-b-2.de postfix/smtpd[1068527]: NOQUEUE: reject: RCPT from unknown[40.69.101.92]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo=	2020-10-04 21:36:27

Recently Reported IPs

85.214.55.235	70.55.255.94	5.8.18.90	197.237.87.7
163.172.115.188	200.233.212.26	125.122.118.150	138.197.131.158
210.13.193.181	121.134.63.161	198.199.123.15	2.50.159.8
109.121.161.20	210.245.90.205	162.243.97.113	60.166.75.252
67.202.83.121	178.62.236.202	187.35.247.3	165.22.143.216