AbuseIPDB » 103.139.170.126

103.139.170.126 was found in our database!

This IP was reported 623 times. Confidence of Abuse is 100%: ?

100%

ISP	Antarjal IT Communication Pvt Ltd
Usage Type	Fixed Line ISP
Domain Name	aitcpl.com
Country	India
City	Morjim, Goa

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 103.139.170.126

Whois 103.139.170.126

IP Abuse Reports for 103.139.170.126:

This IP address has been reported a total of 623 times from 241 distinct sources. 103.139.170.126 was first reported on June 30th 2022, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
ipcop.net	5 hours ago	Feb 10 19:32:45 router01.bongen-auto.de sshd[3097750]: Disconnected from authenticating user root 10 ... show moreFeb 10 19:32:45 router01.bongen-auto.de sshd[3097750]: Disconnected from authenticating user root 103.139.170.126 port 57216 [preauth] Feb 10 19:36:37 router01.bongen-auto.de sshd[3098303]: Disconnected from authenticating user root 103.139.170.126 port 45718 [preauth] Feb 10 19:38:50 router01.bongen-auto.de sshd[3098685]: Disconnected from authenticating user root 103.139.170.126 port 51304 [preauth] Feb 10 19:41:10 router01.bongen-auto.de sshd[3099226]: Disconnected from authenticating user root 103.139.170.126 port 56892 [preauth] Feb 10 19:43:27 router01.bongen-auto.de sshd[3099481]: Disconnected from authenticating user root 103.139.170.126 port 34248 [preauth] show less	Brute-Force
ipcop.net	25 Mar 2023	Feb 9 09:57:18 guestgw-router01.remscheid.de sshd[2923499]: Disconnected from authenticating user r ... show moreFeb 9 09:57:18 guestgw-router01.remscheid.de sshd[2923499]: Disconnected from authenticating user root 103.139.170.126 port 51566 [preauth] Feb 9 10:00:13 guestgw-router01.remscheid.de sshd[2923824]: Disconnected from authenticating user root 103.139.170.126 port 59332 [preauth] Feb 9 10:02:26 guestgw-router01.remscheid.de sshd[2924034]: Disconnected from authenticating user root 103.139.170.126 port 32814 [preauth] Feb 9 10:04:39 guestgw-router01.remscheid.de sshd[2924277]: Disconnected from authenticating user root 103.139.170.126 port 34528 [preauth] Feb 9 10:06:53 guestgw-router01.remscheid.de sshd[2924485]: Disconnected from authenticating user root 103.139.170.126 port 36242 [preauth] show less	Brute-Force
ipcop.net	25 Mar 2023	Feb 9 09:57:18 guestgw-router01.remscheid.de sshd[2923499]: Disconnected from authenticating user r ... show moreFeb 9 09:57:18 guestgw-router01.remscheid.de sshd[2923499]: Disconnected from authenticating user root 103.139.170.126 port 51566 [preauth] Feb 9 10:00:13 guestgw-router01.remscheid.de sshd[2923824]: Disconnected from authenticating user root 103.139.170.126 port 59332 [preauth] Feb 9 10:02:26 guestgw-router01.remscheid.de sshd[2924034]: Disconnected from authenticating user root 103.139.170.126 port 32814 [preauth] Feb 9 10:04:39 guestgw-router01.remscheid.de sshd[2924277]: Disconnected from authenticating user root 103.139.170.126 port 34528 [preauth] Feb 9 10:06:53 guestgw-router01.remscheid.de sshd[2924485]: Disconnected from authenticating user root 103.139.170.126 port 36242 [preauth] show less	Brute-Force
ipcop.net	25 Mar 2023	Malicious activity detected from 103.139.170.126.	Brute-Force
ipcop.net	25 Mar 2023	Malicious activity detected from 103.139.170.126.	Brute-Force
ipcop.net	24 Mar 2023	Feb 9 01:12:57 wiki.dolphin-it.de sshd[18356]: Invalid user notes from 103.139.170.126 port 47112<b ... show moreFeb 9 01:12:57 wiki.dolphin-it.de sshd[18356]: Invalid user notes from 103.139.170.126 port 47112 Feb 9 01:12:57 wiki.dolphin-it.de sshd[18356]: Disconnected from invalid user notes 103.139.170.126 port 47112 [preauth] Feb 9 01:18:06 wiki.dolphin-it.de sshd[44642]: Invalid user student7 from 103.139.170.126 port 47220 Feb 9 01:18:06 wiki.dolphin-it.de sshd[44642]: Disconnected from invalid user student7 103.139.170.126 port 47220 [preauth] Feb 9 01:20:10 wiki.dolphin-it.de sshd[44794]: Invalid user john from 103.139.170.126 port 52634 show less	Brute-Force
ipcop.net	24 Mar 2023	Feb 9 01:12:57 wiki.dolphin-it.de sshd[18356]: Invalid user notes from 103.139.170.126 port 47112<b ... show moreFeb 9 01:12:57 wiki.dolphin-it.de sshd[18356]: Invalid user notes from 103.139.170.126 port 47112 Feb 9 01:12:57 wiki.dolphin-it.de sshd[18356]: Disconnected from invalid user notes 103.139.170.126 port 47112 [preauth] Feb 9 01:18:06 wiki.dolphin-it.de sshd[44642]: Invalid user student7 from 103.139.170.126 port 47220 Feb 9 01:18:06 wiki.dolphin-it.de sshd[44642]: Disconnected from invalid user student7 103.139.170.126 port 47220 [preauth] Feb 9 01:20:10 wiki.dolphin-it.de sshd[44794]: Invalid user john from 103.139.170.126 port 52634 show less	Brute-Force
ipcop.net	24 Mar 2023	Feb 7 18:19:57 router01.gfa-steriltechnik.de sshd[1341561]: Disconnected from authenticating user r ... show moreFeb 7 18:19:57 router01.gfa-steriltechnik.de sshd[1341561]: Disconnected from authenticating user root 103.139.170.126 port 40154 [preauth] Feb 7 18:24:29 router01.gfa-steriltechnik.de sshd[1342275]: Disconnected from authenticating user root 103.139.170.126 port 34092 [preauth] Feb 7 18:26:45 router01.gfa-steriltechnik.de sshd[1342684]: Disconnected from authenticating user root 103.139.170.126 port 40400 [preauth] Feb 7 18:29:04 router01.gfa-steriltechnik.de sshd[1343174]: Disconnected from authenticating user root 103.139.170.126 port 46710 [preauth] Feb 7 18:31:21 router01.gfa-steriltechnik.de sshd[1343440]: Disconnected from authenticating user root 103.139.170.126 port 53014 [preauth] show less	Brute-Force
ipcop.net	14 Mar 2023	Jan 26 15:24:55 router01.feuchter-stiftung.de sshd[3037826]: Disconnected from authenticating user r ... show moreJan 26 15:24:55 router01.feuchter-stiftung.de sshd[3037826]: Disconnected from authenticating user root 103.139.170.126 port 40608 [preauth] Jan 26 15:30:50 router01.feuchter-stiftung.de sshd[3038633]: Disconnected from authenticating user root 103.139.170.126 port 42444 [preauth] Jan 26 15:32:17 router01.feuchter-stiftung.de sshd[3038857]: Disconnected from authenticating user root 103.139.170.126 port 41726 [preauth] Jan 26 15:33:49 router01.feuchter-stiftung.de sshd[3038988]: Disconnected from authenticating user root 103.139.170.126 port 41008 [preauth] Jan 26 15:35:13 router01.feuchter-stiftung.de sshd[3039222]: Disconnected from authenticating user root 103.139.170.126 port 40288 [preauth] show less	Brute-Force
ipcop.net	14 Mar 2023	Jan 26 15:24:55 router01.feuchter-stiftung.de sshd[3037826]: Disconnected from authenticating user r ... show moreJan 26 15:24:55 router01.feuchter-stiftung.de sshd[3037826]: Disconnected from authenticating user root 103.139.170.126 port 40608 [preauth] Jan 26 15:30:50 router01.feuchter-stiftung.de sshd[3038633]: Disconnected from authenticating user root 103.139.170.126 port 42444 [preauth] Jan 26 15:32:17 router01.feuchter-stiftung.de sshd[3038857]: Disconnected from authenticating user root 103.139.170.126 port 41726 [preauth] Jan 26 15:33:49 router01.feuchter-stiftung.de sshd[3038988]: Disconnected from authenticating user root 103.139.170.126 port 41008 [preauth] Jan 26 15:35:13 router01.feuchter-stiftung.de sshd[3039222]: Disconnected from authenticating user root 103.139.170.126 port 40288 [preauth] show less	Brute-Force
ipcop.net	14 Mar 2023	Jan 26 15:24:55 router01.feuchter-stiftung.de sshd[3037826]: Disconnected from authenticating user r ... show moreJan 26 15:24:55 router01.feuchter-stiftung.de sshd[3037826]: Disconnected from authenticating user root 103.139.170.126 port 40608 [preauth] Jan 26 15:30:50 router01.feuchter-stiftung.de sshd[3038633]: Disconnected from authenticating user root 103.139.170.126 port 42444 [preauth] Jan 26 15:32:17 router01.feuchter-stiftung.de sshd[3038857]: Disconnected from authenticating user root 103.139.170.126 port 41726 [preauth] Jan 26 15:33:49 router01.feuchter-stiftung.de sshd[3038988]: Disconnected from authenticating user root 103.139.170.126 port 41008 [preauth] Jan 26 15:35:13 router01.feuchter-stiftung.de sshd[3039222]: Disconnected from authenticating user root 103.139.170.126 port 40288 [preauth] show less	Brute-Force
novumedukacja.pl	10 Mar 2023	Feb 12 17:04:44 novum-srv2 sshd[10859]: Invalid user meliana from 103.139.170.126 port 42174 F ... show moreFeb 12 17:04:44 novum-srv2 sshd[10859]: Invalid user meliana from 103.139.170.126 port 42174 Feb 12 17:10:31 novum-srv2 sshd[11256]: Invalid user ana from 103.139.170.126 port 60570 Feb 12 17:14:50 novum-srv2 sshd[11446]: Invalid user hkim from 103.139.170.126 port 43756 ... show less	Brute-Force SSH
ThreatBook.io	16 Feb 2023	ThreatBook Intelligence: Brute Force,Dynamic IP more details on https://threatbook.io/ip/103.139.170 ... show moreThreatBook Intelligence: Brute Force,Dynamic IP more details on https://threatbook.io/ip/103.139.170.126 show less	SSH
Thomas Barth	15 Feb 2023	2023-02-15T13:33:14.927562+01:00server sshd[21968]: pam_unix(sshd:auth): authentication failure; log ... show more2023-02-15T13:33:14.927562+01:00server sshd[21968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.170.126 user=root 2023-02-15T13:33:17.127606+01:00server sshd[21968]: Failed password for root from 103.139.170.126 port 45294 ssh2 ... show less	Brute-Force SSH
Justin Catello	15 Feb 2023	103.139.170.126 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Po ... show more103.139.170.126 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 15 05:57:49 15736 sshd[22326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.178.31.231 user=root Feb 15 06:32:46 15736 sshd[26191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.170.126 user=root Feb 15 06:32:46 15736 sshd[26193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.142.53.210 user=root Feb 15 06:32:15 15736 sshd[26183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.75.203.229 user=root Feb 15 06:32:17 15736 sshd[26183]: Failed password for root from 5.75.203.229 port 52730 ssh2 IP Addresses Blocked: 189.178.31.231 (MX/Mexico/dsl-189-178-31-231-dyn.prod-infinitum.com.mx) show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩