Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT. First Media TBK

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
2019-04-10 01:18:19 H=\(fm-dyn-139-193-214-10.fast.net.id\) \[139.193.214.10\]:25038 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-04-10 01:18:33 H=\(fm-dyn-139-193-214-10.fast.net.id\) \[139.193.214.10\]:25135 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-04-10 01:18:39 H=\(fm-dyn-139-193-214-10.fast.net.id\) \[139.193.214.10\]:25195 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-04-10 09:59:06 1hE88P-0005cr-Bp SMTP connection from \(fm-dyn-139-193-214-10.fast.net.id\) \[139.193.214.10\]:17713 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-04-10 09:59:17 1hE88a-0005dA-TC SMTP connection from \(fm-dyn-139-193-214-10.fast.net.id\) \[139.193.214.10\]:17802 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-04-10 09:59:29 1hE88n-0005dP-4D SMTP connection from \(fm-dyn-139-193-214-10.fast.net.id
...
2020-02-05 01:03:25
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.193.214.10
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45573
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.193.214.10.			IN	A

;; AUTHORITY SECTION:
.			432	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020400 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 01:03:20 CST 2020
;; MSG SIZE  rcvd: 118
Host info
10.214.193.139.in-addr.arpa domain name pointer fm-dyn-139-193-214-10.fast.net.id.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
10.214.193.139.in-addr.arpa	name = fm-dyn-139-193-214-10.fast.net.id.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
212.224.108.130 attackbotsspam
Jul 16 01:09:49 s64-1 sshd[4145]: Failed password for minecraft from 212.224.108.130 port 59757 ssh2
Jul 16 01:15:44 s64-1 sshd[4305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.224.108.130
Jul 16 01:15:46 s64-1 sshd[4305]: Failed password for invalid user radio from 212.224.108.130 port 57766 ssh2
...
2019-07-16 07:22:07
80.227.12.38 attackbots
Jul 16 00:23:02 microserver sshd[64709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.227.12.38  user=root
Jul 16 00:23:05 microserver sshd[64709]: Failed password for root from 80.227.12.38 port 48612 ssh2
Jul 16 00:28:37 microserver sshd[1792]: Invalid user sims from 80.227.12.38 port 48798
Jul 16 00:28:37 microserver sshd[1792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.227.12.38
Jul 16 00:28:40 microserver sshd[1792]: Failed password for invalid user sims from 80.227.12.38 port 48798 ssh2
Jul 16 00:39:40 microserver sshd[6166]: Invalid user po from 80.227.12.38 port 48442
Jul 16 00:39:40 microserver sshd[6166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.227.12.38
Jul 16 00:39:42 microserver sshd[6166]: Failed password for invalid user po from 80.227.12.38 port 48442 ssh2
Jul 16 00:45:14 microserver sshd[8763]: Invalid user teamspeak3 from 80.227.12.38 port 48632
Ju
2019-07-16 07:15:06
58.240.242.179 attackspambots
5500/tcp 5500/tcp 5500/tcp...
[2019-07-09/15]6pkt,1pt.(tcp)
2019-07-16 07:21:33
189.91.5.88 attackspambots
2019-07-15 18:25:52 plain_virtual_exim authenticator failed for ([189.91.5.88]) [189.91.5.88]: 535 Incorrect authentication data


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=189.91.5.88
2019-07-16 06:52:06
185.175.93.21 attack
port scan/probe/communication attempt
2019-07-16 06:56:30
82.63.24.83 attack
port scan and connect, tcp 8080 (http-proxy)
2019-07-16 06:35:49
197.248.38.174 attackspambots
445/tcp 445/tcp 445/tcp...
[2019-05-17/07-15]11pkt,1pt.(tcp)
2019-07-16 06:35:15
120.205.45.252 attackspam
Jul 15 20:48:03 ubuntu-2gb-nbg1-dc3-1 sshd[16915]: Failed password for root from 120.205.45.252 port 65455 ssh2
...
2019-07-16 06:54:01
54.37.154.254 attackbotsspam
Jul 15 22:34:55 mail sshd\[19981\]: Invalid user chef from 54.37.154.254 port 36905
Jul 15 22:34:55 mail sshd\[19981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.154.254
Jul 15 22:34:57 mail sshd\[19981\]: Failed password for invalid user chef from 54.37.154.254 port 36905 ssh2
Jul 15 22:39:16 mail sshd\[20007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.154.254  user=sys
Jul 15 22:39:18 mail sshd\[20007\]: Failed password for sys from 54.37.154.254 port 35144 ssh2
...
2019-07-16 06:50:59
39.59.37.56 attackbotsspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-15 15:26:31,707 INFO [amun_request_handler] PortScan Detected on Port: 445 (39.59.37.56)
2019-07-16 07:13:52
72.90.93.218 attackbots
Jul 15 10:29:06 shadeyouvpn sshd[27998]: Address 72.90.93.218 maps to pool-72-90-93-218.syrcny.fios.verizon.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jul 15 10:29:06 shadeyouvpn sshd[27998]: Invalid user lx from 72.90.93.218
Jul 15 10:29:06 shadeyouvpn sshd[27998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.90.93.218 
Jul 15 10:29:08 shadeyouvpn sshd[27998]: Failed password for invalid user lx from 72.90.93.218 port 58062 ssh2
Jul 15 10:29:08 shadeyouvpn sshd[27998]: Received disconnect from 72.90.93.218: 11: Bye Bye [preauth]
Jul 15 10:54:53 shadeyouvpn sshd[17168]: Address 72.90.93.218 maps to pool-72-90-93-218.syrcny.fios.verizon.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jul 15 10:54:53 shadeyouvpn sshd[17168]: Invalid user ppldtepe from 72.90.93.218
Jul 15 10:54:53 shadeyouvpn sshd[17168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui........
-------------------------------
2019-07-16 06:50:32
162.243.144.22 attackspam
Portscan or hack attempt detected by psad/fwsnort
2019-07-16 06:41:01
189.211.142.184 attack
445/tcp 445/tcp 445/tcp...
[2019-05-31/07-15]13pkt,1pt.(tcp)
2019-07-16 06:37:18
125.161.129.3 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-15 15:26:10,660 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.161.129.3)
2019-07-16 07:15:58
51.38.186.207 attackbots
Jul 16 00:27:42 OPSO sshd\[21835\]: Invalid user prasad from 51.38.186.207 port 38252
Jul 16 00:27:42 OPSO sshd\[21835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.186.207
Jul 16 00:27:44 OPSO sshd\[21835\]: Failed password for invalid user prasad from 51.38.186.207 port 38252 ssh2
Jul 16 00:32:09 OPSO sshd\[22554\]: Invalid user sysomc from 51.38.186.207 port 35144
Jul 16 00:32:09 OPSO sshd\[22554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.186.207
2019-07-16 06:34:54

Recently Reported IPs

94.1.114.58 168.194.176.165 139.192.86.126 139.192.41.240
85.209.3.143 139.192.234.141 139.190.31.79 139.180.212.134
139.180.137.38 139.0.50.226 138.97.176.144 138.94.254.179
138.94.59.216 138.68.142.122 138.68.133.161 138.68.131.109
138.68.130.170 45.32.126.7 130.198.193.156 138.219.218.136