139.194.3.173 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.194.37.38	attackbotsspam	2019-03-11 12:24:47 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35687 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-11 12:24:50 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35711 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-11 12:24:53 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35730 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-05 00:58:03
139.194.38.89	attackbotsspam	Oct 2 05:33:00 mxgate1 postfix/postscreen[4705]: CONNECT from [139.194.38.89]:52583 to [176.31.12.44]:25 Oct 2 05:33:00 mxgate1 postfix/dnsblog[5004]: addr 139.194.38.89 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 2 05:33:00 mxgate1 postfix/dnsblog[5006]: addr 139.194.38.89 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 2 05:33:00 mxgate1 postfix/dnsblog[5006]: addr 139.194.38.89 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 2 05:33:01 mxgate1 postfix/dnsblog[5021]: addr 139.194.38.89 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Oct 2 05:33:01 mxgate1 postfix/dnsblog[5005]: addr 139.194.38.89 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 2 05:33:06 mxgate1 postfix/postscreen[4705]: DNSBL rank 5 for [139.194.38.89]:52583 Oct x@x Oct 2 05:33:07 mxgate1 postfix/postscreen[4705]: HANGUP after 1.1 from [139.194.38.89]:52583 in tests after SMTP handshake Oct 2 05:33:07 mxgate1 postfix/postscreen[4705]: DISCONNECT [139.194.38.89]:52583 ........ -------------------------------	2019-10-02 14:49:45

Type

Details

Datetime

139.194.37.38

attackbotsspam

2019-03-11 12:24:47 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35687 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-11 12:24:50 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35711 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-11 12:24:53 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35730 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...

2020-02-05 00:58:03

139.194.38.89

attackbotsspam

Oct  2 05:33:00 mxgate1 postfix/postscreen[4705]: CONNECT from [139.194.38.89]:52583 to [176.31.12.44]:25
Oct  2 05:33:00 mxgate1 postfix/dnsblog[5004]: addr 139.194.38.89 listed by domain cbl.abuseat.org as 127.0.0.2
Oct  2 05:33:00 mxgate1 postfix/dnsblog[5006]: addr 139.194.38.89 listed by domain zen.spamhaus.org as 127.0.0.4
Oct  2 05:33:00 mxgate1 postfix/dnsblog[5006]: addr 139.194.38.89 listed by domain zen.spamhaus.org as 127.0.0.11
Oct  2 05:33:01 mxgate1 postfix/dnsblog[5021]: addr 139.194.38.89 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Oct  2 05:33:01 mxgate1 postfix/dnsblog[5005]: addr 139.194.38.89 listed by domain b.barracudacentral.org as 127.0.0.2
Oct  2 05:33:06 mxgate1 postfix/postscreen[4705]: DNSBL rank 5 for [139.194.38.89]:52583
Oct x@x
Oct  2 05:33:07 mxgate1 postfix/postscreen[4705]: HANGUP after 1.1 from [139.194.38.89]:52583 in tests after SMTP handshake
Oct  2 05:33:07 mxgate1 postfix/postscreen[4705]: DISCONNECT [139.194.38.89]:52583
........
-------------------------------

2019-10-02 14:49:45

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.194.3.173
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20960
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.194.3.173.			IN	A

;; AUTHORITY SECTION:
.			25	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:16:54 CST 2022
;; MSG SIZE  rcvd: 106

Host info

173.3.194.139.in-addr.arpa domain name pointer fm-dyn-139-194-3-173.fast.net.id.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
173.3.194.139.in-addr.arpa	name = fm-dyn-139-194-3-173.fast.net.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
139.59.190.69	attack	Aug 7 19:45:15 ip-172-31-62-245 sshd\[12909\]: Invalid user admin1 from 139.59.190.69\ Aug 7 19:45:17 ip-172-31-62-245 sshd\[12909\]: Failed password for invalid user admin1 from 139.59.190.69 port 37068 ssh2\ Aug 7 19:49:41 ip-172-31-62-245 sshd\[12932\]: Invalid user laura from 139.59.190.69\ Aug 7 19:49:44 ip-172-31-62-245 sshd\[12932\]: Failed password for invalid user laura from 139.59.190.69 port 33778 ssh2\ Aug 7 19:54:12 ip-172-31-62-245 sshd\[12942\]: Invalid user teamspeak3 from 139.59.190.69\	2019-08-08 06:54:17
68.183.148.78	attackspam	Automatic report - Banned IP Access	2019-08-08 06:53:00
43.228.71.147	attackbots	19/8/7@13:36:11: FAIL: Alarm-Intrusion address from=43.228.71.147 ...	2019-08-08 06:41:26
91.227.227.2	attack	port scan and connect, tcp 23 (telnet)	2019-08-08 06:20:40
181.55.95.52	attackbotsspam	Aug 7 18:15:48 xtremcommunity sshd\[20696\]: Invalid user j0k3r123 from 181.55.95.52 port 36761 Aug 7 18:15:48 xtremcommunity sshd\[20696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.55.95.52 Aug 7 18:15:50 xtremcommunity sshd\[20696\]: Failed password for invalid user j0k3r123 from 181.55.95.52 port 36761 ssh2 Aug 7 18:20:38 xtremcommunity sshd\[20799\]: Invalid user 123456 from 181.55.95.52 port 33963 Aug 7 18:20:38 xtremcommunity sshd\[20799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.55.95.52 ...	2019-08-08 06:28:07
110.175.163.138	attack	/wp-login.php	2019-08-08 06:39:16
134.73.161.126	attackbotsspam	Aug 7 19:37:02 localhost sshd\[26060\]: Invalid user postgres from 134.73.161.126 port 52474 Aug 7 19:37:02 localhost sshd\[26060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.161.126 Aug 7 19:37:04 localhost sshd\[26060\]: Failed password for invalid user postgres from 134.73.161.126 port 52474 ssh2	2019-08-08 06:16:54
106.13.48.201	attack	Aug 8 01:28:11 www5 sshd\[56863\]: Invalid user production from 106.13.48.201 Aug 8 01:28:11 www5 sshd\[56863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.201 Aug 8 01:28:13 www5 sshd\[56863\]: Failed password for invalid user production from 106.13.48.201 port 46492 ssh2 ...	2019-08-08 06:50:06
34.222.13.156	attackbotsspam	34.222.13.156 ISP Amazon Technologies Inc. Usage Type Data Center/Web Hosting/Transit Hostname(s) ec2-34-222-13-156.us-west-2.compute.amazonaws.com Domain Name amazon.com Country United States City Portland, Oregon	2019-08-08 06:38:59
177.101.166.228	attackbotsspam	Unauthorised access (Aug 7) SRC=177.101.166.228 LEN=40 TTL=48 ID=4595 TCP DPT=23 WINDOW=36394 SYN	2019-08-08 06:46:45
134.209.187.43	attackbots	SSH Brute Force, server-1 sshd[30657]: Failed password for invalid user Vision from 134.209.187.43 port 51336 ssh2	2019-08-08 06:33:14
51.77.52.216	attackbotsspam	Aug 5 19:45:13 * sshd[30934]: Failed password for invalid user fwupgrade from 51.77.52.216 port 44577 ssh2 Aug 5 23:31:44 * sshd[2011]: Failed password for invalid user misp from 51.77.52.216 port 38863 ssh2 Aug 6 07:09:08 * sshd[12755]: Failed password for invalid user user from 51.77.52.216 port 41793 ssh2 Aug 6 07:09:13 * sshd[12757]: Failed password for invalid user misp from 51.77.52.216 port 39995 ssh2 Aug 7 01:49:44 * sshd[5844]: Failed password for invalid user osboxes from 51.77.52.216 port 40147 ssh2 Aug 7 01:49:57 * sshd[5852]: Failed password for invalid user sans from 51.77.52.216 port 44189 ssh2 Aug 7 05:21:22 * sshd[10777]: Failed password for invalid user administrator from 51.77.52.216 port 43215 ssh2 Aug 7 05:21:28 * sshd[10782]: Failed password for invalid user NetLinx from 51.77.52.216 port 43639 ssh2 Aug 7 05:21:35 * sshd[10787]: Failed password for invalid user administrator from 51.77.52.216 port 33515 ssh2 Aug 7 05:24:39 * sshd[11355]: Failed password for	2019-08-08 06:37:29
185.227.154.60	attack	Automatic report - Banned IP Access	2019-08-08 06:43:10
201.236.128.91	attackspam	SMB Server BruteForce Attack	2019-08-08 06:43:37
77.247.108.178	attack	\[2019-08-07 13:51:36\] NOTICE\[2288\] chan_sip.c: Registration from '"100"\' failed for '77.247.108.178:13346' - Wrong password \[2019-08-07 13:51:36\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-07T13:51:36.423-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7ff4d0160998",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.108.178/13346",Challenge="2dfdf776",ReceivedChallenge="2dfdf776",ReceivedHash="66a1de174544ba5aea5933e09d0902c7" \[2019-08-07 13:51:36\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-07T13:51:36.642-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01148223825199",SessionID="0x7ff4d07952f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.108.178/13346",ACLName="no_extension_match" ...	2019-08-08 06:44:26

Recently Reported IPs

139.194.28.111	118.24.82.174	139.194.3.171	147.128.228.73
139.194.3.191	139.194.3.217	139.194.3.20	139.194.3.238
139.194.3.204	139.194.3.31	139.194.3.40	139.194.3.6
139.194.3.27	139.194.3.62	139.194.3.48	118.24.82.6
139.194.3.69	139.194.30.71	139.194.31.12	139.194.33.15