139.194.3.31 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.194.37.38	attackbotsspam	2019-03-11 12:24:47 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35687 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-11 12:24:50 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35711 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-11 12:24:53 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35730 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-05 00:58:03
139.194.38.89	attackbotsspam	Oct 2 05:33:00 mxgate1 postfix/postscreen[4705]: CONNECT from [139.194.38.89]:52583 to [176.31.12.44]:25 Oct 2 05:33:00 mxgate1 postfix/dnsblog[5004]: addr 139.194.38.89 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 2 05:33:00 mxgate1 postfix/dnsblog[5006]: addr 139.194.38.89 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 2 05:33:00 mxgate1 postfix/dnsblog[5006]: addr 139.194.38.89 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 2 05:33:01 mxgate1 postfix/dnsblog[5021]: addr 139.194.38.89 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Oct 2 05:33:01 mxgate1 postfix/dnsblog[5005]: addr 139.194.38.89 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 2 05:33:06 mxgate1 postfix/postscreen[4705]: DNSBL rank 5 for [139.194.38.89]:52583 Oct x@x Oct 2 05:33:07 mxgate1 postfix/postscreen[4705]: HANGUP after 1.1 from [139.194.38.89]:52583 in tests after SMTP handshake Oct 2 05:33:07 mxgate1 postfix/postscreen[4705]: DISCONNECT [139.194.38.89]:52583 ........ -------------------------------	2019-10-02 14:49:45

Type

Details

Datetime

139.194.37.38

attackbotsspam

2019-03-11 12:24:47 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35687 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-11 12:24:50 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35711 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-11 12:24:53 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35730 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...

2020-02-05 00:58:03

139.194.38.89

attackbotsspam

Oct  2 05:33:00 mxgate1 postfix/postscreen[4705]: CONNECT from [139.194.38.89]:52583 to [176.31.12.44]:25
Oct  2 05:33:00 mxgate1 postfix/dnsblog[5004]: addr 139.194.38.89 listed by domain cbl.abuseat.org as 127.0.0.2
Oct  2 05:33:00 mxgate1 postfix/dnsblog[5006]: addr 139.194.38.89 listed by domain zen.spamhaus.org as 127.0.0.4
Oct  2 05:33:00 mxgate1 postfix/dnsblog[5006]: addr 139.194.38.89 listed by domain zen.spamhaus.org as 127.0.0.11
Oct  2 05:33:01 mxgate1 postfix/dnsblog[5021]: addr 139.194.38.89 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Oct  2 05:33:01 mxgate1 postfix/dnsblog[5005]: addr 139.194.38.89 listed by domain b.barracudacentral.org as 127.0.0.2
Oct  2 05:33:06 mxgate1 postfix/postscreen[4705]: DNSBL rank 5 for [139.194.38.89]:52583
Oct x@x
Oct  2 05:33:07 mxgate1 postfix/postscreen[4705]: HANGUP after 1.1 from [139.194.38.89]:52583 in tests after SMTP handshake
Oct  2 05:33:07 mxgate1 postfix/postscreen[4705]: DISCONNECT [139.194.38.89]:52583
........
-------------------------------

2019-10-02 14:49:45

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.194.3.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8635
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.194.3.31.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 45 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:16:58 CST 2022
;; MSG SIZE  rcvd: 105

Host info

31.3.194.139.in-addr.arpa domain name pointer fm-dyn-139-194-3-31.fast.net.id.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
31.3.194.139.in-addr.arpa	name = fm-dyn-139-194-3-31.fast.net.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
189.91.5.130	attackspam	Brute force attempt	2019-07-09 16:54:07
2.50.146.247	attackbots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 12:40:20,080 INFO [shellcode_manager] (2.50.146.247) no match, writing hexdump (581c034b7031ce4a9b769e0201542992 :2468582) - MS17010 (EternalBlue)	2019-07-09 17:22:37
136.243.70.151	attackspam	20 attempts against mh-misbehave-ban on tree.magehost.pro	2019-07-09 17:29:31
185.153.196.191	attackbots	09.07.2019 09:34:27 Connection to port 18193 blocked by firewall	2019-07-09 17:49:18
121.122.111.192	attackbots	Jul 9 05:12:03 live sshd[10650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.111.192 Jul 9 05:12:03 live sshd[10649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.111.192 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=121.122.111.192	2019-07-09 17:14:09
92.118.160.5	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-07-09 17:28:59
110.81.48.82	attackbotsspam	Jul 9 05:20:00 localhost postfix/smtpd\[25462\]: warning: unknown\[110.81.48.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 05:20:08 localhost postfix/smtpd\[25462\]: warning: unknown\[110.81.48.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 05:20:20 localhost postfix/smtpd\[25462\]: warning: unknown\[110.81.48.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 05:20:35 localhost postfix/smtpd\[25462\]: warning: unknown\[110.81.48.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 05:20:43 localhost postfix/smtpd\[25462\]: warning: unknown\[110.81.48.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-07-09 17:50:59
179.50.179.184	attackspam	Lines containing failures of 179.50.179.184 Jul 9 05:16:19 omfg postfix/smtpd[12718]: connect from ip184-179-50-179.ct.co.cr[179.50.179.184] Jul x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=179.50.179.184	2019-07-09 17:21:32
167.114.249.132	attackbots	SSH User Authentication Brute Force Attempt, PTR: 132.ip-167-114-249.eu.	2019-07-09 17:50:35
172.126.62.47	attackspam	Jul 9 05:40:04 dedicated sshd[15127]: Invalid user zhangl from 172.126.62.47 port 55822 Jul 9 05:40:04 dedicated sshd[15127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.126.62.47 Jul 9 05:40:04 dedicated sshd[15127]: Invalid user zhangl from 172.126.62.47 port 55822 Jul 9 05:40:06 dedicated sshd[15127]: Failed password for invalid user zhangl from 172.126.62.47 port 55822 ssh2 Jul 9 05:41:40 dedicated sshd[15254]: Invalid user vodafone from 172.126.62.47 port 44434	2019-07-09 16:52:12
165.22.92.182	attack	Jul 8 16:36:47 twattle sshd[10549]: Received disconnect from 165.22.92= .182: 11: Bye Bye [preauth] Jul 8 16:36:53 twattle sshd[10551]: Invalid user admin from 165.22.92.= 182 Jul 8 16:36:53 twattle sshd[10551]: Received disconnect from 165.22.92= .182: 11: Bye Bye [preauth] Jul 8 16:36:58 twattle sshd[10553]: Invalid user admin from 165.22.92.= 182 Jul 8 16:36:58 twattle sshd[10553]: Received disconnect from 165.22.92= .182: 11: Bye Bye [preauth] Jul 8 16:37:03 twattle sshd[10555]: Invalid user user from 165.22.92.1= 82 Jul 8 16:37:03 twattle sshd[10555]: Received disconnect from 165.22.92= .182: 11: Bye Bye [preauth] Jul 8 16:37:08 twattle sshd[10557]: Invalid user ubnt from 165.22.92.1= 82 Jul 8 16:37:08 twattle sshd[10557]: Received disconnect from 165.22.92= .182: 11: Bye Bye [preauth] Jul 8 16:37:13 twattle sshd[10559]: Invalid user admin from 165.22.92.= 182 Jul 8 16:37:13 twattle sshd[10559]: Received disconnect from 165.22.92= .182: 11: Bye Bye [prea........ -------------------------------	2019-07-09 16:51:32
94.231.130.172	attackbots	Unauthorised access (Jul 9) SRC=94.231.130.172 LEN=44 TTL=245 ID=58646 TCP DPT=445 WINDOW=1024 SYN	2019-07-09 17:31:47
167.71.173.65	attackbotsspam	[portscan] tcp/22 [SSH] *(RWIN=65535)(07091133)	2019-07-09 17:02:55
34.76.190.141	attackbotsspam	Scanning random ports - tries to find possible vulnerable services	2019-07-09 16:48:55
185.48.180.238	attackbotsspam	blogonese.net 185.48.180.238 \[09/Jul/2019:09:32:01 +0200\] "POST /wp-login.php HTTP/1.1" 200 5771 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" blogonese.net 185.48.180.238 \[09/Jul/2019:09:32:02 +0200\] "POST /wp-login.php HTTP/1.1" 200 5731 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" blogonese.net 185.48.180.238 \[09/Jul/2019:09:32:02 +0200\] "POST /wp-login.php HTTP/1.1" 200 5731 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-07-09 17:18:07

Recently Reported IPs

139.194.3.204	139.194.3.40	139.194.3.6	139.194.3.27
139.194.3.62	139.194.3.48	118.24.82.6	139.194.3.69
139.194.30.71	139.194.31.12	139.194.33.15	139.194.34.13
139.194.34.234	139.194.33.215	139.194.34.243	139.194.35.174
139.194.34.49	139.194.36.17	139.194.35.36	118.24.82.77