139.195.5.208 - IPInfo

Basic Info

City: Jakarta

Region: Jakarta

Country: Indonesia

Internet Service Provider: PT. First Media TBK

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Jan 10 13:50:36 grey postfix/smtpd\[13994\]: NOQUEUE: reject: RCPT from unknown\[139.195.5.208\]: 554 5.7.1 Service unavailable\; Client host \[139.195.5.208\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[139.195.5.208\]\; from=\ to=\ proto=ESMTP helo=\<\[139.195.5.208\]\> ...	2020-01-11 05:10:34

Type

Details

Datetime

attack

Jan 10 13:50:36 grey postfix/smtpd\[13994\]: NOQUEUE: reject: RCPT from unknown\[139.195.5.208\]: 554 5.7.1 Service unavailable\; Client host \[139.195.5.208\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[139.195.5.208\]\; from=\ to=\ proto=ESMTP helo=\<\[139.195.5.208\]\>
...

2020-01-11 05:10:34

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.195.5.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13550
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.195.5.208.			IN	A

;; AUTHORITY SECTION:
.			182	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011001 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 11 05:10:31 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 208.5.195.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 208.5.195.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
182.186.120.159	attack	1581915578 - 02/17/2020 05:59:38 Host: 182.186.120.159/182.186.120.159 Port: 445 TCP Blocked	2020-02-17 13:24:29
193.169.73.23	attack	SSH login attempts.	2020-02-17 13:25:53
121.14.32.117	attackbots	SSH login attempts.	2020-02-17 13:33:34
64.235.96.162	attackspambots	SSH login attempts.	2020-02-17 13:21:14
68.183.19.63	attackbots	Automatic report - SSH Brute-Force Attack	2020-02-17 13:35:40
185.143.223.168	attack	Too many connections or unauthorized access detected from Yankee banned ip	2020-02-17 13:30:56
117.193.36.98	attack	20/2/16@23:59:41: FAIL: Alarm-Network address from=117.193.36.98 20/2/16@23:59:41: FAIL: Alarm-Network address from=117.193.36.98 ...	2020-02-17 13:18:59
194.25.134.88	attackspam	SSH login attempts.	2020-02-17 13:36:15
14.136.245.194	attackspam	Feb 16 18:56:24 web1 sshd\[25122\]: Invalid user lars from 14.136.245.194 Feb 16 18:56:24 web1 sshd\[25122\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.136.245.194 Feb 16 18:56:27 web1 sshd\[25122\]: Failed password for invalid user lars from 14.136.245.194 port 57185 ssh2 Feb 16 18:59:51 web1 sshd\[25441\]: Invalid user wildfly from 14.136.245.194 Feb 16 18:59:51 web1 sshd\[25441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.136.245.194	2020-02-17 13:04:37
171.240.145.119	attack	Automatic report - Port Scan Attack	2020-02-17 13:11:26
134.209.164.184	attackspam	Feb 17 05:57:49 dedicated sshd[10306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.164.184 Feb 17 05:57:49 dedicated sshd[10306]: Invalid user jessie from 134.209.164.184 port 32800 Feb 17 05:57:50 dedicated sshd[10306]: Failed password for invalid user jessie from 134.209.164.184 port 32800 ssh2 Feb 17 05:59:38 dedicated sshd[10699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.164.184 user=root Feb 17 05:59:40 dedicated sshd[10699]: Failed password for root from 134.209.164.184 port 52154 ssh2	2020-02-17 13:20:18
64.98.36.218	attackspambots	SSH login attempts.	2020-02-17 13:02:45
200.69.95.174	attackbots	Unauthorized connection attempt from IP address 200.69.95.174 on Port 445(SMB)	2020-02-17 13:19:50
42.57.61.116	attack	Portscan detected	2020-02-17 13:38:34
218.92.0.148	attackbots	Feb 17 05:59:43 vps647732 sshd[12999]: Failed password for root from 218.92.0.148 port 31014 ssh2 Feb 17 05:59:55 vps647732 sshd[12999]: error: maximum authentication attempts exceeded for root from 218.92.0.148 port 31014 ssh2 [preauth] ...	2020-02-17 13:00:11

Recently Reported IPs

113.68.203.26	5.38.178.133	35.223.206.13	113.253.18.124
70.54.185.72	126.149.48.159	218.241.154.197	49.99.5.9
37.91.208.158	161.3.207.25	77.187.92.231	196.18.0.218
65.13.17.173	131.236.205.59	47.167.87.71	210.5.211.1
103.81.240.198	95.97.213.191	165.206.52.200	180.22.134.21