139.255.134.111

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT. First Media TBK

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	2019-02-07 02:50:00 H=\(ln-static-139-255-134-111.link.net.id\) \[139.255.134.111\]:14607 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-02-07 02:50:15 H=\(ln-static-139-255-134-111.link.net.id\) \[139.255.134.111\]:14726 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-02-07 02:50:24 H=\(ln-static-139-255-134-111.link.net.id\) \[139.255.134.111\]:14788 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-05 00:48:55

Type

Details

Datetime

attackbots

2019-02-07 02:50:00 H=\(ln-static-139-255-134-111.link.net.id\) \[139.255.134.111\]:14607 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-02-07 02:50:15 H=\(ln-static-139-255-134-111.link.net.id\) \[139.255.134.111\]:14726 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-02-07 02:50:24 H=\(ln-static-139-255-134-111.link.net.id\) \[139.255.134.111\]:14788 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...

2020-02-05 00:48:55

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.255.134.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58526
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.255.134.111.		IN	A

;; AUTHORITY SECTION:
.			474	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020400 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 00:48:48 CST 2020
;; MSG SIZE  rcvd: 119

Host info

111.134.255.139.in-addr.arpa domain name pointer ln-static-139-255-134-111.link.net.id.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
111.134.255.139.in-addr.arpa	name = ln-static-139-255-134-111.link.net.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
153.126.196.211	attackbotsspam	Feb 27 17:06:22 master sshd[746]: Failed password for invalid user glt from 153.126.196.211 port 60012 ssh2	2020-02-28 06:43:57
144.22.108.33	attackspambots	Feb 27 23:48:04 localhost sshd\[14497\]: Invalid user ubuntu from 144.22.108.33 port 41886 Feb 27 23:48:04 localhost sshd\[14497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.22.108.33 Feb 27 23:48:05 localhost sshd\[14497\]: Failed password for invalid user ubuntu from 144.22.108.33 port 41886 ssh2	2020-02-28 07:00:32
211.253.24.250	attackspam	Feb 27 23:48:08 nextcloud sshd\[11732\]: Invalid user sunqiang from 211.253.24.250 Feb 27 23:48:08 nextcloud sshd\[11732\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.24.250 Feb 27 23:48:10 nextcloud sshd\[11732\]: Failed password for invalid user sunqiang from 211.253.24.250 port 58166 ssh2	2020-02-28 06:56:29
123.148.242.122	attackbotsspam	Wordpress_xmlrpc_attack	2020-02-28 07:03:39
27.203.211.54	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 07:04:44
212.42.104.101	attack	Honeypot attack, port: 445, PTR: kabul.static.elcat.kg.	2020-02-28 06:37:42
222.186.175.215	attack	Feb 27 23:36:54 eventyay sshd[2283]: Failed password for root from 222.186.175.215 port 16000 ssh2 Feb 27 23:37:05 eventyay sshd[2283]: error: maximum authentication attempts exceeded for root from 222.186.175.215 port 16000 ssh2 [preauth] Feb 27 23:37:11 eventyay sshd[2286]: Failed password for root from 222.186.175.215 port 21508 ssh2 ...	2020-02-28 06:40:38
187.185.70.10	attack	Feb 27 23:39:22 sd-53420 sshd\[13082\]: Invalid user tomcat from 187.185.70.10 Feb 27 23:39:22 sd-53420 sshd\[13082\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.185.70.10 Feb 27 23:39:24 sd-53420 sshd\[13082\]: Failed password for invalid user tomcat from 187.185.70.10 port 41990 ssh2 Feb 27 23:48:14 sd-53420 sshd\[13845\]: Invalid user diego from 187.185.70.10 Feb 27 23:48:14 sd-53420 sshd\[13845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.185.70.10 ...	2020-02-28 06:55:13
49.88.112.65	attackspambots	Feb 27 22:24:22 hcbbdb sshd\[3995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.65 user=root Feb 27 22:24:24 hcbbdb sshd\[3995\]: Failed password for root from 49.88.112.65 port 15827 ssh2 Feb 27 22:25:33 hcbbdb sshd\[4108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.65 user=root Feb 27 22:25:36 hcbbdb sshd\[4108\]: Failed password for root from 49.88.112.65 port 59047 ssh2 Feb 27 22:26:43 hcbbdb sshd\[4246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.65 user=root	2020-02-28 06:37:09
96.37.234.251	attack	Invalid user pi from 96.37.234.251 port 36606	2020-02-28 07:00:59
112.85.42.89	attackbots	PORT 22 STREAM reassembly overlap with different data	2020-02-28 06:57:38
92.118.37.53	attackspam	Feb 27 23:42:59 debian-2gb-nbg1-2 kernel: \[5102572.234183\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.53 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=44988 PROTO=TCP SPT=46983 DPT=25957 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-28 06:44:59
194.26.29.130	attack	Feb 27 23:48:20 debian-2gb-nbg1-2 kernel: \[5102892.646570\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.29.130 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=60547 PROTO=TCP SPT=8080 DPT=3577 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-28 07:02:11
92.63.196.9	attack	Port-scan: detected 102 distinct ports within a 24-hour window.	2020-02-28 06:36:35
49.88.112.74	attack	Feb 27 20:24:39 MK-Soft-VM7 sshd[9204]: Failed password for root from 49.88.112.74 port 60753 ssh2 Feb 27 20:24:41 MK-Soft-VM7 sshd[9204]: Failed password for root from 49.88.112.74 port 60753 ssh2 ...	2020-02-28 06:37:30

Recently Reported IPs

82.102.89.86	182.223.144.227	111.122.213.175	123.129.54.187
250.244.178.61	145.29.7.146	156.58.59.150	71.233.120.247
8.24.76.33	148.231.198.60	110.132.18.90	139.193.214.10
101.131.86.102	67.234.173.105	254.180.214.243	171.26.227.211
112.1.64.254	187.70.50.78	75.214.152.34	51.164.244.27