Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT. First Media TBK

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
[SMB remote code execution attempt: port tcp/445]
[scan/connect: 3 time(s)]
*(RWIN=8192)(08050931)
2019-08-05 19:23:43
attackspambots
Unauthorized connection attempt from IP address 139.255.30.242 on Port 445(SMB)
2019-07-02 03:59:18
Comments on same subnet:
IP Type Details Datetime
139.255.30.101 attackbotsspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-03-12 22:33:22
139.255.30.74 attackbotsspam
Unauthorized connection attempt from IP address 139.255.30.74 on Port 445(SMB)
2020-02-22 19:27:03
139.255.30.101 attack
Unauthorized connection attempt detected from IP address 139.255.30.101 to port 23 [J]
2020-01-21 20:47:57
139.255.30.101 attackbotsspam
Unauthorized connection attempt detected from IP address 139.255.30.101 to port 23 [J]
2020-01-06 15:11:45
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.255.30.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32804
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.255.30.242.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070101 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 02 03:59:13 CST 2019
;; MSG SIZE  rcvd: 118
Host info
242.30.255.139.in-addr.arpa domain name pointer ln-static-139-255-30-242.link.net.id.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
242.30.255.139.in-addr.arpa	name = ln-static-139-255-30-242.link.net.id.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
222.98.173.216 attackbotsspam
Failed password for invalid user cacti from 222.98.173.216 port 43580 ssh2
2020-09-04 19:25:21
13.76.212.215 attackspam
TCP ports : 13772 / 31765
2020-09-04 19:08:20
47.30.190.91 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-04 19:24:26
84.228.99.16 attack
Hit honeypot r.
2020-09-04 19:17:18
64.225.35.135 attack
Time:     Fri Sep  4 10:42:56 2020 +0000
IP:       64.225.35.135 (US/United States/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep  4 10:36:13 ca-29-ams1 sshd[18744]: Invalid user leticia from 64.225.35.135 port 48874
Sep  4 10:36:15 ca-29-ams1 sshd[18744]: Failed password for invalid user leticia from 64.225.35.135 port 48874 ssh2
Sep  4 10:39:33 ca-29-ams1 sshd[19234]: Invalid user maryam from 64.225.35.135 port 50378
Sep  4 10:39:35 ca-29-ams1 sshd[19234]: Failed password for invalid user maryam from 64.225.35.135 port 50378 ssh2
Sep  4 10:42:55 ca-29-ams1 sshd[19693]: Invalid user noc from 64.225.35.135 port 51382
2020-09-04 19:14:37
42.104.109.194 attackspambots
Invalid user ftpadmin from 42.104.109.194 port 44964
2020-09-04 19:00:33
94.112.203.241 attackspambots
Sep  3 18:43:18 mellenthin postfix/smtpd[20267]: NOQUEUE: reject: RCPT from ip-94-112-203-241.net.upcbroadband.cz[94.112.203.241]: 554 5.7.1 Service unavailable; Client host [94.112.203.241] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/94.112.203.241; from= to= proto=ESMTP helo=
2020-09-04 19:16:52
182.150.57.34 attackbots
Sep  4 07:59:13 rocket sshd[21264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.150.57.34
Sep  4 07:59:16 rocket sshd[21264]: Failed password for invalid user jur from 182.150.57.34 port 28086 ssh2
...
2020-09-04 19:19:55
49.234.52.176 attackspambots
Invalid user csj from 49.234.52.176 port 44690
2020-09-04 18:52:15
104.206.128.30 attack
 TCP (SYN) 104.206.128.30:52745 -> port 1433, len 44
2020-09-04 19:13:25
74.1.45.187 attackspam
Honeypot attack, port: 445, PTR: h-74-1-45-187.phnd.az.globalcapacity.com.
2020-09-04 19:02:06
181.114.70.201 attackbots
Lines containing failures of 181.114.70.201
Sep  3 18:39:46 omfg postfix/smtpd[15260]: connect from host-181-114-70-201.supernet.com.bo[181.114.70.201]
Sep x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=181.114.70.201
2020-09-04 19:05:21
141.98.80.62 attackspam
Sep  4 12:49:04 cho postfix/smtpd[2213914]: warning: unknown[141.98.80.62]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  4 12:49:04 cho postfix/smtpd[2213753]: warning: unknown[141.98.80.62]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  4 12:49:04 cho postfix/smtpd[2215057]: warning: unknown[141.98.80.62]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  4 12:49:04 cho postfix/smtpd[2212642]: warning: unknown[141.98.80.62]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  4 12:49:04 cho postfix/smtpd[2214679]: warning: unknown[141.98.80.62]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-09-04 18:57:18
41.38.165.34 attackbotsspam
 TCP (SYN) 41.38.165.34:42914 -> port 1433, len 44
2020-09-04 18:55:55
123.59.213.68 attackspambots
2020-07-26 03:53:02,114 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 123.59.213.68
2020-07-26 04:10:58,842 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 123.59.213.68
2020-07-26 04:28:20,268 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 123.59.213.68
2020-07-26 04:45:47,599 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 123.59.213.68
2020-07-26 05:03:31,247 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 123.59.213.68
...
2020-09-04 18:57:43

Recently Reported IPs

195.254.135.18 105.71.7.190 146.170.123.238 241.120.241.210
186.94.20.240 142.44.196.234 194.141.215.186 50.28.2.39
45.32.57.192 14.163.33.32 241.22.9.35 187.1.23.76
200.23.234.99 104.131.149.33 2.180.18.50 111.93.192.218
122.241.94.40 113.15.15.144 46.153.36.66 202.147.194.226