144.139.1.189 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Australia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
144.139.114.150	attackspambots	Automatic report - Banned IP Access	2020-09-19 03:32:30
144.139.114.150	attackbots	Automatic report - Banned IP Access	2020-09-18 19:34:37
144.139.195.70	attackbots	Icarus honeypot on github	2020-09-13 22:01:19
144.139.195.70	attack	Icarus honeypot on github	2020-09-13 13:56:17
144.139.195.70	attackspam	Icarus honeypot on github	2020-09-13 05:40:30
144.139.114.150	attackspambots	Automatic report - Banned IP Access	2020-07-30 01:24:21
144.139.130.6	attackspam	Automatic report - Port Scan Attack	2020-06-25 14:37:42
144.139.195.70	attackbots	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic	2020-05-12 07:57:57
144.139.195.70	attackbotsspam	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic	2020-05-03 06:03:29
144.139.130.6	attack	Automatic report - Port Scan Attack	2020-05-02 04:28:32
144.139.195.70	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-04-14 07:17:06
144.139.125.209	attackspambots	Automatic report - Port Scan Attack	2020-03-20 06:00:05
144.139.163.85	attackbotsspam	Unauthorized connection attempt detected from IP address 144.139.163.85 to port 23 [J]	2020-03-02 14:04:03
144.139.171.97	attackspam	unauthorized connection attempt	2020-01-28 21:15:32
144.139.165.13	attack	Unauthorized connection attempt detected from IP address 144.139.165.13 to port 81 [J]	2020-01-07 08:44:06

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 144.139.1.189
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60682
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;144.139.1.189.			IN	A

;; AUTHORITY SECTION:
.			486	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062501 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 26 03:20:02 CST 2022
;; MSG SIZE  rcvd: 106

Host info

189.1.139.144.in-addr.arpa domain name pointer cpe-144-139-1-189.static.nsw.asp.telstra.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
189.1.139.144.in-addr.arpa	name = cpe-144-139-1-189.static.nsw.asp.telstra.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
138.94.114.238	attackspambots	Dec 5 13:33:38 MK-Soft-VM4 sshd[18434]: Failed password for root from 138.94.114.238 port 34128 ssh2 ...	2019-12-05 22:58:15
144.34.224.6	attackspam	Automatic report: SSH brute force attempt	2019-12-05 22:34:40
112.214.136.5	attack	2019-12-05T11:21:41.874695abusebot.cloudsearch.cf sshd\[17754\]: Invalid user ftp_user from 112.214.136.5 port 35414	2019-12-05 22:42:49
88.203.200.170	attackbots	SSH Brute Force, server-1 sshd[7599]: Failed password for invalid user igor from 88.203.200.170 port 51464 ssh2	2019-12-05 23:01:04
114.67.236.120	attackspambots	$f2bV_matches	2019-12-05 22:26:40
111.161.74.100	attackspam	Dec 5 15:55:44 sd-53420 sshd\[889\]: Invalid user guest from 111.161.74.100 Dec 5 15:55:44 sd-53420 sshd\[889\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.74.100 Dec 5 15:55:45 sd-53420 sshd\[889\]: Failed password for invalid user guest from 111.161.74.100 port 34580 ssh2 Dec 5 16:04:14 sd-53420 sshd\[2376\]: Invalid user krystin from 111.161.74.100 Dec 5 16:04:14 sd-53420 sshd\[2376\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.74.100 ...	2019-12-05 23:09:34
185.175.93.22	attack	ET DROP Dshield Block Listed Source group 1 - port: 6006 proto: TCP cat: Misc Attack	2019-12-05 22:54:40
175.139.243.82	attackspambots	Dec 5 13:46:58 server sshd\[25756\]: Invalid user kenji from 175.139.243.82 Dec 5 13:46:58 server sshd\[25756\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.243.82 Dec 5 13:47:00 server sshd\[25756\]: Failed password for invalid user kenji from 175.139.243.82 port 26004 ssh2 Dec 5 13:56:29 server sshd\[28403\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.243.82 user=root Dec 5 13:56:31 server sshd\[28403\]: Failed password for root from 175.139.243.82 port 44478 ssh2 ...	2019-12-05 23:00:03
23.254.225.191	attackspam	2019-12-05 09:05:01 H=(0289abc2.gpstrackr.icu) [23.254.225.191]:37182 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-12-05 09:05:01 H=(02947c79.gpstrackr.icu) [23.254.225.191]:36221 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-12-05 09:05:01 H=(028ad8db.gpstrackr.icu) [23.254.225.191]:39165 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-12-05 09:05:01 H=(028b6dbf.gpstrackr.icu) [23.254.225.191]:41319 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in t ...	2019-12-05 23:08:20
86.49.253.240	attackbots	TCP Port Scanning	2019-12-05 22:41:31
102.65.111.227	attackbots	Dec 2 15:59:08 sanyalnet-cloud-vps3 sshd[753]: Connection from 102.65.111.227 port 45614 on 45.62.248.66 port 22 Dec 2 15:59:11 sanyalnet-cloud-vps3 sshd[753]: User games from 102-65-111-227.ftth.web.africa not allowed because not listed in AllowUsers Dec 2 15:59:11 sanyalnet-cloud-vps3 sshd[753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102-65-111-227.ftth.web.africa user=games Dec 2 15:59:12 sanyalnet-cloud-vps3 sshd[753]: Failed password for invalid user games from 102.65.111.227 port 45614 ssh2 Dec 2 15:59:13 sanyalnet-cloud-vps3 sshd[753]: Received disconnect from 102.65.111.227: 11: Bye Bye [preauth] Dec 2 16:12:35 sanyalnet-cloud-vps3 sshd[1076]: Connection from 102.65.111.227 port 45556 on 45.62.248.66 port 22 Dec 2 16:12:37 sanyalnet-cloud-vps3 sshd[1076]: User r.r from 102-65-111-227.ftth.web.africa not allowed because not listed in AllowUsers Dec 2 16:12:37 sanyalnet-cloud-vps3 sshd[1076]: pam_unix(sshd:........ -------------------------------	2019-12-05 22:31:52
178.236.133.110	attackspambots	[portscan] Port scan	2019-12-05 22:41:58
37.59.51.51	attack	5x Failed Password	2019-12-05 23:08:01
35.182.252.92	attackspam	Fake Bingbot	2019-12-05 22:39:08
51.91.156.199	attack	Dec 5 04:48:24 server sshd\[1175\]: Failed password for invalid user rushprint from 51.91.156.199 port 41126 ssh2 Dec 5 14:00:14 server sshd\[29564\]: Invalid user reppe from 51.91.156.199 Dec 5 14:00:14 server sshd\[29564\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.ip-51-91-156.eu Dec 5 14:00:15 server sshd\[29564\]: Failed password for invalid user reppe from 51.91.156.199 port 34394 ssh2 Dec 5 14:12:42 server sshd\[32764\]: Invalid user sverdrup from 51.91.156.199 ...	2019-12-05 22:29:59

Recently Reported IPs

120.32.117.241	172.105.216.37	176.32.156.232	177.69.193.34
178.5.78.95	141.105.102.189	180.120.210.147	177.248.197.133
45.136.155.49	182.34.149.50	180.122.157.181	179.92.2.167
182.34.151.193	182.153.17.232	137.226.84.145	137.226.85.56
137.226.85.82	137.226.102.36	186.137.84.135	137.226.195.141