110.137.2.109 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT Telkom Indonesia

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	1581396672 - 02/11/2020 05:51:12 Host: 110.137.2.109/110.137.2.109 Port: 445 TCP Blocked	2020-02-11 18:31:55

Comments on same subnet:

IP	Type	Details	Datetime
110.137.28.92	attackbots	1598674023 - 08/29/2020 06:07:03 Host: 110.137.28.92/110.137.28.92 Port: 445 TCP Blocked	2020-08-29 17:46:07
110.137.234.75	attackbotsspam	Automatic report - Port Scan Attack	2020-08-21 06:11:49
110.137.2.5	attack	Jul 26 16:02:52 rocket sshd[18699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.137.2.5 Jul 26 16:02:54 rocket sshd[18699]: Failed password for invalid user dw from 110.137.2.5 port 38080 ssh2 ...	2020-07-26 23:16:33
110.137.2.187	attackbots	Brute forcing RDP port 3389	2020-06-22 19:27:04
110.137.225.33	attack	Automatic report - Port Scan Attack	2020-06-17 08:10:25
110.137.216.217	attack	1590478202 - 05/26/2020 09:30:02 Host: 110.137.216.217/110.137.216.217 Port: 445 TCP Blocked	2020-05-26 20:39:39
110.137.220.78	attack	110.137.220.78 - - [02/May/2020:15:11:14 +0300] "POST /wp-login.php HTTP/1.1" 200 2171 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-05-03 00:22:58
110.137.234.144	attackspam	Honeypot attack, port: 445, PTR: 144.subnet110-137-234.speedy.telkom.net.id.	2020-04-25 02:08:14
110.137.28.218	attackbots	Honeypot attack, port: 445, PTR: 218.subnet110-137-28.speedy.telkom.net.id.	2020-03-18 22:26:41
110.137.25.172	attackspam	20/3/8@23:53:23: FAIL: Alarm-Network address from=110.137.25.172 20/3/8@23:53:23: FAIL: Alarm-Network address from=110.137.25.172 ...	2020-03-09 13:27:27
110.137.220.220	attackspam	unauthorized connection attempt	2020-02-26 18:28:34
110.137.21.205	attack	Honeypot attack, port: 445, PTR: 205.subnet110-137-21.speedy.telkom.net.id.	2020-02-20 19:02:05
110.137.27.208	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 12-02-2020 04:55:08.	2020-02-12 16:09:46
110.137.24.49	attackspam	1581224001 - 02/09/2020 05:53:21 Host: 110.137.24.49/110.137.24.49 Port: 445 TCP Blocked	2020-02-09 17:03:16
110.137.28.9	attackbots	trying to access non-authorized port	2020-02-06 21:16:30

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.137.2.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58599
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;110.137.2.109.			IN	A

;; AUTHORITY SECTION:
.			260	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021101 1800 900 604800 86400

;; Query time: 117 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 18:31:50 CST 2020
;; MSG SIZE  rcvd: 117

Host info

109.2.137.110.in-addr.arpa domain name pointer 109.subnet110-137-2.speedy.telkom.net.id.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
109.2.137.110.in-addr.arpa	name = 109.subnet110-137-2.speedy.telkom.net.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
112.85.42.183	attack	frenzy	2020-10-08 13:09:59
118.25.133.220	attackbots	Oct 8 01:48:53 amit sshd\[7289\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.133.220 user=root Oct 8 01:48:55 amit sshd\[7289\]: Failed password for root from 118.25.133.220 port 52020 ssh2 Oct 8 01:54:13 amit sshd\[7353\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.133.220 user=root ...	2020-10-08 13:07:24
181.57.148.194	attackbots	20/10/8@00:40:38: FAIL: Alarm-Network address from=181.57.148.194 20/10/8@00:40:39: FAIL: Alarm-Network address from=181.57.148.194 ...	2020-10-08 13:49:22
112.85.42.47	attack	Oct 8 06:14:16 mavik sshd[20013]: Failed password for root from 112.85.42.47 port 42478 ssh2 Oct 8 06:14:20 mavik sshd[20013]: Failed password for root from 112.85.42.47 port 42478 ssh2 Oct 8 06:14:23 mavik sshd[20013]: Failed password for root from 112.85.42.47 port 42478 ssh2 Oct 8 06:14:26 mavik sshd[20013]: Failed password for root from 112.85.42.47 port 42478 ssh2 Oct 8 06:14:29 mavik sshd[20013]: Failed password for root from 112.85.42.47 port 42478 ssh2 ...	2020-10-08 13:34:24
162.243.128.176	attackspam	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-08 13:33:00
106.12.71.159	attackspam	Oct 7 22:46:48 h2829583 sshd[21228]: Failed password for root from 106.12.71.159 port 41988 ssh2	2020-10-08 13:05:38
121.15.2.178	attack	Oct 8 05:48:09 server sshd[8145]: Failed password for root from 121.15.2.178 port 53570 ssh2 Oct 8 05:50:57 server sshd[8708]: Failed password for root from 121.15.2.178 port 36728 ssh2 Oct 8 05:53:39 server sshd[9289]: Failed password for root from 121.15.2.178 port 48114 ssh2	2020-10-08 13:38:20
81.82.251.244	attack	Oct 8 05:36:43 vpn01 sshd[4242]: Failed password for root from 81.82.251.244 port 50825 ssh2 ...	2020-10-08 13:10:31
185.200.118.86	attackbotsspam	Port scan denied	2020-10-08 13:56:57
164.132.205.107	attack	TCP (SYN,ACK) 164.132.205.107:25565 -> port 41700, len 44	2020-10-08 13:08:18
122.118.56.88	attackbots	Brute forcing email accounts	2020-10-08 13:43:43
104.168.214.86	attack	Oct 7 22:46:27 mellenthin postfix/smtpd[26683]: warning: hwsrv-786714.hostwindsdns.com[104.168.214.86]: SASL login authentication failed: UGFzc3dvcmQ6 Oct 7 22:46:34 mellenthin postfix/smtpd[26683]: warning: hwsrv-786714.hostwindsdns.com[104.168.214.86]: SASL login authentication failed: UGFzc3dvcmQ6	2020-10-08 13:19:54
186.216.69.151	attackspam	$f2bV_matches	2020-10-08 13:16:14
106.12.60.40	attackspambots	Banned for a week because repeated abuses, for example SSH, but not only	2020-10-08 13:05:59
37.120.198.197	attack	2020-10-07 23:07:11 dovecot_login authenticator failed for $WIN-25FFVSIPLS1$ \[37.120.198.197\]: 535 Incorrect authentication data $set_id=infoeozo$ 2020-10-07 23:07:11 H=$WIN-25FFVSIPLS1$ \[37.120.198.197\] sender verify fail for \: Unrouteable address 2020-10-07 23:07:11 H=$WIN-25FFVSIPLS1$ \[37.120.198.197\] F=\ rejected RCPT \: Sender verify failed 2020-10-07 23:07:23 dovecot_login authenticator failed for $WIN-25FFVSIPLS1$ \[37.120.198.197\]: 535 Incorrect authentication data $set_id=info$ 2020-10-07 23:07:23 H=$WIN-25FFVSIPLS1$ \[37.120.198.197\] F=\ rejected RCPT \: relay not permitted	2020-10-08 13:14:28

Recently Reported IPs

36.224.90.11	66.249.66.65	118.172.193.216	113.181.36.82
181.30.28.120	176.63.131.99	88.105.17.33	27.147.216.132
217.99.187.41	14.32.5.113	5.26.216.185	37.204.25.107
5.125.244.254	183.83.131.97	188.163.96.59	157.245.148.46
61.180.4.114	103.82.80.53	217.75.223.156	51.75.141.240