110.138.2.245 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
110.138.248.61	attack	1598759580 - 08/30/2020 05:53:00 Host: 110.138.248.61/110.138.248.61 Port: 445 TCP Blocked	2020-08-30 13:22:52
110.138.242.46	attack	Automatic report - Port Scan Attack	2020-06-29 02:08:09
110.138.203.181	attackspam	1592568850 - 06/19/2020 14:14:10 Host: 110.138.203.181/110.138.203.181 Port: 445 TCP Blocked	2020-06-20 01:23:29
110.138.2.84	attack	1589880952 - 05/19/2020 11:35:52 Host: 110.138.2.84/110.138.2.84 Port: 445 TCP Blocked	2020-05-20 03:51:01
110.138.247.178	attackbotsspam	Port probing on unauthorized port 1433	2020-04-30 23:07:41
110.138.209.60	attackbots	Automatic report - Port Scan Attack	2020-04-17 02:53:01
110.138.204.195	attack	Brute force SMTP login attempted. ...	2020-04-01 09:24:21
110.138.211.102	attackbotsspam	Honeypot attack, port: 445, PTR: 102.subnet110-138-211.speedy.telkom.net.id.	2020-02-28 19:26:02
110.138.253.39	attackbots	Unauthorized connection attempt detected from IP address 110.138.253.39 to port 23 [J]	2020-02-05 08:54:47
110.138.253.39	attackbotsspam	Honeypot attack, port: 81, PTR: 39.subnet110-138-253.speedy.telkom.net.id.	2020-02-02 18:51:29
110.138.238.184	attack	Unauthorized connection attempt from IP address 110.138.238.184 on Port 445(SMB)	2020-01-08 19:14:11
110.138.204.195	attackspambots	Invalid user ubuntu from 110.138.204.195 port 50415	2019-12-16 02:27:25
110.138.218.141	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 25-11-2019 06:20:26.	2019-11-25 21:37:02
110.138.227.126	attackbotsspam	DATE:2019-11-05 07:15:33, IP:110.138.227.126, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc-bis)	2019-11-05 16:07:01
110.138.240.235	attackbots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/110.138.240.235/ ID - 1H : (52) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : ID NAME ASN : ASN7713 IP : 110.138.240.235 CIDR : 110.138.240.0/24 PREFIX COUNT : 2255 UNIQUE IP COUNT : 2765312 ATTACKS DETECTED ASN7713 : 1H - 2 3H - 5 6H - 6 12H - 12 24H - 23 DateTime : 2019-10-31 04:47:08 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-31 19:24:16

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.138.2.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48327
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;110.138.2.245.			IN	A

;; AUTHORITY SECTION:
.			172	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030100 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 01 18:55:07 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 245.2.138.110.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

server can't find 110.138.2.245.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
142.93.195.189	attackspam	Dec 4 10:56:07 php1 sshd\[14737\]: Invalid user adam from 142.93.195.189 Dec 4 10:56:07 php1 sshd\[14737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.189 Dec 4 10:56:09 php1 sshd\[14737\]: Failed password for invalid user adam from 142.93.195.189 port 50684 ssh2 Dec 4 11:01:34 php1 sshd\[15187\]: Invalid user grammer from 142.93.195.189 Dec 4 11:01:34 php1 sshd\[15187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.189	2019-12-05 07:16:25
103.121.26.150	attackspambots	Dec 4 19:41:22 zeus sshd[3774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.121.26.150 Dec 4 19:41:24 zeus sshd[3774]: Failed password for invalid user laksov from 103.121.26.150 port 6060 ssh2 Dec 4 19:48:41 zeus sshd[4014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.121.26.150 Dec 4 19:48:43 zeus sshd[4014]: Failed password for invalid user guest from 103.121.26.150 port 29596 ssh2	2019-12-05 07:03:43
99.84.127.53	attackbotsspam	IDENTITY THEFT ATTEMPT BY AMAZON.COM PRETENDING TO BE COX.NET WITH AN AMAZONAWS.COM WEB PAGE AND TWO COX REPLY TO ADDRESSES OF mcgeejc@cox.net AND info@cox.net	2019-12-05 07:30:29
107.173.28.172	attackbots	Scanning random ports - tries to find possible vulnerable services	2019-12-05 07:16:54
106.13.215.163	attackbotsspam	2019-12-04T23:00:42.723536abusebot-8.cloudsearch.cf sshd\[31776\]: Invalid user couchdb1 from 106.13.215.163 port 52058	2019-12-05 07:14:27
220.169.119.88	attackbotsspam	Unauthorized connection attempt from IP address 220.169.119.88 on Port 139(NETBIOS)	2019-12-05 07:15:33
101.187.39.74	attackspam	2019-12-04T23:01:44.881472abusebot-2.cloudsearch.cf sshd\[21543\]: Invalid user trochelman from 101.187.39.74 port 58564	2019-12-05 07:11:57
114.32.184.203	attackbotsspam	Honeypot attack, port: 81, PTR: 114-32-184-203.HINET-IP.hinet.net.	2019-12-05 07:00:04
178.128.162.10	attackspam	Dec 4 10:23:50 sachi sshd\[14783\]: Invalid user tim from 178.128.162.10 Dec 4 10:23:50 sachi sshd\[14783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.162.10 Dec 4 10:23:52 sachi sshd\[14783\]: Failed password for invalid user tim from 178.128.162.10 port 55262 ssh2 Dec 4 10:29:15 sachi sshd\[15294\]: Invalid user kallum from 178.128.162.10 Dec 4 10:29:15 sachi sshd\[15294\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.162.10	2019-12-05 07:26:10
51.77.161.86	attack	SSH invalid-user multiple login attempts	2019-12-05 07:07:14
114.67.95.188	attackspambots	Lines containing failures of 114.67.95.188 Dec 4 16:59:48 zabbix sshd[94078]: Invalid user cadasa from 114.67.95.188 port 55958 Dec 4 16:59:48 zabbix sshd[94078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.95.188 Dec 4 16:59:50 zabbix sshd[94078]: Failed password for invalid user cadasa from 114.67.95.188 port 55958 ssh2 Dec 4 16:59:50 zabbix sshd[94078]: Received disconnect from 114.67.95.188 port 55958:11: Bye Bye [preauth] Dec 4 16:59:50 zabbix sshd[94078]: Disconnected from invalid user cadasa 114.67.95.188 port 55958 [preauth] Dec 4 17:13:34 zabbix sshd[95722]: Invalid user tiril from 114.67.95.188 port 52390 Dec 4 17:13:34 zabbix sshd[95722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.95.188 Dec 4 17:13:37 zabbix sshd[95722]: Failed password for invalid user tiril from 114.67.95.188 port 52390 ssh2 Dec 4 17:13:37 zabbix sshd[95722]: Received disconnect f........ ------------------------------	2019-12-05 07:26:57
1.1.187.162	attack	Honeypot attack, port: 23, PTR: node-bs2.pool-1-1.dynamic.totinternet.net.	2019-12-05 06:58:02
176.101.216.59	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2019-12-05 07:32:15
181.41.216.132	attackspam	Dec 4 23:05:02 webserver postfix/smtpd\[1918\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.132\]: 454 4.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Dec 4 23:05:02 webserver postfix/smtpd\[1918\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.132\]: 454 4.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Dec 4 23:05:02 webserver postfix/smtpd\[1918\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.132\]: 454 4.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Dec 4 23:05:02 webserver postfix/smtpd\[1918\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.132\]: 454 4.7.1 \: Relay access denied\; from=\ to=\	2019-12-05 07:24:42
114.38.16.50	attackspam	Honeypot attack, port: 23, PTR: 114-38-16-50.dynamic-ip.hinet.net.	2019-12-05 07:06:29

Recently Reported IPs

110.138.2.196	110.138.20.238	110.138.200.196	110.138.201.233
110.138.202.159	110.138.202.183	110.138.202.221	110.138.202.238
110.138.202.31	110.138.202.4	110.138.202.49	110.138.203.243
110.138.203.38	110.138.203.90	110.138.204.101	110.138.204.11
110.138.204.122	110.138.204.127	110.138.204.130	110.138.204.132