110.138.2.69 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
110.138.248.61	attack	1598759580 - 08/30/2020 05:53:00 Host: 110.138.248.61/110.138.248.61 Port: 445 TCP Blocked	2020-08-30 13:22:52
110.138.242.46	attack	Automatic report - Port Scan Attack	2020-06-29 02:08:09
110.138.203.181	attackspam	1592568850 - 06/19/2020 14:14:10 Host: 110.138.203.181/110.138.203.181 Port: 445 TCP Blocked	2020-06-20 01:23:29
110.138.2.84	attack	1589880952 - 05/19/2020 11:35:52 Host: 110.138.2.84/110.138.2.84 Port: 445 TCP Blocked	2020-05-20 03:51:01
110.138.247.178	attackbotsspam	Port probing on unauthorized port 1433	2020-04-30 23:07:41
110.138.209.60	attackbots	Automatic report - Port Scan Attack	2020-04-17 02:53:01
110.138.204.195	attack	Brute force SMTP login attempted. ...	2020-04-01 09:24:21
110.138.211.102	attackbotsspam	Honeypot attack, port: 445, PTR: 102.subnet110-138-211.speedy.telkom.net.id.	2020-02-28 19:26:02
110.138.253.39	attackbots	Unauthorized connection attempt detected from IP address 110.138.253.39 to port 23 [J]	2020-02-05 08:54:47
110.138.253.39	attackbotsspam	Honeypot attack, port: 81, PTR: 39.subnet110-138-253.speedy.telkom.net.id.	2020-02-02 18:51:29
110.138.238.184	attack	Unauthorized connection attempt from IP address 110.138.238.184 on Port 445(SMB)	2020-01-08 19:14:11
110.138.204.195	attackspambots	Invalid user ubuntu from 110.138.204.195 port 50415	2019-12-16 02:27:25
110.138.218.141	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 25-11-2019 06:20:26.	2019-11-25 21:37:02
110.138.227.126	attackbotsspam	DATE:2019-11-05 07:15:33, IP:110.138.227.126, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc-bis)	2019-11-05 16:07:01
110.138.240.235	attackbots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/110.138.240.235/ ID - 1H : (52) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : ID NAME ASN : ASN7713 IP : 110.138.240.235 CIDR : 110.138.240.0/24 PREFIX COUNT : 2255 UNIQUE IP COUNT : 2765312 ATTACKS DETECTED ASN7713 : 1H - 2 3H - 5 6H - 6 12H - 12 24H - 23 DateTime : 2019-10-31 04:47:08 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-31 19:24:16

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.138.2.69
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45064
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;110.138.2.69.			IN	A

;; AUTHORITY SECTION:
.			426	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040201 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 03 07:55:55 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 69.2.138.110.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 69.2.138.110.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
89.36.222.85	attackspam	Aug 11 18:02:48 MK-Soft-Root1 sshd\[1195\]: Invalid user admin from 89.36.222.85 port 56994 Aug 11 18:02:48 MK-Soft-Root1 sshd\[1195\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.36.222.85 Aug 11 18:02:50 MK-Soft-Root1 sshd\[1195\]: Failed password for invalid user admin from 89.36.222.85 port 56994 ssh2 ...	2019-08-12 01:34:34
188.165.242.200	attackbotsspam	2019-08-11T17:15:22.728096abusebot-8.cloudsearch.cf sshd\[25677\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3077451.ip-188-165-242.eu user=root	2019-08-12 01:39:18
54.38.33.186	attack	Aug 11 14:56:30 SilenceServices sshd[28684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.33.186 Aug 11 14:56:32 SilenceServices sshd[28684]: Failed password for invalid user starbound from 54.38.33.186 port 34922 ssh2 Aug 11 15:00:43 SilenceServices sshd[31821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.33.186	2019-08-12 01:19:49
113.141.70.199	attackspam	2019-08-05 01:37:03 server sshd[77808]: Failed password for invalid user stephanie from 113.141.70.199 port 53692 ssh2	2019-08-12 01:35:10
37.187.17.58	attackspambots	Aug 10 07:19:44 xb0 sshd[926]: Failed password for invalid user ftpuser from 37.187.17.58 port 43102 ssh2 Aug 10 07:19:44 xb0 sshd[926]: Received disconnect from 37.187.17.58: 11: Bye Bye [preauth] Aug 10 07:25:49 xb0 sshd[21646]: Failed password for invalid user geek from 37.187.17.58 port 43716 ssh2 Aug 10 07:25:49 xb0 sshd[21646]: Received disconnect from 37.187.17.58: 11: Bye Bye [preauth] Aug 10 07:31:15 xb0 sshd[23636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.17.58 user=mysql Aug 10 07:31:16 xb0 sshd[23636]: Failed password for mysql from 37.187.17.58 port 42183 ssh2 Aug 10 07:31:16 xb0 sshd[23636]: Received disconnect from 37.187.17.58: 11: Bye Bye [preauth] Aug 10 07:36:38 xb0 sshd[24763]: Failed password for invalid user thomas from 37.187.17.58 port 40570 ssh2 Aug 10 07:36:38 xb0 sshd[24763]: Received disconnect from 37.187.17.58: 11: Bye Bye [preauth] Aug 10 07:42:00 xb0 sshd[23814]: Failed password for ........ -------------------------------	2019-08-12 01:11:53
80.227.148.46	attackspambots	Aug 11 18:53:50 srv206 sshd[20780]: Invalid user mysql from 80.227.148.46 Aug 11 18:53:50 srv206 sshd[20780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.227.148.46 Aug 11 18:53:50 srv206 sshd[20780]: Invalid user mysql from 80.227.148.46 Aug 11 18:53:53 srv206 sshd[20780]: Failed password for invalid user mysql from 80.227.148.46 port 47002 ssh2 ...	2019-08-12 01:23:28
59.28.91.30	attackspam	Aug 11 18:50:41 cp sshd[7763]: Failed password for root from 59.28.91.30 port 33768 ssh2 Aug 11 18:50:41 cp sshd[7763]: Failed password for root from 59.28.91.30 port 33768 ssh2 Aug 11 18:55:29 cp sshd[10460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.28.91.30	2019-08-12 01:14:55
51.89.151.214	attackbots	Aug 11 16:02:54 yabzik sshd[17384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.151.214 Aug 11 16:02:56 yabzik sshd[17384]: Failed password for invalid user erver from 51.89.151.214 port 48532 ssh2 Aug 11 16:07:08 yabzik sshd[18611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.151.214	2019-08-12 01:55:47
221.13.203.135	attackbots	Honeypot attack, port: 5555, PTR: hn.kd.smx.adsl.	2019-08-12 00:51:06
23.129.64.155	attackbotsspam	$f2bV_matches	2019-08-12 01:58:17
175.147.18.204	attack	Telnetd brute force attack detected by fail2ban	2019-08-12 01:33:06
188.166.7.134	attackspambots	Aug 11 12:39:59 debian sshd\[16415\]: Invalid user tneduts from 188.166.7.134 port 47276 Aug 11 12:39:59 debian sshd\[16415\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.7.134 Aug 11 12:40:01 debian sshd\[16415\]: Failed password for invalid user tneduts from 188.166.7.134 port 47276 ssh2 ...	2019-08-12 01:32:33
201.49.236.59	attackbots	Aug 11 09:43:32 smtp postfix/smtpd[48197]: NOQUEUE: reject: RCPT from unknown[201.49.236.59]: 554 5.7.1 Service unavailable; Client host [201.49.236.59] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?201.49.236.59; from= to= proto=ESMTP helo= ...	2019-08-12 01:56:24
36.90.50.17	attackspam	Honeypot attack, port: 23, PTR: PTR record not found	2019-08-12 00:50:28
91.200.126.174	attack	Email spam from ngutov92@gmail.com	2019-08-12 01:34:02

Recently Reported IPs

14.119.174.239	110.138.204.109	110.138.206.21	110.138.211.48
110.138.249.23	110.138.4.174	110.138.80.76	110.138.82.202
110.138.84.103	110.138.88.230	110.138.9.77	110.138.92.121
110.138.93.161	110.138.93.254	110.139.121.146	110.139.13.223
110.139.199.186	110.139.2.95	110.139.21.130	110.139.239.33