110.139.13.223

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
110.139.132.13	attackspam	Unauthorized connection attempt from IP address 110.139.132.13 on Port 445(SMB)	2020-08-27 17:13:53
110.139.13.95	attackspambots	1581569729 - 02/13/2020 05:55:29 Host: 110.139.13.95/110.139.13.95 Port: 445 TCP Blocked	2020-02-13 13:01:08
110.139.130.99	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-06 20:07:25,699 INFO [amun_request_handler] PortScan Detected on Port: 445 (110.139.130.99)	2019-08-07 06:52:26

Type

Details

Datetime

110.139.132.13

attackspam

Unauthorized connection attempt from IP address 110.139.132.13 on Port 445(SMB)

2020-08-27 17:13:53

110.139.13.95

attackspambots

1581569729 - 02/13/2020 05:55:29 Host: 110.139.13.95/110.139.13.95 Port: 445 TCP Blocked

2020-02-13 13:01:08

110.139.130.99

attackbotsspam

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-06 20:07:25,699 INFO [amun_request_handler] PortScan Detected on Port: 445 (110.139.130.99)

2019-08-07 06:52:26

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.139.13.223
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5075
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;110.139.13.223.			IN	A

;; AUTHORITY SECTION:
.			553	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040201 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 03 07:56:40 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 223.13.139.110.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 223.13.139.110.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.75.160.215	attack	Sep 26 02:37:35 sachi sshd\[3232\]: Invalid user hldmsserver from 51.75.160.215 Sep 26 02:37:35 sachi sshd\[3232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=215.ip-51-75-160.eu Sep 26 02:37:37 sachi sshd\[3232\]: Failed password for invalid user hldmsserver from 51.75.160.215 port 42290 ssh2 Sep 26 02:41:53 sachi sshd\[3651\]: Invalid user ubnt from 51.75.160.215 Sep 26 02:41:53 sachi sshd\[3651\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=215.ip-51-75-160.eu	2019-09-26 20:54:32
213.239.216.194	attackbots	20 attempts against mh-misbehave-ban on float.magehost.pro	2019-09-26 21:21:43
187.45.24.136	attack	2019-09-26 07:41:03 H=(187-45-24-136.clientes.cilnet.com.br) [187.45.24.136]:36514 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.11, 127.0.0.4) (https://www.spamhaus.org/query/ip/187.45.24.136) 2019-09-26 07:41:04 H=(187-45-24-136.clientes.cilnet.com.br) [187.45.24.136]:36514 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/187.45.24.136) 2019-09-26 07:41:04 H=(187-45-24-136.clientes.cilnet.com.br) [187.45.24.136]:36514 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/187.45.24.136) ...	2019-09-26 21:26:59
46.38.144.179	attackbots	Sep 26 08:41:50 web1 postfix/smtpd[24465]: warning: unknown[46.38.144.179]: SASL LOGIN authentication failed: authentication failure ...	2019-09-26 20:54:04
173.244.209.5	attackbotsspam	Sep 26 12:41:56 thevastnessof sshd[6488]: Failed password for root from 173.244.209.5 port 40456 ssh2 ...	2019-09-26 20:52:39
92.118.38.52	attack	Brute force login attempts 09/26/2019 05:26:38 AM nSMTP: manuela@healthspace.com [92.118.38.52] authentication failure using internet password 09/26/2019 05:26:38 AM SMTP Server [0618:0012-083C] Authentication failed for user manuela@healthspace.com 09/26/2019 05:29:50 AM nSMTP: gale@healthspace.com [92.118.38.52] authentication failure using internet password 09/26/2019 05:29:50 AM SMTP Server [0618:0012-10F4] Authentication failed for user gale@healthspace.com 09/26/2019 05:33:01 AM nSMTP: selma@healthspace.com [92.118.38.52] authentication failure using internet password 09/26/2019 05:33:01 AM SMTP Server [0618:0012-113C] Authentication failed for user selma@healthspace.com 09/26/2019 05:36:06 AM nSMTP: dolly@healthspace.com [92.118.38.52] authentication failure using internet password 09/26/2019 05:36:06 AM SMTP Server [0618:0012-10F4] Authentication failed for user dolly@healthspace.com	2019-09-26 20:52:45
46.38.144.17	attack	Sep 26 12:56:16 heicom postfix/smtpd\[2846\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: authentication failure Sep 26 12:57:32 heicom postfix/smtpd\[5093\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: authentication failure Sep 26 12:58:54 heicom postfix/smtpd\[5093\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: authentication failure Sep 26 13:00:10 heicom postfix/smtpd\[5093\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: authentication failure Sep 26 13:01:34 heicom postfix/smtpd\[5093\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: authentication failure ...	2019-09-26 21:02:49
141.98.80.78	attackspambots	Sep 26 11:56:30 heicom postfix/smtpd\[32477\]: warning: unknown\[141.98.80.78\]: SASL PLAIN authentication failed: authentication failure Sep 26 12:37:37 heicom postfix/smtpd\[3948\]: warning: unknown\[141.98.80.78\]: SASL PLAIN authentication failed: authentication failure Sep 26 12:37:38 heicom postfix/smtpd\[2846\]: warning: unknown\[141.98.80.78\]: SASL PLAIN authentication failed: authentication failure Sep 26 12:44:56 heicom postfix/smtpd\[2846\]: warning: unknown\[141.98.80.78\]: SASL PLAIN authentication failed: authentication failure Sep 26 12:44:57 heicom postfix/smtpd\[3948\]: warning: unknown\[141.98.80.78\]: SASL PLAIN authentication failed: authentication failure ...	2019-09-26 20:57:51
13.58.253.103	attackspam	Sep 26 15:16:52 SilenceServices sshd[13204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.58.253.103 Sep 26 15:16:54 SilenceServices sshd[13204]: Failed password for invalid user hx from 13.58.253.103 port 56758 ssh2 Sep 26 15:20:57 SilenceServices sshd[15778]: Failed password for root from 13.58.253.103 port 42270 ssh2	2019-09-26 21:28:46
222.186.190.92	attackspambots	Sep 26 14:41:31 s64-1 sshd[12546]: Failed password for root from 222.186.190.92 port 63288 ssh2 Sep 26 14:41:48 s64-1 sshd[12546]: error: maximum authentication attempts exceeded for root from 222.186.190.92 port 63288 ssh2 [preauth] Sep 26 14:41:59 s64-1 sshd[12548]: Failed password for root from 222.186.190.92 port 33786 ssh2 ...	2019-09-26 20:49:02
106.13.136.238	attack	Sep 26 02:38:56 hanapaa sshd\[17433\]: Invalid user jeremy from 106.13.136.238 Sep 26 02:38:56 hanapaa sshd\[17433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.238 Sep 26 02:38:58 hanapaa sshd\[17433\]: Failed password for invalid user jeremy from 106.13.136.238 port 41090 ssh2 Sep 26 02:41:53 hanapaa sshd\[17795\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.238 user=root Sep 26 02:41:55 hanapaa sshd\[17795\]: Failed password for root from 106.13.136.238 port 35008 ssh2	2019-09-26 20:53:21
188.246.226.71	attackbots	" "	2019-09-26 21:26:28
42.115.221.40	attack	Sep 26 03:07:41 hiderm sshd\[17972\]: Invalid user operator from 42.115.221.40 Sep 26 03:07:41 hiderm sshd\[17972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.115.221.40 Sep 26 03:07:43 hiderm sshd\[17972\]: Failed password for invalid user operator from 42.115.221.40 port 56080 ssh2 Sep 26 03:13:12 hiderm sshd\[18517\]: Invalid user juancarlos from 42.115.221.40 Sep 26 03:13:12 hiderm sshd\[18517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.115.221.40	2019-09-26 21:15:04
175.124.43.123	attack	Sep 26 14:37:01 markkoudstaal sshd[1102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.124.43.123 Sep 26 14:37:03 markkoudstaal sshd[1102]: Failed password for invalid user demo from 175.124.43.123 port 48132 ssh2 Sep 26 14:41:49 markkoudstaal sshd[1600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.124.43.123	2019-09-26 20:57:09
185.160.60.36	attack	2019-09-26 07:41:14 H=(185-160-60-36.gpon.kh.velton.ua) [185.160.60.36]:41577 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/185.160.60.36) 2019-09-26 07:41:17 H=(185-160-60-36.gpon.kh.velton.ua) [185.160.60.36]:41577 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-26 07:41:19 H=(185-160-60-36.gpon.kh.velton.ua) [185.160.60.36]:41577 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-09-26 21:16:11

Recently Reported IPs

110.139.121.146	110.139.199.186	110.139.2.95	110.139.21.130
110.139.239.33	110.139.61.158	110.139.78.195	110.139.91.188
110.139.94.50	110.139.95.136	110.143.55.20	110.144.12.192
110.147.187.203	110.149.145.194	110.150.16.200	110.152.100.55
110.152.104.17	110.152.106.195	110.152.120.82	110.152.128.159