140.213.3.13 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT. XL Axiata Tbk

Hostname: unknown

Organization: unknown

Usage Type: Mobile ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2019-07-07 15:29:55

Comments on same subnet:

IP	Type	Details	Datetime
140.213.33.118	attackspambots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-07-24 19:16:53
140.213.34.244	attackbotsspam	Unauthorized connection attempt from IP address 140.213.34.244 on Port 445(SMB)	2020-05-23 22:58:11
140.213.3.141	attackspambots	Unauthorized connection attempt from IP address 140.213.3.141 on Port 445(SMB)	2020-04-01 20:20:27
140.213.36.243	attackbotsspam	Email rejected due to spam filtering	2020-03-19 18:50:41
140.213.36.128	attackbotsspam	spam	2020-02-29 17:47:25
140.213.34.109	attack	1582926933 - 02/28/2020 22:55:33 Host: 140.213.34.109/140.213.34.109 Port: 445 TCP Blocked	2020-02-29 08:57:27
140.213.32.242	attackbots	1579438418 - 01/19/2020 13:53:38 Host: 140.213.32.242/140.213.32.242 Port: 445 TCP Blocked	2020-01-20 03:02:01
140.213.38.132	attackbotsspam	Unauthorized connection attempt from IP address 140.213.38.132 on Port 445(SMB)	2019-12-01 03:53:28
140.213.3.14	attack	Unauthorized connection attempt from IP address 140.213.3.14 on Port 445(SMB)	2019-10-31 19:06:56
140.213.37.85	attackbots	445/tcp 445/tcp [2019-08-16]2pkt	2019-08-16 18:25:05
140.213.3.137	attackbotsspam	Unauthorized connection attempt from IP address 140.213.3.137 on Port 445(SMB)	2019-06-30 20:18:08

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.213.3.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22010
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;140.213.3.13.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070700 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jul 07 15:29:45 CST 2019
;; MSG SIZE  rcvd: 116

Host info

Host 13.3.213.140.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 13.3.213.140.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
220.85.206.96	attack	Wordpress malicious attack:[sshd]	2020-04-19 12:24:27
106.13.230.238	attackspambots	Apr 18 16:32:56: Invalid user ot from 106.13.230.238 port 38026	2020-04-19 08:12:51
162.243.131.51	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-04-19 08:18:39
95.85.33.119	attackspambots	k+ssh-bruteforce	2020-04-19 12:13:44
111.91.160.123	attackspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-04-19 08:15:34
86.105.53.132	attackspam	Apr 19 01:44:40 mail sshd[27493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.105.53.132 user=root Apr 19 01:44:41 mail sshd[27493]: Failed password for root from 86.105.53.132 port 54502 ssh2 Apr 19 01:50:45 mail sshd[28327]: Invalid user admin from 86.105.53.132 Apr 19 01:50:45 mail sshd[28327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.105.53.132 Apr 19 01:50:45 mail sshd[28327]: Invalid user admin from 86.105.53.132 Apr 19 01:50:47 mail sshd[28327]: Failed password for invalid user admin from 86.105.53.132 port 49036 ssh2 ...	2020-04-19 08:08:59
45.249.95.162	attackbotsspam	Apr 19 05:50:34 Ubuntu-1404-trusty-64-minimal sshd\[17891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.249.95.162 user=root Apr 19 05:50:35 Ubuntu-1404-trusty-64-minimal sshd\[17891\]: Failed password for root from 45.249.95.162 port 39117 ssh2 Apr 19 05:57:24 Ubuntu-1404-trusty-64-minimal sshd\[21505\]: Invalid user id from 45.249.95.162 Apr 19 05:57:24 Ubuntu-1404-trusty-64-minimal sshd\[21505\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.249.95.162 Apr 19 05:57:25 Ubuntu-1404-trusty-64-minimal sshd\[21505\]: Failed password for invalid user id from 45.249.95.162 port 58181 ssh2	2020-04-19 12:26:27
151.237.185.4	attackbotsspam	Brute Force	2020-04-19 12:14:13
175.158.147.205	attackbotsspam	(imapd) Failed IMAP login from 175.158.147.205 (NC/New Caledonia/host-175-158-147-205.static.lagoon.nc): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 19 08:26:51 ir1 dovecot[566034]: imap-login: Disconnected (auth failed, 1 attempts in 17 secs): user=, method=PLAIN, rip=175.158.147.205, lip=5.63.12.44, session=	2020-04-19 12:03:31
211.23.219.46	attackspambots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-04-19 08:06:46
104.131.13.199	attackspambots	Apr 19 11:55:07 f sshd\[21467\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.13.199 Apr 19 11:55:10 f sshd\[21467\]: Failed password for invalid user server from 104.131.13.199 port 51764 ssh2 Apr 19 11:56:50 f sshd\[21477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.13.199 ...	2020-04-19 12:04:49
222.186.42.137	attackbotsspam	04/19/2020-00:01:01.092581 222.186.42.137 Protocol: 6 ET SCAN Potential SSH Scan	2020-04-19 12:01:57
163.172.9.34	attackbots	firewall-block, port(s): 5060/udp	2020-04-19 08:14:09
58.182.23.33	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-04-19 08:09:51
192.241.236.214	attackbots	Port probing on unauthorized port 5984	2020-04-19 12:15:46

Recently Reported IPs

191.53.118.132	180.170.134.219	113.73.144.139	190.124.55.194
182.108.16.206	177.91.84.143	5.160.77.27	2001:e68:5041:47b4:12be:f5ff:fe29:54d8
77.40.62.136	51.255.26.166	191.53.58.78	147.47.44.214
201.150.89.168	172.14.18.186	193.36.239.132	23.94.148.157
207.46.13.56	192.3.147.235	156.218.143.53	119.18.8.45