140.213.52.35 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT. XL Axiata Tbk

Hostname: unknown

Organization: unknown

Usage Type: Mobile ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt from IP address 140.213.52.35 on Port 445(SMB)	2019-11-02 05:04:32

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.213.52.35
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45916
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;140.213.52.35.			IN	A

;; AUTHORITY SECTION:
.			547	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110102 1800 900 604800 86400

;; Query time: 681 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 02 05:04:29 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 35.52.213.140.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 35.52.213.140.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.23.108.9	attackbots	Jul 24 01:18:26 MK-Soft-VM7 sshd\[16619\]: Invalid user csgoserver from 45.23.108.9 port 47268 Jul 24 01:18:26 MK-Soft-VM7 sshd\[16619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.23.108.9 Jul 24 01:18:29 MK-Soft-VM7 sshd\[16619\]: Failed password for invalid user csgoserver from 45.23.108.9 port 47268 ssh2 ...	2019-07-24 09:19:18
51.91.19.92	attack	Automatic report - Banned IP Access	2019-07-24 09:11:42
46.101.76.236	attackspambots	Jul 24 02:56:23 lnxmail61 sshd[12239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.76.236 Jul 24 02:56:23 lnxmail61 sshd[12239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.76.236	2019-07-24 09:13:51
83.31.246.104	attackbots	Automatic report - Port Scan Attack	2019-07-24 09:18:22
177.221.109.100	attack	Jul 23 16:14:17 web1 postfix/smtpd[28778]: warning: unknown[177.221.109.100]: SASL PLAIN authentication failed: authentication failure ...	2019-07-24 09:17:18
94.102.1.190	attack	POST /xmlrpc.php	2019-07-24 08:44:10
104.248.255.118	attackspam	Jul 24 00:56:33 *** sshd[17213]: Invalid user user from 104.248.255.118	2019-07-24 09:01:31
109.245.236.109	attackspam	2019-07-23 15:14:20 H=(lrmmotors.it) [109.245.236.109]:38298 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-07-23 15:14:21 H=(lrmmotors.it) [109.245.236.109]:38298 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/109.245.236.109) 2019-07-23 15:14:21 H=(lrmmotors.it) [109.245.236.109]:38298 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/109.245.236.109) ...	2019-07-24 09:15:08
5.9.40.211	attackbots	Jul 23 19:47:28 aat-srv002 sshd[394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.9.40.211 Jul 23 19:47:31 aat-srv002 sshd[394]: Failed password for invalid user thanks from 5.9.40.211 port 53990 ssh2 Jul 23 19:51:50 aat-srv002 sshd[541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.9.40.211 Jul 23 19:51:53 aat-srv002 sshd[541]: Failed password for invalid user karen from 5.9.40.211 port 50376 ssh2 ...	2019-07-24 08:54:01
185.217.71.148	attackbotsspam	Go away please. False registrations for some future spam I guess.	2019-07-24 08:57:36
104.194.11.156	attackspam	Jul 24 03:22:43 srv-4 sshd\[24161\]: Invalid user song from 104.194.11.156 Jul 24 03:22:43 srv-4 sshd\[24161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.194.11.156 Jul 24 03:22:45 srv-4 sshd\[24161\]: Failed password for invalid user song from 104.194.11.156 port 43222 ssh2 ...	2019-07-24 09:17:37
177.126.188.2	attackspambots	Jul 24 02:34:37 mail sshd\[26218\]: Invalid user yoko from 177.126.188.2 port 60985 Jul 24 02:34:37 mail sshd\[26218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.126.188.2 Jul 24 02:34:39 mail sshd\[26218\]: Failed password for invalid user yoko from 177.126.188.2 port 60985 ssh2 Jul 24 02:39:52 mail sshd\[26983\]: Invalid user testuser from 177.126.188.2 port 58391 Jul 24 02:39:52 mail sshd\[26983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.126.188.2	2019-07-24 08:46:33
191.53.221.5	attackbots	Jul 23 16:14:25 web1 postfix/smtpd[28822]: warning: unknown[191.53.221.5]: SASL PLAIN authentication failed: authentication failure ...	2019-07-24 09:13:31
112.35.46.21	attackspambots	Jul 24 02:36:19 mail sshd\[26506\]: Invalid user administrator from 112.35.46.21 port 50292 Jul 24 02:36:19 mail sshd\[26506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.35.46.21 Jul 24 02:36:21 mail sshd\[26506\]: Failed password for invalid user administrator from 112.35.46.21 port 50292 ssh2 Jul 24 02:38:12 mail sshd\[26724\]: Invalid user co from 112.35.46.21 port 49070 Jul 24 02:38:12 mail sshd\[26724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.35.46.21	2019-07-24 08:47:41
194.87.150.220	attackspambots	[portscan] Port scan	2019-07-24 08:56:10

Recently Reported IPs

104.68.115.146	230.47.223.187	8.139.1.133	122.58.189.150
108.29.112.255	134.35.149.103	40.107.226.97	135.236.189.144
103.170.201.159	231.165.188.175	195.203.73.141	34.154.169.27
27.62.98.1	33.167.148.160	65.74.232.243	194.45.228.176
33.176.51.228	187.74.213.118	99.189.223.12	21.175.85.241