5.19.136.140 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: JSC ER-Telecom Holding

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Unauthorized connection attempt detected from IP address 5.19.136.140 to port 81 [J]	2020-01-06 18:13:45

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.19.136.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50089
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;5.19.136.140.			IN	A

;; AUTHORITY SECTION:
.			448	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010600 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 06 18:13:38 CST 2020
;; MSG SIZE  rcvd: 116

Host info

140.136.19.5.in-addr.arpa domain name pointer 5x19x136x140.static-customer.spb.ertelecom.ru.

Nslookup info:

Server:		100.100.2.136
Address:	100.100.2.136#53

Non-authoritative answer:
140.136.19.5.in-addr.arpa	name = 5x19x136x140.static-customer.spb.ertelecom.ru.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.249.239.198	attack	...	2020-09-13 00:31:03
217.219.129.3	attack	(sshd) Failed SSH login from 217.219.129.3 (IR/Iran/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 11 21:25:25 server sshd[3836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.219.129.3 user=root Sep 11 21:25:27 server sshd[3836]: Failed password for root from 217.219.129.3 port 22562 ssh2 Sep 11 21:37:08 server sshd[6827]: Invalid user user from 217.219.129.3 port 20438 Sep 11 21:37:09 server sshd[6827]: Failed password for invalid user user from 217.219.129.3 port 20438 ssh2 Sep 11 21:41:50 server sshd[8007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.219.129.3 user=root	2020-09-13 00:10:09
31.184.198.75	attack	SSH Brute-Forcing (server1)	2020-09-13 00:37:19
2001:f40:904:b9f9:581b:9714:1a1d:c4b0	attack	Fail2Ban Ban Triggered	2020-09-13 00:28:50
93.108.242.140	attackspambots	2020-09-12T09:50:37.301838yoshi.linuxbox.ninja sshd[2172536]: Failed password for root from 93.108.242.140 port 17758 ssh2 2020-09-12T09:52:48.702245yoshi.linuxbox.ninja sshd[2174090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.108.242.140 user=root 2020-09-12T09:52:50.841777yoshi.linuxbox.ninja sshd[2174090]: Failed password for root from 93.108.242.140 port 12694 ssh2 ...	2020-09-12 23:57:31
200.84.52.138	attackbotsspam	20/9/11@13:33:44: FAIL: Alarm-Network address from=200.84.52.138 20/9/11@13:33:44: FAIL: Alarm-Network address from=200.84.52.138 ...	2020-09-13 00:12:21
175.125.94.166	attack	Sep 12 17:46:39 ip106 sshd[6596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.125.94.166 Sep 12 17:46:41 ip106 sshd[6596]: Failed password for invalid user oratest from 175.125.94.166 port 59374 ssh2 ...	2020-09-13 00:03:49
80.82.70.214	attackspam	Sep 12 17:00:03 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.70.214, lip=185.118.198.210, session=<0mZADh+vmttQUkbW> Sep 12 17:02:00 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.70.214, lip=185.118.198.210, session= Sep 12 17:02:05 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=80.82.70.214, lip=185.118.198.210, session= Sep 12 17:03:41 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.70.214, lip=185.118.198.210, session= Sep 12 17:04:14 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=,	2020-09-13 00:04:19
74.118.88.203	attack	74.118.88.203 - - [11/Sep/2020:18:53:16 +0200] "GET / HTTP/1.1" 301 651 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" ...	2020-09-13 00:01:24
152.231.107.44	attackbots	Sep 12 10:45:05 vps46666688 sshd[30021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.231.107.44 Sep 12 10:45:08 vps46666688 sshd[30021]: Failed password for invalid user 0000 from 152.231.107.44 port 38548 ssh2 ...	2020-09-13 00:34:00
218.161.44.33	attackspambots	1599843227 - 09/11/2020 18:53:47 Host: 218.161.44.33/218.161.44.33 Port: 23 TCP Blocked ...	2020-09-12 23:58:40
212.47.241.15	attackbots	Sep 12 17:26:30 h1745522 sshd[29133]: Invalid user rak1 from 212.47.241.15 port 50404 Sep 12 17:26:30 h1745522 sshd[29133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.47.241.15 Sep 12 17:26:30 h1745522 sshd[29133]: Invalid user rak1 from 212.47.241.15 port 50404 Sep 12 17:26:32 h1745522 sshd[29133]: Failed password for invalid user rak1 from 212.47.241.15 port 50404 ssh2 Sep 12 17:30:28 h1745522 sshd[29623]: Invalid user factorio from 212.47.241.15 port 34448 Sep 12 17:30:28 h1745522 sshd[29623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.47.241.15 Sep 12 17:30:28 h1745522 sshd[29623]: Invalid user factorio from 212.47.241.15 port 34448 Sep 12 17:30:30 h1745522 sshd[29623]: Failed password for invalid user factorio from 212.47.241.15 port 34448 ssh2 Sep 12 17:34:34 h1745522 sshd[30115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.47.241.15 u ...	2020-09-13 00:36:51
104.223.197.227	attack	B: Abusive ssh attack	2020-09-12 23:56:38
34.121.111.50	attackspambots	[SID2] Fail2ban detected 5 failed SSH login attempts within 30 minutes. This report was submitted automatically.	2020-09-13 00:31:27
168.81.92.144	attack	2,31-01/02 [bc01/m33] PostRequest-Spammer scoring: zurich	2020-09-13 00:33:16

Recently Reported IPs

26.73.104.180	186.9.195.92	184.20.9.242	183.106.83.96
57.94.246.195	179.98.81.191	174.60.93.5	177.126.81.36
170.106.80.172	25.210.74.175	117.156.186.31	164.163.233.15
124.156.64.11	119.11.173.227	123.247.36.112	109.204.135.93
109.121.61.104	104.166.37.98	98.231.241.74	95.237.225.22