City: Purbalingga
Region: Central Java
Country: Indonesia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.105.55.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53628
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.105.55.49. IN A
;; AUTHORITY SECTION:
. 553 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022040301 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 04 12:22:47 CST 2022
;; MSG SIZE rcvd: 10649.55.105.103.in-addr.arpa domain name pointer 103-105-55-49.megadata.net.id.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
49.55.105.103.in-addr.arpa name = 103-105-55-49.megadata.net.id.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 191.53.59.26 | attack | SASL Brute Force |
2019-08-06 17:58:40 |
| 165.22.246.228 | attackspambots | Aug 6 12:15:07 [munged] sshd[7236]: Invalid user townsley from 165.22.246.228 port 45024 Aug 6 12:15:07 [munged] sshd[7236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.246.228 |
2019-08-06 19:01:28 |
| 209.17.96.42 | attackspambots | 137/udp 8888/tcp 8081/tcp... [2019-06-05/08-06]79pkt,13pt.(tcp),1pt.(udp) |
2019-08-06 18:26:58 |
| 18.139.83.212 | attackbots | [Aegis] @ 2019-08-06 02:23:27 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack |
2019-08-06 18:08:02 |
| 185.212.170.187 | attack | Aug 6 03:23:40 mail1 sshd[17158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.212.170.187 user=r.r Aug 6 03:23:42 mail1 sshd[17158]: Failed password for r.r from 185.212.170.187 port 41472 ssh2 Aug 6 03:23:42 mail1 sshd[17158]: Received disconnect from 185.212.170.187 port 41472:11: Client disconnecting normally [preauth] Aug 6 03:23:42 mail1 sshd[17158]: Disconnected from 185.212.170.187 port 41472 [preauth] Aug 6 03:45:48 mail1 sshd[18151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.212.170.187 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=185.212.170.187 |
2019-08-06 18:54:05 |
| 154.66.219.20 | attackbotsspam | Aug 6 10:56:40 lcl-usvr-01 sshd[27139]: Invalid user debian from 154.66.219.20 Aug 6 10:56:40 lcl-usvr-01 sshd[27139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.66.219.20 Aug 6 10:56:40 lcl-usvr-01 sshd[27139]: Invalid user debian from 154.66.219.20 Aug 6 10:56:42 lcl-usvr-01 sshd[27139]: Failed password for invalid user debian from 154.66.219.20 port 55046 ssh2 Aug 6 11:02:10 lcl-usvr-01 sshd[29052]: Invalid user user123 from 154.66.219.20 |
2019-08-06 18:34:42 |
| 177.72.99.10 | attackspambots | SSH Brute-Force reported by Fail2Ban |
2019-08-06 18:33:15 |
| 117.239.48.242 | attackbots | 2019-08-06T10:06:20.844278abusebot-7.cloudsearch.cf sshd\[32276\]: Invalid user hdfs from 117.239.48.242 port 53028 |
2019-08-06 18:24:48 |
| 185.220.101.49 | attackspambots | Aug 6 12:44:38 tux-35-217 sshd\[12173\]: Invalid user localadmin from 185.220.101.49 port 34720 Aug 6 12:44:38 tux-35-217 sshd\[12173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.49 Aug 6 12:44:39 tux-35-217 sshd\[12173\]: Failed password for invalid user localadmin from 185.220.101.49 port 34720 ssh2 Aug 6 12:44:42 tux-35-217 sshd\[12175\]: Invalid user fwupgrade from 185.220.101.49 port 40511 Aug 6 12:44:42 tux-35-217 sshd\[12175\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.49 ... |
2019-08-06 18:57:09 |
| 69.10.60.102 | attackbots | 2019-08-05 20:23:00 dovecot_login authenticator failed for (3VgWUK) [69.10.60.102]:58708 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=craigloomis@lerctr.org) 2019-08-05 20:23:16 dovecot_login authenticator failed for (MUUvjzv) [69.10.60.102]:65258 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=craigloomis@lerctr.org) 2019-08-05 20:23:36 dovecot_login authenticator failed for (piTsue) [69.10.60.102]:61469 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=craigloomis@lerctr.org) ... |
2019-08-06 18:10:16 |
| 101.190.38.159 | attack | k+ssh-bruteforce |
2019-08-06 18:40:49 |
| 191.53.198.219 | attack | failed_logins |
2019-08-06 18:58:17 |
| 14.141.174.123 | attack | SSH/22 MH Probe, BF, Hack - |
2019-08-06 19:01:57 |
| 121.142.111.214 | attackspambots | Unauthorized SSH login attempts |
2019-08-06 18:52:08 |
| 185.220.101.35 | attackspam | Aug 6 12:39:58 hosting sshd[3437]: Invalid user amx from 185.220.101.35 port 42815 ... |
2019-08-06 17:51:08 |