City: unknown
Region: unknown
Country: Indonesia
Internet Service Provider: Dinas Komunikasi dan Informatika Kota Medan
Hostname: unknown
Organization: unknown
Usage Type: Government
| Type | Details | Datetime |
|---|---|---|
| attackspam | Phishing scam report IP address 103.116.168.13 est@pemkomedan.go.id |
2020-06-27 02:11:53 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.116.168.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6897
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.116.168.13. IN A
;; AUTHORITY SECTION:
. 273 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020062600 1800 900 604800 86400
;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 27 02:11:47 CST 2020
;; MSG SIZE rcvd: 11813.168.116.103.in-addr.arpa domain name pointer srv.pemkomedan.go.id.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
13.168.116.103.in-addr.arpa name = srv.pemkomedan.go.id.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 220.137.58.32 | attackbotsspam | 445/tcp [2020-03-23]1pkt |
2020-03-23 19:32:12 |
| 104.218.50.88 | attackbots | 3 x EXPLOIT Netcore Router Backdoor Access |
2020-03-23 19:49:59 |
| 188.114.29.149 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 23-03-2020 06:35:10. |
2020-03-23 19:20:11 |
| 109.173.40.60 | attackspam | Mar 23 07:51:56 firewall sshd[17752]: Invalid user mark from 109.173.40.60 Mar 23 07:51:58 firewall sshd[17752]: Failed password for invalid user mark from 109.173.40.60 port 33142 ssh2 Mar 23 07:55:44 firewall sshd[17909]: Invalid user webster from 109.173.40.60 ... |
2020-03-23 19:48:29 |
| 213.137.236.118 | attack | Unauthorized connection attempt from IP address 213.137.236.118 on Port 445(SMB) |
2020-03-23 19:49:28 |
| 171.246.130.4 | attackspam | 5555/tcp [2020-03-23]1pkt |
2020-03-23 19:48:04 |
| 129.28.29.57 | attack | 2020-03-22 UTC: (9x) - abdullah,be,francesca,fujimura,neola,qi,resin,support,vbox |
2020-03-23 19:37:33 |
| 64.225.99.7 | attackspam | Mar 23 10:40:50 rotator sshd\[25796\]: Invalid user luanyx from 64.225.99.7Mar 23 10:40:52 rotator sshd\[25796\]: Failed password for invalid user luanyx from 64.225.99.7 port 54442 ssh2Mar 23 10:44:25 rotator sshd\[25838\]: Invalid user armand from 64.225.99.7Mar 23 10:44:26 rotator sshd\[25838\]: Failed password for invalid user armand from 64.225.99.7 port 41956 ssh2Mar 23 10:47:43 rotator sshd\[26650\]: Invalid user asteria from 64.225.99.7Mar 23 10:47:45 rotator sshd\[26650\]: Failed password for invalid user asteria from 64.225.99.7 port 57704 ssh2 ... |
2020-03-23 19:16:27 |
| 118.69.72.198 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-03-23 19:52:04 |
| 220.133.12.188 | attack | Honeypot attack, port: 81, PTR: 220-133-12-188.HINET-IP.hinet.net. |
2020-03-23 20:02:34 |
| 46.1.64.102 | attack | 37215/tcp 37215/tcp [2020-03-19/23]2pkt |
2020-03-23 19:16:50 |
| 192.42.116.26 | attackbots | Mar 23 10:27:04 vpn01 sshd[5430]: Failed password for root from 192.42.116.26 port 41262 ssh2 Mar 23 10:27:06 vpn01 sshd[5430]: Failed password for root from 192.42.116.26 port 41262 ssh2 ... |
2020-03-23 19:17:50 |
| 2a01:4f8:c17:41a9::1 | attack | xmlrpc attack |
2020-03-23 19:36:22 |
| 5.63.151.118 | attackbots | 5431/tcp 8000/tcp 4001/tcp... [2020-02-09/03-23]6pkt,5pt.(tcp),1pt.(udp) |
2020-03-23 19:19:40 |
| 34.92.156.127 | attackbots | Mar 23 09:35:08 hosting sshd[2240]: Invalid user oo from 34.92.156.127 port 53234 ... |
2020-03-23 19:28:28 |