City: unknown
Region: unknown
Country: Indonesia
Internet Service Provider: PT Precision Connexion
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | Unauthorized connection attempt from IP address 103.30.92.124 on Port 445(SMB) |
2020-06-10 03:25:42 |
| attack | Unauthorized connection attempt from IP address 103.30.92.124 on Port 445(SMB) |
2019-09-30 04:04:39 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.30.92.35 | attackspambots | Unauthorized connection attempt from IP address 103.30.92.35 on Port 445(SMB) |
2020-03-17 12:09:36 |
| 103.30.92.91 | attack | Autoban 103.30.92.91 AUTH/CONNECT |
2019-11-18 18:35:23 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.30.92.124
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20879
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.30.92.124. IN A
;; AUTHORITY SECTION:
. 288 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019092901 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 30 04:04:36 CST 2019
;; MSG SIZE rcvd: 117124.92.30.103.in-addr.arpa domain name pointer ip-124-92-30-103.neuviz.net.id.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
124.92.30.103.in-addr.arpa name = ip-124-92-30-103.neuviz.net.id.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 121.8.142.250 | attackbotsspam | 2019-06-25T08:58:50.764573scmdmz1 sshd\[15974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.8.142.250 user=admin 2019-06-25T08:58:52.096892scmdmz1 sshd\[15974\]: Failed password for admin from 121.8.142.250 port 59956 ssh2 2019-06-25T09:00:37.999423scmdmz1 sshd\[16005\]: Invalid user cms from 121.8.142.250 port 48078 ... |
2019-06-25 18:22:10 |
| 157.230.186.181 | attackspam | fail2ban honeypot |
2019-06-25 17:39:33 |
| 91.245.101.0 | attack | firewall-block, port(s): 23/tcp |
2019-06-25 18:25:15 |
| 102.129.249.95 | attackbotsspam | spam |
2019-06-25 18:01:53 |
| 206.189.232.29 | attackspambots | Jun 25 08:57:01 ovpn sshd\[3580\]: Invalid user duan from 206.189.232.29 Jun 25 08:57:01 ovpn sshd\[3580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.232.29 Jun 25 08:57:03 ovpn sshd\[3580\]: Failed password for invalid user duan from 206.189.232.29 port 37658 ssh2 Jun 25 09:01:39 ovpn sshd\[3689\]: Invalid user temp1 from 206.189.232.29 Jun 25 09:01:39 ovpn sshd\[3689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.232.29 |
2019-06-25 17:52:31 |
| 58.242.83.32 | attackspambots | Jun 25 11:09:26 s64-1 sshd[9882]: Failed password for root from 58.242.83.32 port 39584 ssh2 Jun 25 11:09:28 s64-1 sshd[9882]: Failed password for root from 58.242.83.32 port 39584 ssh2 Jun 25 11:09:30 s64-1 sshd[9882]: Failed password for root from 58.242.83.32 port 39584 ssh2 ... |
2019-06-25 18:29:16 |
| 94.97.120.53 | attackbotsspam | Unauthorized connection attempt from IP address 94.97.120.53 on Port 445(SMB) |
2019-06-25 18:13:33 |
| 103.49.223.121 | attackbots | Reported by AbuseIPDB proxy server. |
2019-06-25 17:28:21 |
| 52.224.143.24 | attackspambots | Jun 25 03:02:04 localhost kernel: [12690317.898706] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=52.224.143.24 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x00 TTL=244 ID=56540 PROTO=UDP SPT=30016 DPT=111 LEN=48 Jun 25 03:02:04 localhost kernel: [12690317.898739] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=52.224.143.24 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x00 TTL=244 ID=56540 PROTO=UDP SPT=30016 DPT=111 LEN=48 Jun 25 03:02:05 localhost kernel: [12690318.297293] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=52.224.143.24 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x00 TTL=244 ID=6616 PROTO=UDP SPT=30016 DPT=111 LEN=48 Jun 25 03:02:05 localhost kernel: [12690318.297326] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=52.224.143.24 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x00 TTL=244 ID=6616 PROTO=UDP SPT=30016 DPT=111 LEN=48 |
2019-06-25 17:28:57 |
| 193.206.103.91 | attackbotsspam | 25.06.2019 09:11:03 SSH access blocked by firewall |
2019-06-25 17:26:55 |
| 37.114.139.147 | attack | Jun 25 06:58:24 XXX sshd[18212]: Invalid user admin from 37.114.139.147 port 51156 |
2019-06-25 18:28:57 |
| 190.12.178.212 | attackspambots | Jun 25 11:45:16 ns37 sshd[6119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.12.178.212 Jun 25 11:45:16 ns37 sshd[6119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.12.178.212 |
2019-06-25 18:14:56 |
| 103.101.233.162 | attack | TCP port 445 (SMB) attempt blocked by firewall. [2019-06-25 08:59:43] |
2019-06-25 18:33:15 |
| 35.241.229.237 | attackspam | 3389BruteforceFW21 |
2019-06-25 18:17:37 |
| 122.155.7.133 | attack | firewall-block, port(s): 445/tcp |
2019-06-25 18:20:54 |