110.138.150.111

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT Telkom Indonesia

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-10 18:01:30,910 INFO [amun_request_handler] PortScan Detected on Port: 445 (110.138.150.111)	2019-09-11 09:46:07

Comments on same subnet:

IP	Type	Details	Datetime
110.138.150.113	attack	Unauthorized IMAP connection attempt	2020-06-16 14:30:48
110.138.150.227	attackspam	1591302043 - 06/04/2020 22:20:43 Host: 110.138.150.227/110.138.150.227 Port: 445 TCP Blocked	2020-06-05 07:20:28
110.138.150.45	attackbots	Unauthorised access (May 12) SRC=110.138.150.45 LEN=52 TTL=116 ID=10921 DF TCP DPT=445 WINDOW=8192 SYN	2020-05-12 12:26:07
110.138.150.80	attackspambots	May 9 03:32:41 raspberrypi sshd\[22172\]: Did not receive identification string from 110.138.150.80 ...	2020-05-10 00:49:33
110.138.150.174	attackbotsspam	RDP Brute-Force	2020-05-04 17:06:14
110.138.150.251	attackbots	Unauthorized connection attempt from IP address 110.138.150.251 on Port 445(SMB)	2020-03-03 05:01:00
110.138.150.95	attackspam	Honeypot attack, port: 445, PTR: 95.subnet110-138-150.speedy.telkom.net.id.	2020-02-21 20:31:49
110.138.150.236	attackspambots	Web-based SQL injection attempt	2020-02-12 16:48:36
110.138.150.223	attackbots	Honeypot attack, port: 445, PTR: 223.subnet110-138-150.speedy.telkom.net.id.	2020-02-10 19:16:16
110.138.150.0	attackbotsspam	unauthorized connection attempt	2020-02-07 16:58:38
110.138.150.35	attack	Honeypot attack, port: 445, PTR: 35.subnet110-138-150.speedy.telkom.net.id.	2020-02-02 17:02:55
110.138.150.17	attack	Honeypot attack, port: 445, PTR: 17.subnet110-138-150.speedy.telkom.net.id.	2020-02-02 17:02:41
110.138.150.0	attackbotsspam	20/1/31@03:47:27: FAIL: Alarm-Network address from=110.138.150.0 ...	2020-01-31 19:23:54
110.138.150.221	attackbotsspam	20/1/12@23:46:56: FAIL: Alarm-Network address from=110.138.150.221 20/1/12@23:46:56: FAIL: Alarm-Network address from=110.138.150.221 ...	2020-01-13 19:49:01
110.138.150.13	attack	Honeypot attack, port: 445, PTR: 13.subnet110-138-150.speedy.telkom.net.id.	2020-01-13 16:58:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.138.150.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13931
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;110.138.150.111.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091003 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Sep 11 09:45:53 CST 2019
;; MSG SIZE  rcvd: 119

Host info

111.150.138.110.in-addr.arpa has no PTR record

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
111.150.138.110.in-addr.arpa	name = 111.subnet110-138-150.speedy.telkom.net.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
111.90.159.118	attack	Automatic report	2019-07-20 11:44:46
45.119.208.233	attackbotsspam	Jul 20 04:08:59 mout sshd[1958]: Invalid user 111 from 45.119.208.233 port 60535	2019-07-20 11:39:14
185.222.211.4	attackbots	MagicSpam Rule: block_rbl_lists (b.barracudacentral.org); Spammer IP: 185.222.211.4	2019-07-20 11:54:59
84.113.99.164	attackspam	Jul 20 04:26:16 localhost sshd\[22461\]: Invalid user standard from 84.113.99.164 port 35686 Jul 20 04:26:16 localhost sshd\[22461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.113.99.164 ...	2019-07-20 11:31:12
185.254.122.102	attackspam	Port scan on 13 port(s): 2270 3030 9912 9995 10002 13391 33387 33390 33929 39999 42424 59999 65000	2019-07-20 11:41:21
185.81.153.12	attackbotsspam	MagicSpam Rule: block_rbl_lists (dyna.spamrats.com); Spammer IP: 185.81.153.12	2019-07-20 11:58:02
185.222.211.244	attackbots	Jul 20 04:47:22 relay postfix/smtpd\[24990\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.244\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ Jul 20 04:47:22 relay postfix/smtpd\[24990\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.244\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ Jul 20 04:47:22 relay postfix/smtpd\[24990\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.244\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ Jul 20 04:47:22 relay postfix/smtpd\[24990\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.244\]: 554 5.7.1 \: Relay access denied\; from=\	2019-07-20 11:50:33
104.248.240.178	attackbotsspam	Jul 17 11:38:41 rb06 sshd[27254]: Failed password for invalid user english from 104.248.240.178 port 56954 ssh2 Jul 17 11:38:41 rb06 sshd[27254]: Received disconnect from 104.248.240.178: 11: Bye Bye [preauth] Jul 17 11:44:19 rb06 sshd[32378]: Failed password for invalid user parsa from 104.248.240.178 port 46462 ssh2 Jul 17 11:44:19 rb06 sshd[32378]: Received disconnect from 104.248.240.178: 11: Bye Bye [preauth] Jul 17 11:48:40 rb06 sshd[464]: Failed password for invalid user wq from 104.248.240.178 port 48846 ssh2 Jul 17 11:48:40 rb06 sshd[464]: Received disconnect from 104.248.240.178: 11: Bye Bye [preauth] Jul 17 11:52:52 rb06 sshd[1245]: Failed password for invalid user taiwan from 104.248.240.178 port 52522 ssh2 Jul 17 11:52:52 rb06 sshd[1245]: Received disconnect from 104.248.240.178: 11: Bye Bye [preauth] Jul 17 11:57:14 rb06 sshd[2838]: Failed password for invalid user as from 104.248.240.178 port 54584 ssh2 Jul 17 11:57:14 rb06 sshd[2838]: Received disconnect........ -------------------------------	2019-07-20 12:31:17
177.94.243.188	attackbotsspam	MagicSpam Rule: block_rbl_lists (dyna.spamrats.com); Spammer IP: 177.94.243.188	2019-07-20 11:59:31
52.172.40.62	attackspam	RDP Bruteforce	2019-07-20 11:38:49
193.31.119.174	attackspam	MagicSpam Rule: block_rbl_lists (b.barracudacentral.org); Spammer IP: 193.31.119.174	2019-07-20 11:48:22
134.73.161.163	attack	Automatic report - SSH Brute-Force Attack	2019-07-20 11:30:23
201.114.244.45	attack	Jul 20 05:40:35 v22018076622670303 sshd\[6644\]: Invalid user gary from 201.114.244.45 port 51474 Jul 20 05:40:35 v22018076622670303 sshd\[6644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.114.244.45 Jul 20 05:40:37 v22018076622670303 sshd\[6644\]: Failed password for invalid user gary from 201.114.244.45 port 51474 ssh2 ...	2019-07-20 11:43:23
120.24.44.35	attackbotsspam	DATE:2019-07-20 03:35:19, IP:120.24.44.35, PORT:ssh brute force auth on SSH service (patata)	2019-07-20 11:38:19
177.40.142.26	attackbotsspam	Automatic report - Port Scan Attack	2019-07-20 12:21:54

Recently Reported IPs

118.169.84.120	67.71.60.133	86.40.145.167	84.54.144.161
66.225.198.186	189.213.233.34	184.134.24.236	202.125.53.68
93.74.112.89	187.203.161.108	132.4.82.185	223.137.58.143
40.186.190.167	34.238.158.63	149.140.250.223	26.65.213.92
32.47.152.165	178.130.215.83	100.205.129.51	42.114.157.107