110.138.150.152

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT Telkom Indonesia

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	20/1/9@23:48:40: FAIL: Alarm-Network address from=110.138.150.152 ...	2020-01-10 19:36:10

Comments on same subnet:

IP	Type	Details	Datetime
110.138.150.113	attack	Unauthorized IMAP connection attempt	2020-06-16 14:30:48
110.138.150.227	attackspam	1591302043 - 06/04/2020 22:20:43 Host: 110.138.150.227/110.138.150.227 Port: 445 TCP Blocked	2020-06-05 07:20:28
110.138.150.45	attackbots	Unauthorised access (May 12) SRC=110.138.150.45 LEN=52 TTL=116 ID=10921 DF TCP DPT=445 WINDOW=8192 SYN	2020-05-12 12:26:07
110.138.150.80	attackspambots	May 9 03:32:41 raspberrypi sshd\[22172\]: Did not receive identification string from 110.138.150.80 ...	2020-05-10 00:49:33
110.138.150.174	attackbotsspam	RDP Brute-Force	2020-05-04 17:06:14
110.138.150.251	attackbots	Unauthorized connection attempt from IP address 110.138.150.251 on Port 445(SMB)	2020-03-03 05:01:00
110.138.150.95	attackspam	Honeypot attack, port: 445, PTR: 95.subnet110-138-150.speedy.telkom.net.id.	2020-02-21 20:31:49
110.138.150.236	attackspambots	Web-based SQL injection attempt	2020-02-12 16:48:36
110.138.150.223	attackbots	Honeypot attack, port: 445, PTR: 223.subnet110-138-150.speedy.telkom.net.id.	2020-02-10 19:16:16
110.138.150.0	attackbotsspam	unauthorized connection attempt	2020-02-07 16:58:38
110.138.150.35	attack	Honeypot attack, port: 445, PTR: 35.subnet110-138-150.speedy.telkom.net.id.	2020-02-02 17:02:55
110.138.150.17	attack	Honeypot attack, port: 445, PTR: 17.subnet110-138-150.speedy.telkom.net.id.	2020-02-02 17:02:41
110.138.150.0	attackbotsspam	20/1/31@03:47:27: FAIL: Alarm-Network address from=110.138.150.0 ...	2020-01-31 19:23:54
110.138.150.221	attackbotsspam	20/1/12@23:46:56: FAIL: Alarm-Network address from=110.138.150.221 20/1/12@23:46:56: FAIL: Alarm-Network address from=110.138.150.221 ...	2020-01-13 19:49:01
110.138.150.13	attack	Honeypot attack, port: 445, PTR: 13.subnet110-138-150.speedy.telkom.net.id.	2020-01-13 16:58:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.138.150.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49855
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;110.138.150.152.		IN	A

;; AUTHORITY SECTION:
.			552	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011000 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 10 19:36:06 CST 2020
;; MSG SIZE  rcvd: 119

Host info

152.150.138.110.in-addr.arpa domain name pointer 152.subnet110-138-150.speedy.telkom.net.id.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
152.150.138.110.in-addr.arpa	name = 152.subnet110-138-150.speedy.telkom.net.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
192.99.175.177	attack	Found on Github Combined on 3 lists / proto=6 . srcport=41402 . dstport=443 . (2341)	2020-09-21 04:42:18
222.186.173.226	attackbotsspam	Sep 21 00:14:48 ift sshd\[53067\]: Failed password for root from 222.186.173.226 port 64274 ssh2Sep 21 00:14:51 ift sshd\[53067\]: Failed password for root from 222.186.173.226 port 64274 ssh2Sep 21 00:15:02 ift sshd\[53067\]: Failed password for root from 222.186.173.226 port 64274 ssh2Sep 21 00:15:14 ift sshd\[53343\]: Failed password for root from 222.186.173.226 port 54283 ssh2Sep 21 00:15:18 ift sshd\[53343\]: Failed password for root from 222.186.173.226 port 54283 ssh2 ...	2020-09-21 05:17:58
178.32.50.239	attackspam	2020-09-20 11:52:40.611339-0500 localhost smtpd[52080]: NOQUEUE: reject: RCPT from unknown[178.32.50.239]: 450 4.7.25 Client host rejected: cannot find your hostname, [178.32.50.239]; from= to= proto=ESMTP helo=	2020-09-21 04:54:49
39.34.247.91	attack	2020-09-20 12:00:20.073577-0500 localhost smtpd[52512]: NOQUEUE: reject: RCPT from unknown[39.34.247.91]: 554 5.7.1 Service unavailable; Client host [39.34.247.91] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/39.34.247.91; from= to= proto=ESMTP helo=<[39.34.247.91]>	2020-09-21 04:54:12
222.186.169.192	attack	Sep 20 22:45:11 theomazars sshd[16445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.192 user=root Sep 20 22:45:13 theomazars sshd[16445]: Failed password for root from 222.186.169.192 port 39668 ssh2	2020-09-21 04:48:14
203.217.105.57	attackspambots	Unwanted checking 80 or 443 port ...	2020-09-21 04:55:36
106.13.47.78	attackbotsspam	Sep 20 23:31:59 mx sshd[824181]: Failed password for root from 106.13.47.78 port 45674 ssh2 Sep 20 23:33:11 mx sshd[824201]: Invalid user admin from 106.13.47.78 port 35592 Sep 20 23:33:11 mx sshd[824201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.47.78 Sep 20 23:33:11 mx sshd[824201]: Invalid user admin from 106.13.47.78 port 35592 Sep 20 23:33:13 mx sshd[824201]: Failed password for invalid user admin from 106.13.47.78 port 35592 ssh2 ...	2020-09-21 05:15:23
109.123.117.244	attackspam	Port scan denied	2020-09-21 05:09:55
190.77.79.127	attackspam	Sep 20 20:03:07 root sshd[7185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190-77-79-127.dyn.dsl.cantv.net user=root Sep 20 20:03:09 root sshd[7185]: Failed password for root from 190.77.79.127 port 16403 ssh2 ...	2020-09-21 04:54:27
218.92.0.158	attackbotsspam	SSH brute-force attempt	2020-09-21 05:16:55
201.148.157.226	attackbotsspam	$f2bV_matches	2020-09-21 05:08:51
148.70.149.39	attackspam	Bruteforce detected by fail2ban	2020-09-21 04:47:23
69.127.24.52	attackspambots	(sshd) Failed SSH login from 69.127.24.52 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 13:03:14 iqdig9 sshd[22968]: Invalid user admin from 69.127.24.52 Sep 20 13:03:14 iqdig9 sshd[22970]: Invalid user admin from 69.127.24.52 Sep 20 13:03:15 iqdig9 sshd[22972]: Invalid user admin from 69.127.24.52 Sep 20 13:03:15 iqdig9 sshd[22974]: Invalid user admin from 69.127.24.52 Sep 20 13:03:16 iqdig9 sshd[22976]: Invalid user admin from 69.127.24.52	2020-09-21 04:43:25
59.55.36.89	attackspam	Brute forcing email accounts	2020-09-21 05:08:17
208.187.244.197	attackbotsspam	2020-09-20 12:00:28.069140-0500 localhost smtpd[52512]: NOQUEUE: reject: RCPT from unknown[208.187.244.197]: 554 5.7.1 Service unavailable; Client host [208.187.244.197] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=	2020-09-21 04:52:25

Recently Reported IPs

50.168.255.185	0.45.213.152	134.177.59.168	210.14.182.56
115.42.177.43	56.248.56.181	46.12.114.113	246.77.176.236
167.209.249.25	71.6.233.242	89.64.30.29	51.15.87.34
170.106.81.221	198.108.66.147	193.251.189.244	114.7.2.17
23.40.128.236	224.129.146.219	175.147.195.74	171.4.123.100