City: Medan
Region: Sumatera Utara
Country: Indonesia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.206.30.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59810
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;116.206.30.48. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023050200 1800 900 604800 86400
;; Query time: 75 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 02 15:33:05 CST 2023
;; MSG SIZE rcvd: 10648.30.206.116.in-addr.arpa domain name pointer subs34-116-206-30-48.three.co.id.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
48.30.206.116.in-addr.arpa name = subs34-116-206-30-48.three.co.id.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 209.17.97.18 | attack | Brute force attack stopped by firewall |
2020-09-21 03:49:45 |
| 190.153.45.81 | attackspam |
|
2020-09-21 03:37:13 |
| 102.65.90.61 | attackbots | Sep 20 16:01:33 roki-contabo sshd\[24714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.65.90.61 user=root Sep 20 16:01:35 roki-contabo sshd\[24714\]: Failed password for root from 102.65.90.61 port 55900 ssh2 Sep 20 21:04:55 roki-contabo sshd\[27398\]: Invalid user admin from 102.65.90.61 Sep 20 21:04:55 roki-contabo sshd\[27398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.65.90.61 Sep 20 21:04:57 roki-contabo sshd\[27398\]: Failed password for invalid user admin from 102.65.90.61 port 58504 ssh2 ... |
2020-09-21 04:00:11 |
| 116.49.242.189 | attack | Found on CINS badguys / proto=6 . srcport=58573 . dstport=5555 . (2352) |
2020-09-21 03:54:17 |
| 192.42.116.20 | attack | Automatic report - Banned IP Access |
2020-09-21 03:50:06 |
| 218.92.0.212 | attackbots | Sep 20 21:47:32 srv-ubuntu-dev3 sshd[63358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212 user=root Sep 20 21:47:34 srv-ubuntu-dev3 sshd[63358]: Failed password for root from 218.92.0.212 port 48219 ssh2 Sep 20 21:47:37 srv-ubuntu-dev3 sshd[63358]: Failed password for root from 218.92.0.212 port 48219 ssh2 Sep 20 21:47:32 srv-ubuntu-dev3 sshd[63358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212 user=root Sep 20 21:47:34 srv-ubuntu-dev3 sshd[63358]: Failed password for root from 218.92.0.212 port 48219 ssh2 Sep 20 21:47:37 srv-ubuntu-dev3 sshd[63358]: Failed password for root from 218.92.0.212 port 48219 ssh2 Sep 20 21:47:32 srv-ubuntu-dev3 sshd[63358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212 user=root Sep 20 21:47:34 srv-ubuntu-dev3 sshd[63358]: Failed password for root from 218.92.0.212 port 48219 ssh2 Sep 20 21 ... |
2020-09-21 03:48:05 |
| 212.70.149.52 | attackspam | 2020-09-20T21:47:41.297207www postfix/smtpd[20574]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-09-20T21:48:05.477857www postfix/smtpd[20574]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-09-20T21:48:31.462773www postfix/smtpd[20574]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-09-21 03:51:50 |
| 62.234.115.152 | attackspambots | Lines containing failures of 62.234.115.152 Sep 19 20:34:03 nxxxxxxx sshd[917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.115.152 user=r.r Sep 19 20:34:05 nxxxxxxx sshd[917]: Failed password for r.r from 62.234.115.152 port 51692 ssh2 Sep 19 20:34:05 nxxxxxxx sshd[917]: Received disconnect from 62.234.115.152 port 51692:11: Bye Bye [preauth] Sep 19 20:34:05 nxxxxxxx sshd[917]: Disconnected from authenticating user r.r 62.234.115.152 port 51692 [preauth] Sep 19 20:39:16 nxxxxxxx sshd[1598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.115.152 user=r.r Sep 19 20:39:18 nxxxxxxx sshd[1598]: Failed password for r.r from 62.234.115.152 port 47858 ssh2 Sep 19 20:39:18 nxxxxxxx sshd[1598]: Received disconnect from 62.234.115.152 port 47858:11: Bye Bye [preauth] Sep 19 20:39:18 nxxxxxxx sshd[1598]: Disconnected from authenticating user r.r 62.234.115.152 port 47858 [preauth] S........ ------------------------------ |
2020-09-21 03:48:48 |
| 116.96.128.192 | attackspam | Automatic Fail2ban report - Trying login SSH |
2020-09-21 03:46:18 |
| 97.43.65.114 | attack | Brute forcing email accounts |
2020-09-21 03:46:41 |
| 27.6.185.226 | attackbots | Listed on zen-spamhaus also barracudaCentral and abuseat.org / proto=6 . srcport=37206 . dstport=8080 . (2351) |
2020-09-21 03:58:38 |
| 45.248.194.225 | attack | port scan and connect, tcp 23 (telnet) |
2020-09-21 03:48:22 |
| 70.185.144.101 | attackspambots | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-09-21 03:53:40 |
| 185.220.101.211 | attackbotsspam | fail2ban detected bruce force on ssh iptables |
2020-09-21 03:34:51 |
| 54.38.240.34 | attackbots | Sep 20 21:11:17 piServer sshd[20616]: Failed password for root from 54.38.240.34 port 46244 ssh2 Sep 20 21:14:46 piServer sshd[20975]: Failed password for root from 54.38.240.34 port 55904 ssh2 ... |
2020-09-21 03:26:51 |