116.206.8.48 - IPInfo

Basic Info

City: Depok

Region: Jawa Barat

Country: Indonesia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.206.8.56	attack	Wordpress attacks	2020-06-01 02:53:55
116.206.8.16	attackspambots	Unauthorized connection attempt detected from IP address 116.206.8.16 to port 445	2020-04-13 03:13:03
116.206.8.15	attackspambots	Unauthorised access (Mar 21) SRC=116.206.8.15 LEN=52 TOS=0x08 PREC=0x40 TTL=107 ID=13077 DF TCP DPT=445 WINDOW=8192 SYN	2020-03-21 16:03:21
116.206.8.63	attack	Honeypot attack, port: 445, PTR: subs24-116-206-8-63.three.co.id.	2020-03-18 23:58:17
116.206.8.16	attackbotsspam	445/tcp [2019-12-27]1pkt	2019-12-27 16:10:25
116.206.8.12	attackspam	1576853641 - 12/20/2019 15:54:01 Host: 116.206.8.12/116.206.8.12 Port: 445 TCP Blocked	2019-12-21 00:37:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.206.8.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4921
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.206.8.48.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023050500 1800 900 604800 86400

;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 05 16:37:30 CST 2023
;; MSG SIZE  rcvd: 105

Host info

48.8.206.116.in-addr.arpa domain name pointer subs24-116-206-8-48.three.co.id.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
48.8.206.116.in-addr.arpa	name = subs24-116-206-8-48.three.co.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
113.175.164.91	attack	Unauthorized connection attempt from IP address 113.175.164.91 on Port 445(SMB)	2020-09-06 02:48:01
81.41.135.82	attackspam	Unauthorised access (Sep 5) SRC=81.41.135.82 LEN=40 TOS=0x10 PREC=0x40 TTL=242 ID=54321 TCP DPT=8080 WINDOW=65535 SYN	2020-09-06 02:53:34
59.90.200.187	attackbotsspam	Sep 4 23:07:45 myvps sshd[23610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.90.200.187 Sep 4 23:07:46 myvps sshd[23610]: Failed password for invalid user raspberry from 59.90.200.187 port 40572 ssh2 Sep 4 23:54:54 myvps sshd[21281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.90.200.187 ...	2020-09-06 02:34:37
167.114.251.164	attackspam	Invalid user ts2 from 167.114.251.164 port 58854	2020-09-06 02:32:31
131.108.140.14	attackspam	Unauthorized connection attempt from IP address 131.108.140.14 on Port 445(SMB)	2020-09-06 02:53:04
128.14.141.115	attackspam	UDP 128.14.141.115:32807 -> port 500, len 68	2020-09-06 03:01:43
187.192.1.9	attack	DATE:2020-09-04 18:45:05, IP:187.192.1.9, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-09-06 03:05:07
78.129.221.11	attack	Searching for known java vulnerabilities	2020-09-06 02:25:18
93.93.46.180	attackbotsspam	2020-09-05T18:00:44+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)	2020-09-06 02:31:44
42.111.14.177	attackspambots	Unauthorized connection attempt from IP address 42.111.14.177 on Port 445(SMB)	2020-09-06 02:41:37
122.227.159.84	attackbots	Sep 5 10:43:52 hidden sshd[12585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.227.159.84 Sep 5 10:43:54 hidden sshd[12585]: Failed password for invalid user mininet from 122.227.159.84 port 36495 ssh2 Sep 5 10:49:40 hidden sshd[13691]: Invalid user pos from 122.227.159.84 port 60783	2020-09-06 02:40:22
114.234.197.65	attackspambots	Mirai and Reaper Exploitation Traffic , PTR: PTR record not found	2020-09-06 02:40:52
192.241.173.142	attackbots	Sep 5 19:56:52 xeon sshd[26589]: Failed password for root from 192.241.173.142 port 37560 ssh2	2020-09-06 02:36:18
187.252.200.79	attackbotsspam	Sep 4 18:46:30 mellenthin postfix/smtpd[30890]: NOQUEUE: reject: RCPT from unknown[187.252.200.79]: 554 5.7.1 Service unavailable; Client host [187.252.200.79] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/187.252.200.79; from= to= proto=ESMTP helo=<187.252.200.79.cable.dyn.cableonline.com.mx>	2020-09-06 02:36:04
46.191.141.224	attack	Unauthorized connection attempt from IP address 46.191.141.224 on Port 445(SMB)	2020-09-06 02:47:01

Recently Reported IPs

140.116.156.107	114.142.169.18	140.116.181.253	140.116.157.176
140.116.20.158	115.178.222.122	140.116.53.125	140.130.83.76
193.227.60.99	131.111.5.181	140.116.245.181	159.226.171.17
140.116.215.244	140.116.39.233	81.180.208.115	115.178.253.4
144.122.63.20	77.223.129.50	103.78.81.134	159.93.73.73