119.82.242.153

Basic Info

City: Surabaya

Region: East Java

Country: Indonesia

Internet Service Provider: PT Data Utama Dinamika

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	TCP (SYN) 119.82.242.153:53910 -> port 23, len 40	2020-05-20 06:59:59

Comments on same subnet:

IP	Type	Details	Datetime
119.82.242.58	attackbots	"Account brute force using dictionary attack against Exchange Online"	2019-08-06 02:22:29

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.82.242.153
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21551
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.82.242.153.			IN	A

;; AUTHORITY SECTION:
.			558	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051901 1800 900 604800 86400

;; Query time: 93 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 20 06:59:55 CST 2020
;; MSG SIZE  rcvd: 118

Host info

153.242.82.119.in-addr.arpa domain name pointer ip-242-153.datautama.net.id.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
153.242.82.119.in-addr.arpa	name = ip-242-153.datautama.net.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
168.194.56.207	attackspambots	20/5/7@13:23:07: FAIL: IoT-Telnet address from=168.194.56.207 ...	2020-05-08 01:41:16
129.226.67.136	attack	$f2bV_matches	2020-05-08 01:23:25
197.89.211.32	attackspam	DATE:2020-05-07 13:58:19, IP:197.89.211.32, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-05-08 01:21:03
137.27.189.194	attack	Port Scan detected from 137.27.189.194 (US/United States/Texas/Fort Worth/137-027-189-194.biz.spectrum.com). 4 hits in the last 260 seconds	2020-05-08 01:23:05
120.70.101.85	attackbots	"Unauthorized connection attempt on SSHD detected"	2020-05-08 01:06:26
42.200.244.178	attackbotsspam	(sshd) Failed SSH login from 42.200.244.178 (HK/Hong Kong/42-200-244-178.static.imsbiz.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 7 19:08:24 amsweb01 sshd[23615]: Invalid user sabina from 42.200.244.178 port 57949 May 7 19:08:25 amsweb01 sshd[23615]: Failed password for invalid user sabina from 42.200.244.178 port 57949 ssh2 May 7 19:18:25 amsweb01 sshd[24321]: Invalid user joao from 42.200.244.178 port 38053 May 7 19:18:27 amsweb01 sshd[24321]: Failed password for invalid user joao from 42.200.244.178 port 38053 ssh2 May 7 19:23:10 amsweb01 sshd[24660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.200.244.178 user=root	2020-05-08 01:35:48
179.124.34.8	attackbots	2020-05-07T19:25:47.523300 sshd[1881]: Invalid user test from 179.124.34.8 port 56775 2020-05-07T19:25:47.538633 sshd[1881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.124.34.8 2020-05-07T19:25:47.523300 sshd[1881]: Invalid user test from 179.124.34.8 port 56775 2020-05-07T19:25:49.248545 sshd[1881]: Failed password for invalid user test from 179.124.34.8 port 56775 ssh2 ...	2020-05-08 01:40:47
165.227.203.162	attack	May 7 11:07:01 firewall sshd[10508]: Invalid user zhai from 165.227.203.162 May 7 11:07:04 firewall sshd[10508]: Failed password for invalid user zhai from 165.227.203.162 port 49236 ssh2 May 7 11:10:59 firewall sshd[10613]: Invalid user cici from 165.227.203.162 ...	2020-05-08 01:27:15
185.50.149.17	attack	May 7 19:22:06 relay postfix/smtpd\[13185\]: warning: unknown\[185.50.149.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 7 19:22:23 relay postfix/smtpd\[22212\]: warning: unknown\[185.50.149.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 7 19:35:43 relay postfix/smtpd\[22209\]: warning: unknown\[185.50.149.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 7 19:36:02 relay postfix/smtpd\[18450\]: warning: unknown\[185.50.149.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 7 19:40:30 relay postfix/smtpd\[26672\]: warning: unknown\[185.50.149.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-05-08 01:43:39
41.72.61.43	attack	Bruteforce detected by fail2ban	2020-05-08 01:40:17
188.227.84.235	spam	Spoofed e-mail from this IP containing a harmful link. Disguised as a OneDrive e-mail	2020-05-08 00:55:27
63.141.231.10	attackspambots	20 attempts against mh-misbehave-ban on pluto	2020-05-08 01:34:29
185.234.218.249	attackbots	May 7 19:30:31 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=172.104.140.148, session=<+LGrPBKlKra56tr5> May 7 19:33:13 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=172.104.140.148, session= May 7 19:35:01 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=172.104.140.148, session= May 7 19:37:42 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=172.104.140.148, session= May 7 19:39:29 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=172.104.140.148, session=<6Qy8XBKlVuO56 ...	2020-05-08 01:48:12
222.186.15.115	attackbotsspam	Unauthorized connection attempt detected from IP address 222.186.15.115 to port 22 [T]	2020-05-08 01:28:43
95.111.234.164	attack	Unauthorized connection attempt detected from IP address 95.111.234.164 to port 22	2020-05-08 01:11:21

Recently Reported IPs

31.162.114.216	112.60.93.43	95.50.135.126	37.183.175.234
104.197.253.0	58.132.178.70	83.157.22.230	221.247.153.10
1.34.166.215	176.161.236.136	182.16.106.38	37.71.215.1
125.127.155.229	187.253.0.237	14.253.242.164	186.36.205.188
41.181.183.0	168.61.166.236	82.15.132.8	61.223.176.175