119.82.242.58 - IPInfo

Basic Info

City: Jakarta

Region: Jakarta

Country: Indonesia

Internet Service Provider: PT Data Utama Dinamika

Hostname: unknown

Organization: PT. DATA Utama Dinamika

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	"Account brute force using dictionary attack against Exchange Online"	2019-08-06 02:22:29

Comments on same subnet:

IP	Type	Details	Datetime
119.82.242.153	attackbotsspam	TCP (SYN) 119.82.242.153:53910 -> port 23, len 40	2020-05-20 06:59:59

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.82.242.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8790
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.82.242.58.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080502 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Aug 06 02:22:22 CST 2019
;; MSG SIZE  rcvd: 117

Host info

58.242.82.119.in-addr.arpa domain name pointer ip-242-58.datautama.net.id.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
58.242.82.119.in-addr.arpa	name = ip-242-58.datautama.net.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
186.122.39.205	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-10-23 20:23:56
185.176.27.166	attackbotsspam	firewall-block, port(s): 7001/tcp, 21155/tcp, 25511/tcp, 29955/tcp	2019-10-23 20:00:21
222.175.126.74	attackbotsspam	Oct 23 14:25:19 minden010 sshd[22925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.175.126.74 Oct 23 14:25:21 minden010 sshd[22925]: Failed password for invalid user inf0 from 222.175.126.74 port 21880 ssh2 Oct 23 14:30:20 minden010 sshd[28769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.175.126.74 ...	2019-10-23 20:36:08
118.70.229.77	attackbotsspam	Fail2Ban Ban Triggered	2019-10-23 20:33:16
82.221.129.44	attack	82.221.129.44 - - [23/Oct/2019:13:50:13 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 82.221.129.44 - - [23/Oct/2019:13:50:13 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 82.221.129.44 - - [23/Oct/2019:13:50:14 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 82.221.129.44 - - [23/Oct/2019:13:50:14 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 82.221.129.44 - - [23/Oct/2019:13:50:14 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 82.221.129.44 - - [23/Oct/2019:13:50:15 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-10-23 20:10:50
45.82.153.34	attackbotsspam	10/23/2019-07:56:56.284944 45.82.153.34 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-10-23 20:23:25
51.77.156.223	attackspambots	Oct 23 15:08:04 sauna sshd[176864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.156.223 Oct 23 15:08:06 sauna sshd[176864]: Failed password for invalid user setup from 51.77.156.223 port 53636 ssh2 ...	2019-10-23 20:23:11
159.203.201.155	attackspam	firewall-block, port(s): 35747/tcp	2019-10-23 20:12:03
111.231.75.83	attackspam	Oct 23 01:48:25 eddieflores sshd\[10954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.75.83 user=root Oct 23 01:48:27 eddieflores sshd\[10954\]: Failed password for root from 111.231.75.83 port 41934 ssh2 Oct 23 01:53:46 eddieflores sshd\[11398\]: Invalid user 0 from 111.231.75.83 Oct 23 01:53:46 eddieflores sshd\[11398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.75.83 Oct 23 01:53:48 eddieflores sshd\[11398\]: Failed password for invalid user 0 from 111.231.75.83 port 52230 ssh2	2019-10-23 20:05:14
185.221.44.132	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-10-23 20:04:13
106.52.34.27	attackbots	Oct 23 13:50:21 dedicated sshd[12255]: Invalid user vweru from 106.52.34.27 port 43534	2019-10-23 20:06:49
82.64.153.176	attackspam	Oct 23 14:29:30 lnxded64 sshd[25872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.153.176 Oct 23 14:29:30 lnxded64 sshd[25872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.153.176	2019-10-23 20:30:29
168.62.243.97	attackspam	firewall-block, port(s): 1433/tcp	2019-10-23 20:10:34
167.114.118.135	attackspam	[munged]::443 167.114.118.135 - - [23/Oct/2019:13:50:05 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 167.114.118.135 - - [23/Oct/2019:13:50:07 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 167.114.118.135 - - [23/Oct/2019:13:50:09 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 167.114.118.135 - - [23/Oct/2019:13:50:11 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 167.114.118.135 - - [23/Oct/2019:13:50:12 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 167.114.118.135 - - [23/Oct/2019:13:50:14 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.	2019-10-23 20:06:06
125.130.110.20	attack	Oct 23 15:01:50 pkdns2 sshd\[14948\]: Invalid user GLqTnj8ALPeI from 125.130.110.20Oct 23 15:01:51 pkdns2 sshd\[14948\]: Failed password for invalid user GLqTnj8ALPeI from 125.130.110.20 port 47750 ssh2Oct 23 15:06:45 pkdns2 sshd\[15140\]: Invalid user iodine from 125.130.110.20Oct 23 15:06:47 pkdns2 sshd\[15140\]: Failed password for invalid user iodine from 125.130.110.20 port 45064 ssh2Oct 23 15:11:45 pkdns2 sshd\[15336\]: Invalid user qwerty123 from 125.130.110.20Oct 23 15:11:48 pkdns2 sshd\[15336\]: Failed password for invalid user qwerty123 from 125.130.110.20 port 43524 ssh2 ...	2019-10-23 20:21:54

Recently Reported IPs

57.253.21.148	38.88.48.23	151.97.33.156	209.107.24.113
55.161.226.152	191.177.52.73	39.44.222.87	65.101.210.1
39.184.183.5	194.249.61.3	119.42.118.157	41.40.233.230
15.183.22.230	78.89.38.167	114.167.22.19	71.121.163.82
119.29.191.40	96.186.48.178	128.28.84.94	129.208.140.247