City: Jakarta
Region: Jakarta
Country: Indonesia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.158.41.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52042
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;202.158.41.6. IN A
;; AUTHORITY SECTION:
. 585 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019113002 1800 900 604800 86400
;; Query time: 130 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 01 03:52:07 CST 2019
;; MSG SIZE rcvd: 1166.41.158.202.in-addr.arpa domain name pointer www.ptcpi-online.com.
6.41.158.202.in-addr.arpa domain name pointer www.aspacmart.com.
6.41.158.202.in-addr.arpa domain name pointer www.indoprom.net.
6.41.158.202.in-addr.arpa domain name pointer ftp.ird.or.id.
6.41.158.202.in-addr.arpa domain name pointer www.kadinbogor.com.
6.41.158.202.in-addr.arpa domain name pointer commercea.cbn.net.id.
6.41.158.202.in-addr.arpa domain name pointer ftp.commercea.cbn.net.id.
6.41.158.202.in-addr.arpa domain name pointer www.hildco.co.id.
6.41.158.202.in-addr.arpa domain name pointer ftp.kadinbogor.com.
6.41.158.202.in-addr.arpa domain name pointer ftp.three-ss.com.
6.41.158.202.in-addr.arpa domain name pointer ftp.skyrinkjakarta.com.
6.41.158.202.in-addr.arpa domain name pointer ftp.astrido-finance.co.id.
6.41.158.202.in-addr.arpa domain name pointer www.studyline.co.id.
6.41.158.202.in-addr.arpa domain name pointer ftp.riauprovince.com.
6.41.158.202.in-addr.arpa domain name pointer www.cgprtstat.org.
6.41.158.202.in-addr.ar;; Truncated, retrying in TCP mode.
Server: 100.100.2.136
Address: 100.100.2.136#53
Non-authoritative answer:
6.41.158.202.in-addr.arpa name = ftp.netwave.co.id.
6.41.158.202.in-addr.arpa name = www.three-ss.com.
6.41.158.202.in-addr.arpa name = www.studyline.co.id.
6.41.158.202.in-addr.arpa name = www.ptcpi-online.com.
6.41.158.202.in-addr.arpa name = www.caltex-pacific-indonesia.com.
6.41.158.202.in-addr.arpa name = commercea.cbn.net.id.
6.41.158.202.in-addr.arpa name = ftp.bigg.or.id.
6.41.158.202.in-addr.arpa name = ftp.three-ss.com.
6.41.158.202.in-addr.arpa name = www.indoprom.net.
6.41.158.202.in-addr.arpa name = ftp.sandrafine.co.id.
6.41.158.202.in-addr.arpa name = www.e-propertybiz.com.
6.41.158.202.in-addr.arpa name = ftp.shangbao.co.id.
6.41.158.202.in-addr.arpa name = www.astrido-finance.co.id.
6.41.158.202.in-addr.arpa name = www.icma.or.id.
6.41.158.202.in-addr.arpa name = ftp.aspacmart.com.
6.41.158.202.in-addr.arpa name = www.bigg.or.id.
6.41.158.202.in-addr.arpa name = www.ird.or.id.
6.41.158.202.in-addr.arpa name = www.pikhospital.co.id.
6.41.158.202.in-addr.arpa name = www.ikutlah-aku.org.
6.41.158.202.in-addr.arpa name = www.riauprovince.com.
6.41.158.202.in-addr.arpa name = ftp.indorattanwood.com.
6.41.158.202.in-addr.arpa name = www.shangbao.co.id.
6.41.158.202.in-addr.arpa name = ftp.icma.or.id.
6.41.158.202.in-addr.arpa name = ftp.scl3pl.com.
6.41.158.202.in-addr.arpa name = ftp.enerkon.co.id.
6.41.158.202.in-addr.arpa name = ftp.skyrinkjakarta.com.
6.41.158.202.in-addr.arpa name = www.cgprtstat.org.
6.41.158.202.in-addr.arpa name = www.scl3pl.com.
6.41.158.202.in-addr.arpa name = ftp.ird.or.id.
6.41.158.202.in-addr.arpa name = ftp.ptcpi-online.com.
6.41.158.202.in-addr.arpa name = ftp.kadinbogor.com.
6.41.158.202.in-addr.arpa name = ftp.hildco.co.id.
6.41.158.202.in-addr.arpa name = ftp.pnmi.co.id.
6.41.158.202.in-addr.arpa name = www.enerkon.co.id.
6.41.158.202.in-addr.arpa name = www.pnmi.co.id.
6.41.158.202.in-addr.arpa name = ftp.e-propertybiz.com.
6.41.158.202.in-addr.arpa name = | IP | Type | Details | Datetime |
|---|---|---|---|
| 124.104.203.47 | attack | 1597290483 - 08/13/2020 05:48:03 Host: 124.104.203.47/124.104.203.47 Port: 445 TCP Blocked |
2020-08-13 18:47:03 |
| 180.76.174.197 | attack | Aug 13 08:38:53 ns3164893 sshd[19572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.174.197 user=root Aug 13 08:38:55 ns3164893 sshd[19572]: Failed password for root from 180.76.174.197 port 40584 ssh2 ... |
2020-08-13 19:06:55 |
| 185.108.106.215 | attackspambots | query suspecte, attemp SQL injection log:/tourisme/ski/stations_de_ski.php?id=/etc/passwd |
2020-08-13 18:37:26 |
| 191.241.242.91 | attackbots | 1597290462 - 08/13/2020 05:47:42 Host: 191.241.242.91/191.241.242.91 Port: 445 TCP Blocked |
2020-08-13 19:01:00 |
| 124.93.160.82 | attack | $f2bV_matches |
2020-08-13 19:00:28 |
| 139.219.234.171 | attackbotsspam | Aug 13 05:47:56 kh-dev-server sshd[3487]: Failed password for root from 139.219.234.171 port 10112 ssh2 ... |
2020-08-13 18:50:55 |
| 180.97.80.246 | attackspambots | Aug 13 06:46:44 firewall sshd[3893]: Failed password for root from 180.97.80.246 port 48218 ssh2 Aug 13 06:51:23 firewall sshd[4064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.97.80.246 user=root Aug 13 06:51:25 firewall sshd[4064]: Failed password for root from 180.97.80.246 port 42404 ssh2 ... |
2020-08-13 18:59:17 |
| 5.196.225.174 | attackbotsspam | sshd: Failed password for .... from 5.196.225.174 port 60060 ssh2 (11 attempts) |
2020-08-13 18:28:59 |
| 222.186.30.112 | attackbotsspam | Aug 13 13:15:19 server2 sshd\[29075\]: User root from 222.186.30.112 not allowed because not listed in AllowUsers Aug 13 13:15:21 server2 sshd\[29079\]: User root from 222.186.30.112 not allowed because not listed in AllowUsers Aug 13 13:15:27 server2 sshd\[29087\]: User root from 222.186.30.112 not allowed because not listed in AllowUsers Aug 13 13:20:09 server2 sshd\[29474\]: User root from 222.186.30.112 not allowed because not listed in AllowUsers Aug 13 13:22:48 server2 sshd\[29592\]: User root from 222.186.30.112 not allowed because not listed in AllowUsers Aug 13 13:23:19 server2 sshd\[29630\]: User root from 222.186.30.112 not allowed because not listed in AllowUsers |
2020-08-13 18:32:55 |
| 64.227.62.250 | attackbotsspam | "Unauthorized connection attempt on SSHD detected" |
2020-08-13 18:36:08 |
| 31.146.179.190 | attackspambots | 20/8/13@02:22:49: FAIL: Alarm-Network address from=31.146.179.190 20/8/13@02:22:49: FAIL: Alarm-Network address from=31.146.179.190 ... |
2020-08-13 18:51:52 |
| 113.181.229.76 | attack | IP 113.181.229.76 attacked honeypot on port: 1433 at 8/12/2020 8:47:11 PM |
2020-08-13 18:48:55 |
| 192.241.230.18 | attackbots | TCP port : 6667 |
2020-08-13 18:45:35 |
| 51.38.50.99 | attackspambots | Aug 13 11:52:12 vpn01 sshd[23130]: Failed password for root from 51.38.50.99 port 40600 ssh2 ... |
2020-08-13 18:38:29 |
| 106.52.197.21 | attackspam | Aug 13 12:22:00 abendstille sshd\[12257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.197.21 user=root Aug 13 12:22:02 abendstille sshd\[12257\]: Failed password for root from 106.52.197.21 port 40272 ssh2 Aug 13 12:24:58 abendstille sshd\[15246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.197.21 user=root Aug 13 12:25:00 abendstille sshd\[15246\]: Failed password for root from 106.52.197.21 port 43380 ssh2 Aug 13 12:28:01 abendstille sshd\[18109\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.197.21 user=root ... |
2020-08-13 18:42:08 |