80.89.130.6 - IPInfo

Basic Info

City: Suzun

Region: Novosibirsk Oblast

Country: Russia

Internet Service Provider: JSC Zap-Sib Transtelecom

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	20/5/11@23:55:03: FAIL: Alarm-Network address from=80.89.130.6 20/5/11@23:55:04: FAIL: Alarm-Network address from=80.89.130.6 ...	2020-05-12 12:32:52
attackbots	Unauthorized connection attempt from IP address 80.89.130.6 on Port 445(SMB)	2019-12-07 15:24:07
attackbotsspam	Unauthorized connection attempt from IP address 80.89.130.6 on Port 445(SMB)	2019-11-29 03:05:05

Type

Details

Datetime

attackspam

20/5/11@23:55:03: FAIL: Alarm-Network address from=80.89.130.6
20/5/11@23:55:04: FAIL: Alarm-Network address from=80.89.130.6
...

2020-05-12 12:32:52

attackbots

Unauthorized connection attempt from IP address 80.89.130.6 on Port 445(SMB)

2019-12-07 15:24:07

attackbotsspam

Unauthorized connection attempt from IP address 80.89.130.6 on Port 445(SMB)

2019-11-29 03:05:05

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.89.130.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23805
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.89.130.6.			IN	A

;; AUTHORITY SECTION:
.			207	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112802 1800 900 604800 86400

;; Query time: 123 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 29 03:05:01 CST 2019
;; MSG SIZE  rcvd: 115

Host info

6.130.89.80.in-addr.arpa domain name pointer gw-fortis-n.ll-bar.zsttk.ru.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
6.130.89.80.in-addr.arpa	name = gw-fortis-n.ll-bar.zsttk.ru.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
129.213.32.32	attackspam	Brute-force attempt banned	2020-04-30 19:52:37
54.68.7.236	attackbots	Apr 28 20:46:17 v26 sshd[16302]: Invalid user hermann from 54.68.7.236 port 56786 Apr 28 20:46:19 v26 sshd[16302]: Failed password for invalid user hermann from 54.68.7.236 port 56786 ssh2 Apr 28 20:46:20 v26 sshd[16302]: Received disconnect from 54.68.7.236 port 56786:11: Bye Bye [preauth] Apr 28 20:46:20 v26 sshd[16302]: Disconnected from 54.68.7.236 port 56786 [preauth] Apr 28 20:52:15 v26 sshd[17077]: Invalid user dongmyeong from 54.68.7.236 port 60400 Apr 28 20:52:17 v26 sshd[17077]: Failed password for invalid user dongmyeong from 54.68.7.236 port 60400 ssh2 Apr 28 20:52:17 v26 sshd[17077]: Received disconnect from 54.68.7.236 port 60400:11: Bye Bye [preauth] Apr 28 20:52:17 v26 sshd[17077]: Disconnected from 54.68.7.236 port 60400 [preauth] Apr 28 20:54:10 v26 sshd[17362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.68.7.236 user=r.r Apr 28 20:54:13 v26 sshd[17362]: Failed password for r.r from 54.68.7.236 port 3760........ -------------------------------	2020-04-30 19:21:10
196.196.190.10	attack	lfd: (smtpauth) Failed SMTP AUTH login from 196.196.190.10 (US/United States/-): 5 in the last 3600 secs - Sat Jun 2 19:45:45 2018	2020-04-30 19:29:28
183.98.215.91	attack	k+ssh-bruteforce	2020-04-30 19:23:15
31.187.116.47	attackbotsspam	[MK-VM1] Blocked by UFW	2020-04-30 19:47:06
77.85.85.99	attackbotsspam	Port probing on unauthorized port 445	2020-04-30 19:53:12
116.105.107.147	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-04-30 19:28:18
153.36.110.43	attack	Apr 29 19:42:43 auw2 sshd\[27934\]: Invalid user zb from 153.36.110.43 Apr 29 19:42:43 auw2 sshd\[27934\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.110.43 Apr 29 19:42:45 auw2 sshd\[27934\]: Failed password for invalid user zb from 153.36.110.43 port 22450 ssh2 Apr 29 19:46:02 auw2 sshd\[28195\]: Invalid user blade from 153.36.110.43 Apr 29 19:46:02 auw2 sshd\[28195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.110.43	2020-04-30 19:27:30
60.167.113.0	attackspambots	lfd: (smtpauth) Failed SMTP AUTH login from 60.167.113.0 (CN/China/-): 5 in the last 3600 secs - Sat Jun 2 01:43:52 2018	2020-04-30 19:40:37
88.98.254.131	attackspam	Brute-Force,SSH	2020-04-30 19:50:27
175.5.138.139	attack	Brute force blocker - service: proftpd1, proftpd2 - aantal: 86 - Sat Jun 2 08:10:17 2018	2020-04-30 19:27:13
37.228.116.129	spam	Spammail mit unerwünschtem Sexangeboten. Passt auch überhaupt nicht zu meinem Profil. Da ich über Freenet schon gehackt wurde über russische Server, könnte meine E-Mailadresse aus diesen alten Vorfällen stammen. Ich habe vor kurzem eine Warnung von Apple über unerwünschte Aktionen auf meinen Internetaktionen bekommen, die ich zu entfernen versucht habe. Das ist mir wohl auch auf dem E-Mail Postfach von Apple gelungen. Aber auf dem Original Freenet Kanal ist mir das wohl nicht gelungen.	2020-04-30 19:54:16
202.153.230.51	attackspam	lfd: (smtpauth) Failed SMTP AUTH login from 202.153.230.51 (static-153-230-51.indo.net.id): 5 in the last 3600 secs - Fri Jun 1 20:03:22 2018	2020-04-30 19:33:11
92.118.234.242	attackbotsspam	[2020-04-30 07:38:33] NOTICE[1170] chan_sip.c: Registration from '"1007" ' failed for '92.118.234.242:5362' - Wrong password [2020-04-30 07:38:33] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-30T07:38:33.942-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1007",SessionID="0x7f6c08358818",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/92.118.234.242/5362",Challenge="554b7373",ReceivedChallenge="554b7373",ReceivedHash="0f6a786e054a624d972b01c1c6d9fa20" [2020-04-30 07:38:34] NOTICE[1170] chan_sip.c: Registration from '"1007" ' failed for '92.118.234.242:5362' - Wrong password [2020-04-30 07:38:34] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-30T07:38:34.025-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1007",SessionID="0x7f6c08545828",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-04-30 19:43:55
37.49.224.200	attackspam	lfd: (smtpauth) Failed SMTP AUTH login from 37.49.224.200 (NL/Netherlands/-): 5 in the last 3600 secs - Sat Jun 2 21:42:36 2018	2020-04-30 19:32:25

Recently Reported IPs

32.218.80.186	83.25.35.178	12.23.63.198	221.228.40.220
131.171.7.152	123.186.189.94	100.48.63.52	216.224.232.167
180.243.110.77	77.205.42.21	189.21.42.69	167.61.184.223
218.164.62.141	145.233.250.64	208.211.190.189	125.212.178.68
178.93.33.105	97.106.167.173	96.125.105.202	197.251.144.90