City: unknown
Region: unknown
Country: Thailand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.139.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 921
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;1.20.139.194. IN A
;; AUTHORITY SECTION:
. 112 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 16:33:45 CST 2022
;; MSG SIZE rcvd: 105Host 194.139.20.1.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 194.139.20.1.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 59.34.148.109 | attackspambots | Unauthorized connection attempt from IP address 59.34.148.109 on Port 445(SMB) |
2019-07-20 13:52:43 |
| 189.18.243.210 | attack | Jul 20 01:30:56 vps200512 sshd\[19010\]: Invalid user natanael from 189.18.243.210 Jul 20 01:30:56 vps200512 sshd\[19010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.18.243.210 Jul 20 01:30:58 vps200512 sshd\[19010\]: Failed password for invalid user natanael from 189.18.243.210 port 38732 ssh2 Jul 20 01:36:34 vps200512 sshd\[19086\]: Invalid user andreia from 189.18.243.210 Jul 20 01:36:34 vps200512 sshd\[19086\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.18.243.210 |
2019-07-20 13:50:39 |
| 51.79.129.235 | attack | Jul 20 07:46:41 ns41 sshd[1822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.129.235 Jul 20 07:46:41 ns41 sshd[1822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.129.235 |
2019-07-20 13:46:46 |
| 177.200.107.30 | attackbotsspam | Telnetd brute force attack detected by fail2ban |
2019-07-20 13:38:44 |
| 222.186.174.123 | attackspam | 20.07.2019 03:37:27 Connection to port 3306 blocked by firewall |
2019-07-20 13:54:20 |
| 165.22.144.147 | attackbotsspam | Jul 20 10:56:20 areeb-Workstation sshd\[12799\]: Invalid user mustafa from 165.22.144.147 Jul 20 10:56:20 areeb-Workstation sshd\[12799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.144.147 Jul 20 10:56:23 areeb-Workstation sshd\[12799\]: Failed password for invalid user mustafa from 165.22.144.147 port 46708 ssh2 ... |
2019-07-20 13:41:41 |
| 201.245.1.107 | attackbots | $f2bV_matches |
2019-07-20 14:06:38 |
| 66.249.64.142 | attackbotsspam | Automatic report - Banned IP Access |
2019-07-20 13:52:15 |
| 103.207.2.204 | attackspam | Invalid user libuuid from 103.207.2.204 port 56132 |
2019-07-20 13:46:14 |
| 112.197.0.92 | attackbots | Unauthorized connection attempt from IP address 112.197.0.92 on Port 445(SMB) |
2019-07-20 14:08:38 |
| 185.195.201.148 | attack | Splunk® : port scan detected: Jul 19 21:32:01 testbed kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:c0:42:d0:39:2c:30:08:00 SRC=185.195.201.148 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=57239 DPT=27017 WINDOW=65535 RES=0x00 SYN URGP=0 |
2019-07-20 13:18:02 |
| 207.154.215.236 | attackbots | Jul 20 07:08:28 vps647732 sshd[25158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.215.236 Jul 20 07:08:31 vps647732 sshd[25158]: Failed password for invalid user logstash from 207.154.215.236 port 44014 ssh2 ... |
2019-07-20 13:23:52 |
| 107.170.196.87 | attack | Port scan attempt detected by AWS-CCS, CTS, India |
2019-07-20 13:16:59 |
| 79.3.254.164 | attackbots | port scan and connect, tcp 23 (telnet) |
2019-07-20 14:17:08 |
| 92.118.37.74 | attackspam | Jul 20 06:56:01 h2177944 kernel: \[1922694.042473\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=59618 PROTO=TCP SPT=46525 DPT=47048 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 20 06:57:08 h2177944 kernel: \[1922760.743862\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=16389 PROTO=TCP SPT=46525 DPT=38425 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 20 06:59:16 h2177944 kernel: \[1922889.248789\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=6771 PROTO=TCP SPT=46525 DPT=14577 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 20 07:01:35 h2177944 kernel: \[1923028.264737\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=56105 PROTO=TCP SPT=46525 DPT=42989 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 20 07:01:48 h2177944 kernel: \[1923040.926328\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 L |
2019-07-20 13:19:31 |