City: unknown
Region: unknown
Country: Viet Nam
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.140.249.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22702
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.140.249.49. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 02:54:58 CST 2022
;; MSG SIZE rcvd: 10749.249.140.103.in-addr.arpa domain name pointer static-ptr.vndata.vn.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
49.249.140.103.in-addr.arpa name = static-ptr.vndata.vn.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.82.153.77 | attackspambots | Nov 20 18:39:12 web1 postfix/smtpd\[9967\]: warning: unknown\[45.82.153.77\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 20 18:39:30 web1 postfix/smtpd\[9972\]: warning: unknown\[45.82.153.77\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 20 18:47:17 web1 postfix/smtpd\[10207\]: warning: unknown\[45.82.153.77\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-21 01:52:46 |
| 217.170.205.107 | attackbots | Automatic report - XMLRPC Attack |
2019-11-21 02:10:26 |
| 123.28.187.253 | attackbots | Unauthorised access (Nov 20) SRC=123.28.187.253 LEN=52 TTL=110 ID=7691 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-21 01:39:56 |
| 139.59.20.248 | attackbotsspam | Nov 20 05:33:41 hanapaa sshd\[30428\]: Invalid user server from 139.59.20.248 Nov 20 05:33:41 hanapaa sshd\[30428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.20.248 Nov 20 05:33:43 hanapaa sshd\[30428\]: Failed password for invalid user server from 139.59.20.248 port 35344 ssh2 Nov 20 05:41:27 hanapaa sshd\[31140\]: Invalid user tool from 139.59.20.248 Nov 20 05:41:27 hanapaa sshd\[31140\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.20.248 |
2019-11-21 01:45:32 |
| 95.8.105.46 | attack | Nov 20 14:36:21 XXX sshd[26315]: reveeclipse mapping checking getaddrinfo for 95.8.105.46.dynamic.ttnet.com.tr [95.8.105.46] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 20 14:36:21 XXX sshd[26315]: User r.r from 95.8.105.46 not allowed because none of user's groups are listed in AllowGroups Nov 20 14:36:29 XXX sshd[26317]: reveeclipse mapping checking getaddrinfo for 95.8.105.46.dynamic.ttnet.com.tr [95.8.105.46] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 20 14:36:29 XXX sshd[26317]: User r.r from 95.8.105.46 not allowed because none of user's groups are listed in AllowGroups Nov 20 14:36:35 XXX sshd[26481]: reveeclipse mapping checking getaddrinfo for 95.8.105.46.dynamic.ttnet.com.tr [95.8.105.46] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 20 14:36:35 XXX sshd[26481]: User r.r from 95.8.105.46 not allowed because none of user's groups are listed in AllowGroups Nov 20 14:36:35 XXX sshd[26481]: Received disconnect from 95.8.105.46: 11: disconnected by user [preauth] Nov 20 14:36:3........ ------------------------------- |
2019-11-21 01:40:17 |
| 218.94.140.106 | attackspam | Nov 20 17:04:21 dedicated sshd[27426]: Invalid user http from 218.94.140.106 port 2118 |
2019-11-21 01:50:37 |
| 222.186.175.212 | attackspam | $f2bV_matches |
2019-11-21 01:34:02 |
| 106.51.80.198 | attackbotsspam | Nov 20 23:02:20 vibhu-HP-Z238-Microtower-Workstation sshd\[14400\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.80.198 user=root Nov 20 23:02:22 vibhu-HP-Z238-Microtower-Workstation sshd\[14400\]: Failed password for root from 106.51.80.198 port 47806 ssh2 Nov 20 23:06:26 vibhu-HP-Z238-Microtower-Workstation sshd\[15347\]: Invalid user borg from 106.51.80.198 Nov 20 23:06:26 vibhu-HP-Z238-Microtower-Workstation sshd\[15347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.80.198 Nov 20 23:06:28 vibhu-HP-Z238-Microtower-Workstation sshd\[15347\]: Failed password for invalid user borg from 106.51.80.198 port 54546 ssh2 ... |
2019-11-21 01:36:41 |
| 5.249.78.109 | attack | 2019-11-20 14:49:15 H=109.78.249.5.rev.vodafone.pt [5.249.78.109]:47528 I=[10.100.18.21]:25 F= |
2019-11-21 01:54:02 |
| 106.54.102.94 | attack | Nov 20 19:00:53 lnxded64 sshd[11377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.102.94 Nov 20 19:00:55 lnxded64 sshd[11377]: Failed password for invalid user heinrik from 106.54.102.94 port 47176 ssh2 Nov 20 19:06:24 lnxded64 sshd[12728]: Failed password for mysql from 106.54.102.94 port 43728 ssh2 |
2019-11-21 02:06:33 |
| 159.65.182.7 | attack | Nov 20 18:53:22 lnxded63 sshd[19284]: Failed password for bin from 159.65.182.7 port 40090 ssh2 Nov 20 18:53:22 lnxded63 sshd[19284]: Failed password for bin from 159.65.182.7 port 40090 ssh2 |
2019-11-21 02:01:14 |
| 188.167.250.216 | attackspambots | 2019-11-20 13:46:27 H=188-167-250-216.dynamic.chello.sk [188.167.250.216]:26988 I=[10.100.18.20]:25 F= |
2019-11-21 01:49:49 |
| 179.54.104.171 | attack | Port 1433 Scan |
2019-11-21 01:51:35 |
| 78.128.113.123 | attackbotsspam | Nov 20 18:20:32 mail postfix/smtpd[16873]: warning: unknown[78.128.113.123]: SASL PLAIN authentication failed: Nov 20 18:21:54 mail postfix/smtpd[16723]: warning: unknown[78.128.113.123]: SASL PLAIN authentication failed: Nov 20 18:26:18 mail postfix/smtpd[16671]: warning: unknown[78.128.113.123]: SASL PLAIN authentication failed: |
2019-11-21 01:29:55 |
| 27.186.194.175 | attack | Automatic report - Port Scan |
2019-11-21 02:06:47 |