City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.139.39.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20037
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;114.139.39.29. IN A
;; AUTHORITY SECTION:
. 437 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 20:27:52 CST 2022
;; MSG SIZE rcvd: 106Host 29.39.139.114.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 29.39.139.114.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.238.146.27 | attackbotsspam | Jun 27 05:53:25 mail kernel: \[653149.445054\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=103.238.146.27 DST=91.205.173.180 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=16889 DF PROTO=TCP SPT=58110 DPT=65530 WINDOW=8192 RES=0x00 SYN URGP=0 Jun 27 05:53:28 mail kernel: \[653152.442562\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=103.238.146.27 DST=91.205.173.180 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=8000 DF PROTO=TCP SPT=58110 DPT=65530 WINDOW=8192 RES=0x00 SYN URGP=0 Jun 27 05:53:34 mail kernel: \[653158.445629\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=103.238.146.27 DST=91.205.173.180 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=17006 DF PROTO=TCP SPT=58110 DPT=65530 WINDOW=65535 RES=0x00 SYN URGP=0 |
2019-06-27 12:25:06 |
| 121.226.62.129 | attackbots | 2019-06-26T18:16:49.302210 X postfix/smtpd[49454]: warning: unknown[121.226.62.129]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-26T19:40:45.427734 X postfix/smtpd[60464]: warning: unknown[121.226.62.129]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-27T05:52:32.122609 X postfix/smtpd[23798]: warning: unknown[121.226.62.129]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-06-27 12:58:02 |
| 180.121.232.109 | attack | 2019-06-27T05:52:55.019868 X postfix/smtpd[23785]: warning: unknown[180.121.232.109]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-27T05:53:10.292692 X postfix/smtpd[23785]: warning: unknown[180.121.232.109]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-27T05:53:29.069120 X postfix/smtpd[24107]: warning: unknown[180.121.232.109]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-06-27 12:28:50 |
| 41.210.20.154 | attackbotsspam | Jun 27 03:52:42 ***** sshd[1938]: Invalid user admin from 41.210.20.154 port 57559 |
2019-06-27 12:53:10 |
| 213.202.254.212 | attackspam | [munged]::443 213.202.254.212 - - [27/Jun/2019:05:52:22 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 213.202.254.212 - - [27/Jun/2019:05:52:23 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 213.202.254.212 - - [27/Jun/2019:05:52:23 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 213.202.254.212 - - [27/Jun/2019:05:52:24 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 213.202.254.212 - - [27/Jun/2019:05:52:24 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 213.202.254.212 - - [27/Jun/2019:05:52:25 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5. |
2019-06-27 12:58:36 |
| 180.249.177.53 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-27 03:37:09,840 INFO [amun_request_handler] PortScan Detected on Port: 445 (180.249.177.53) |
2019-06-27 12:49:30 |
| 201.172.136.39 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-27 03:34:54,816 INFO [amun_request_handler] PortScan Detected on Port: 445 (201.172.136.39) |
2019-06-27 12:53:33 |
| 118.70.233.44 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-27 03:33:25,876 INFO [amun_request_handler] PortScan Detected on Port: 445 (118.70.233.44) |
2019-06-27 13:01:03 |
| 113.53.38.224 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-27 03:35:44,383 INFO [amun_request_handler] PortScan Detected on Port: 445 (113.53.38.224) |
2019-06-27 12:52:47 |
| 41.221.146.138 | attackbotsspam | 2019-06-27T04:36:20.745581abusebot-3.cloudsearch.cf sshd\[30731\]: Invalid user test from 41.221.146.138 port 47240 |
2019-06-27 12:56:04 |
| 195.96.74.66 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-26 04:05:11,522 INFO [shellcode_manager] (195.96.74.66) no match, writing hexdump (790a09addfd056a8c21e66327c3e218a :2365552) - MS17010 (EternalBlue) |
2019-06-27 12:34:47 |
| 165.22.249.42 | attack | Jun 27 05:38:15 mail sshd[1558]: Invalid user jake from 165.22.249.42 Jun 27 05:38:15 mail sshd[1558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.249.42 Jun 27 05:38:15 mail sshd[1558]: Invalid user jake from 165.22.249.42 Jun 27 05:38:16 mail sshd[1558]: Failed password for invalid user jake from 165.22.249.42 port 33344 ssh2 Jun 27 05:53:39 mail sshd[3450]: Invalid user mythtv from 165.22.249.42 ... |
2019-06-27 12:22:51 |
| 111.231.225.80 | attackspambots | Jun 27 07:53:21 srv-4 sshd\[3355\]: Invalid user admin from 111.231.225.80 Jun 27 07:53:21 srv-4 sshd\[3355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.225.80 Jun 27 07:53:22 srv-4 sshd\[3355\]: Failed password for invalid user admin from 111.231.225.80 port 45166 ssh2 ... |
2019-06-27 13:05:57 |
| 40.112.65.88 | attackbots | Jun 27 06:16:41 meumeu sshd[25837]: Failed password for root from 40.112.65.88 port 33556 ssh2 Jun 27 06:18:25 meumeu sshd[26031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.112.65.88 Jun 27 06:18:27 meumeu sshd[26031]: Failed password for invalid user ph from 40.112.65.88 port 51168 ssh2 ... |
2019-06-27 12:23:56 |
| 46.101.88.10 | attack | Jun 27 06:47:58 [host] sshd[30347]: Invalid user cron from 46.101.88.10 Jun 27 06:47:58 [host] sshd[30347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.88.10 Jun 27 06:48:00 [host] sshd[30347]: Failed password for invalid user cron from 46.101.88.10 port 13889 ssh2 |
2019-06-27 12:54:55 |