City: unknown
Region: unknown
Country: Hong Kong
Internet Service Provider: Diyixian.com Limited
Hostname: unknown
Organization: Diyixian.com Limited
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | Aug 27 13:50:12 localhost kernel: [666027.872291] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=114.142.150.29 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=679 PROTO=TCP SPT=49424 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 27 13:50:12 localhost kernel: [666027.872318] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=114.142.150.29 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=679 PROTO=TCP SPT=49424 DPT=445 SEQ=1528587108 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 28 19:52:36 localhost kernel: [774172.611081] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=114.142.150.29 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=25287 PROTO=TCP SPT=52233 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 28 19:52:36 localhost kernel: [774172.611125] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=114.142.150.29 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 T |
2019-08-29 09:52:30 |
| attackbotsspam | SMB Server BruteForce Attack |
2019-07-01 03:16:37 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.142.150.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13471
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.142.150.29. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019060200 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jun 02 20:21:56 CST 2019
;; MSG SIZE rcvd: 118
29.150.142.114.in-addr.arpa domain name pointer static-ip-29-150-142-114.rev.dyxnet.com.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
29.150.142.114.in-addr.arpa name = static-ip-29-150-142-114.rev.dyxnet.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 117.3.81.255 | attackbotsspam | Sun, 21 Jul 2019 07:35:26 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-22 01:06:47 |
| 122.160.115.193 | attack | Unauthorized connection attempt from IP address 122.160.115.193 on Port 445(SMB) |
2019-07-22 00:59:55 |
| 85.140.92.104 | attackbots | Sun, 21 Jul 2019 07:35:20 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-22 01:19:40 |
| 87.110.66.148 | attackspambots | Sun, 21 Jul 2019 07:35:12 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-22 01:40:00 |
| 175.143.34.12 | attackspam | Sun, 21 Jul 2019 07:35:14 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-22 01:35:29 |
| 118.172.5.121 | attack | Sun, 21 Jul 2019 07:35:27 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-22 01:03:58 |
| 58.11.29.170 | attackbots | Sun, 21 Jul 2019 07:35:06 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-22 01:56:51 |
| 173.23.225.40 | attackbots | Jul 21 17:58:16 srv-4 sshd\[29473\]: Invalid user zimbra from 173.23.225.40 Jul 21 17:58:16 srv-4 sshd\[29473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.23.225.40 Jul 21 17:58:18 srv-4 sshd\[29473\]: Failed password for invalid user zimbra from 173.23.225.40 port 46688 ssh2 ... |
2019-07-22 01:27:33 |
| 180.244.143.195 | attackspam | Sun, 21 Jul 2019 07:35:07 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-22 01:53:00 |
| 125.166.144.17 | attackbotsspam | Sun, 21 Jul 2019 07:35:09 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-22 01:45:44 |
| 159.192.226.202 | attackspam | Sun, 21 Jul 2019 07:35:15 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-22 01:33:09 |
| 117.2.18.119 | attackbots | Sun, 21 Jul 2019 07:35:12 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-22 01:41:42 |
| 175.140.249.56 | attackbotsspam | Sun, 21 Jul 2019 07:35:05 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-22 01:58:04 |
| 217.127.77.104 | attackbots | Jul 21 15:27:51 mail sshd\[23990\]: Invalid user postgres from 217.127.77.104 port 49322 Jul 21 15:27:51 mail sshd\[23990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.127.77.104 Jul 21 15:27:53 mail sshd\[23990\]: Failed password for invalid user postgres from 217.127.77.104 port 49322 ssh2 Jul 21 15:32:38 mail sshd\[24699\]: Invalid user abcs from 217.127.77.104 port 47198 Jul 21 15:32:38 mail sshd\[24699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.127.77.104 |
2019-07-22 01:46:05 |
| 104.131.29.92 | attack | Jul 21 13:48:00 mail sshd\[9133\]: Failed password for invalid user ka from 104.131.29.92 port 58207 ssh2 Jul 21 13:52:33 mail sshd\[9928\]: Invalid user user from 104.131.29.92 port 57524 Jul 21 13:52:33 mail sshd\[9928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.29.92 Jul 21 13:52:36 mail sshd\[9928\]: Failed password for invalid user user from 104.131.29.92 port 57524 ssh2 Jul 21 13:57:10 mail sshd\[10487\]: Invalid user reshma from 104.131.29.92 port 56840 Jul 21 13:57:10 mail sshd\[10487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.29.92 |
2019-07-22 01:50:26 |