City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.48.57.39
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21321
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;120.48.57.39. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 23:21:51 CST 2025
;; MSG SIZE rcvd: 105
Host 39.57.48.120.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 39.57.48.120.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 72.12.194.91 | attack | CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2019-07-18 14:19:23 |
| 91.221.174.122 | attackbots | [portscan] Port scan |
2019-07-18 14:53:41 |
| 84.53.195.250 | attack | Sending SPAM email |
2019-07-18 14:43:30 |
| 221.133.39.107 | attackbots | firewall-block, port(s): 445/tcp |
2019-07-18 14:33:19 |
| 114.45.140.133 | attack | Jul 17 02:00:41 localhost kernel: [14587434.782706] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=114.45.140.133 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=40005 PROTO=TCP SPT=60914 DPT=37215 WINDOW=5173 RES=0x00 SYN URGP=0 Jul 17 02:00:41 localhost kernel: [14587434.782734] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=114.45.140.133 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=40005 PROTO=TCP SPT=60914 DPT=37215 SEQ=758669438 ACK=0 WINDOW=5173 RES=0x00 SYN URGP=0 Jul 17 21:20:14 localhost kernel: [14657008.099263] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=114.45.140.133 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=65427 PROTO=TCP SPT=60914 DPT=37215 WINDOW=5173 RES=0x00 SYN URGP=0 Jul 17 21:20:14 localhost kernel: [14657008.099294] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=114.45.140.133 DST=[mungedIP2] LEN=40 TOS=0x |
2019-07-18 14:39:16 |
| 112.85.42.227 | attackbotsspam | Jul 17 22:39:45 aat-srv002 sshd[30473]: Failed password for root from 112.85.42.227 port 35339 ssh2 Jul 17 22:54:54 aat-srv002 sshd[30782]: Failed password for root from 112.85.42.227 port 14399 ssh2 Jul 17 22:55:43 aat-srv002 sshd[30791]: Failed password for root from 112.85.42.227 port 29348 ssh2 Jul 17 22:55:46 aat-srv002 sshd[30791]: Failed password for root from 112.85.42.227 port 29348 ssh2 ... |
2019-07-18 15:13:30 |
| 121.180.213.34 | attackbots | Jul 18 03:09:37 linuxrulz sshd[16973]: Invalid user pi from 121.180.213.34 port 36988 Jul 18 03:09:38 linuxrulz sshd[16973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.180.213.34 Jul 18 03:09:40 linuxrulz sshd[16973]: Failed password for invalid user pi from 121.180.213.34 port 36988 ssh2 Jul 18 03:09:40 linuxrulz sshd[16973]: Received disconnect from 121.180.213.34 port 36988:11: [preauth] Jul 18 03:09:40 linuxrulz sshd[16973]: Disconnected from 121.180.213.34 port 36988 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=121.180.213.34 |
2019-07-18 14:58:04 |
| 190.107.27.162 | attack | Brute force attempt |
2019-07-18 14:54:24 |
| 204.62.193.57 | attack | SMB Server BruteForce Attack |
2019-07-18 15:09:51 |
| 165.227.93.58 | attack | Jul 18 08:47:16 bouncer sshd\[25543\]: Invalid user newuser from 165.227.93.58 port 46270 Jul 18 08:47:16 bouncer sshd\[25543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.93.58 Jul 18 08:47:18 bouncer sshd\[25543\]: Failed password for invalid user newuser from 165.227.93.58 port 46270 ssh2 ... |
2019-07-18 15:10:11 |
| 221.125.195.245 | attack | Tried to log on Synology NAS |
2019-07-18 14:21:26 |
| 113.161.212.54 | attackbotsspam | Jul 18 03:19:50 lnxmail61 postfix/submission/smtpd[31301]: lost connection after CONNECT from unknown[113.161.212.54] Jul 18 03:19:50 lnxmail61 postfix/smtpd[28919]: lost connection after CONNECT from unknown[113.161.212.54] Jul 18 03:19:50 lnxmail61 postfix/smtps/smtpd[31360]: lost connection after CONNECT from unknown[113.161.212.54] Jul 18 03:19:51 lnxmail61 postfix/submission/smtpd[31301]: lost connection after CONNECT from unknown[113.161.212.54] Jul 18 03:19:51 lnxmail61 postfix/smtps/smtpd[31360]: lost connection after CONNECT from unknown[113.161.212.54] Jul 18 03:19:51 lnxmail61 postfix/smtpd[25138]: lost connection after CONNECT from unknown[113.161.212.54] |
2019-07-18 14:53:10 |
| 185.137.111.188 | attackspambots | Jul 18 07:56:03 mail postfix/smtpd\[24708\]: warning: unknown\[185.137.111.188\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 18 07:56:26 mail postfix/smtpd\[25090\]: warning: unknown\[185.137.111.188\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 18 08:26:29 mail postfix/smtpd\[25405\]: warning: unknown\[185.137.111.188\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 18 08:26:59 mail postfix/smtpd\[26193\]: warning: unknown\[185.137.111.188\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2019-07-18 14:55:01 |
| 1.235.192.218 | attack | Brute force attempt |
2019-07-18 15:07:43 |
| 190.236.121.186 | attack | Jul 18 03:19:44 server postfix/smtpd[19367]: NOQUEUE: reject: RCPT from unknown[190.236.121.186]: 554 5.7.1 Service unavailable; Client host [190.236.121.186] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/190.236.121.186; from= |
2019-07-18 14:56:41 |