City: Suwon
Region: Gyeonggi-do
Country: South Korea
Internet Service Provider: unknown
Hostname: unknown
Organization: Korea Telecom
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.168.139.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59192
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.168.139.29. IN A
;; AUTHORITY SECTION:
. 3287 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019071200 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jul 13 02:40:46 CST 2019
;; MSG SIZE rcvd: 118Host 29.139.168.121.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 29.139.168.121.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 193.201.224.76 | attack | May 20 05:30:26 ms-srv sshd[25169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.201.224.76 May 20 05:30:28 ms-srv sshd[25169]: Failed password for invalid user admin from 193.201.224.76 port 55163 ssh2 |
2020-02-03 04:16:29 |
| 193.194.77.194 | attack | Dec 18 21:44:10 ms-srv sshd[41059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.194.77.194 Dec 18 21:44:12 ms-srv sshd[41059]: Failed password for invalid user lisa from 193.194.77.194 port 55330 ssh2 |
2020-02-03 04:30:52 |
| 14.29.171.50 | attackbotsspam | Unauthorized connection attempt detected from IP address 14.29.171.50 to port 2220 [J] |
2020-02-03 04:23:34 |
| 193.227.199.150 | attackspam | Dec 2 03:13:53 ms-srv sshd[12807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.227.199.150 Dec 2 03:13:55 ms-srv sshd[12807]: Failed password for invalid user ubnt from 193.227.199.150 port 39692 ssh2 |
2020-02-03 04:02:09 |
| 193.196.36.219 | attackbotsspam | Feb 3 19:00:57 ms-srv sshd[36831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.196.36.219 Feb 3 19:00:58 ms-srv sshd[36831]: Failed password for invalid user melquias from 193.196.36.219 port 40928 ssh2 |
2020-02-03 04:26:05 |
| 97.90.105.222 | attack | DATE:2020-02-02 16:07:03, IP:97.90.105.222, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2020-02-03 04:32:50 |
| 193.233.129.247 | attackspambots | Apr 12 19:22:30 ms-srv sshd[61459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.233.129.247 Apr 12 19:22:33 ms-srv sshd[61459]: Failed password for invalid user supervisor from 193.233.129.247 port 41811 ssh2 |
2020-02-03 04:01:38 |
| 42.200.78.78 | attackbots | Feb 2 19:22:17 h2177944 kernel: \[3865873.948676\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=42.200.78.78 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=64882 DF PROTO=TCP SPT=45528 DPT=23587 WINDOW=29200 RES=0x00 SYN URGP=0 Feb 2 19:22:17 h2177944 kernel: \[3865873.948692\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=42.200.78.78 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=64882 DF PROTO=TCP SPT=45528 DPT=23587 WINDOW=29200 RES=0x00 SYN URGP=0 Feb 2 19:22:18 h2177944 kernel: \[3865874.947944\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=42.200.78.78 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=64883 DF PROTO=TCP SPT=45528 DPT=23587 WINDOW=29200 RES=0x00 SYN URGP=0 Feb 2 19:22:18 h2177944 kernel: \[3865874.947959\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=42.200.78.78 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=64883 DF PROTO=TCP SPT=45528 DPT=23587 WINDOW=29200 RES=0x00 SYN URGP=0 Feb 2 19:22:20 h2177944 kernel: \[3865876.951643\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=42.200.78.78 DST=8 |
2020-02-03 04:20:31 |
| 193.193.67.82 | attack | Dec 16 07:11:36 ms-srv sshd[54256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.193.67.82 Dec 16 07:11:38 ms-srv sshd[54256]: Failed password for invalid user ftp from 193.193.67.82 port 49522 ssh2 |
2020-02-03 04:31:49 |
| 134.175.178.153 | attackbotsspam | Feb 2 16:03:52 srv01 sshd[8059]: Invalid user admin1 from 134.175.178.153 port 36535 Feb 2 16:03:52 srv01 sshd[8059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.178.153 Feb 2 16:03:52 srv01 sshd[8059]: Invalid user admin1 from 134.175.178.153 port 36535 Feb 2 16:03:54 srv01 sshd[8059]: Failed password for invalid user admin1 from 134.175.178.153 port 36535 ssh2 Feb 2 16:07:01 srv01 sshd[8288]: Invalid user test1 from 134.175.178.153 port 46596 ... |
2020-02-03 04:35:59 |
| 193.205.67.130 | attack | Feb 3 02:54:05 ms-srv sshd[50537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.205.67.130 Feb 3 02:54:07 ms-srv sshd[50537]: Failed password for invalid user logger from 193.205.67.130 port 59768 ssh2 |
2020-02-03 04:08:50 |
| 112.200.108.74 | attackbotsspam | DATE:2020-02-02 16:07:05, IP:112.200.108.74, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc) |
2020-02-03 04:27:45 |
| 104.40.95.185 | attackspambots | Unauthorized connection attempt detected from IP address 104.40.95.185 to port 2220 [J] |
2020-02-03 04:28:13 |
| 220.133.190.232 | attackbotsspam | Honeypot attack, port: 5555, PTR: 220-133-190-232.HINET-IP.hinet.net. |
2020-02-03 04:01:07 |
| 193.226.12.208 | attack | Feb 2 07:22:10 ms-srv sshd[57031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.226.12.208 Feb 2 07:22:12 ms-srv sshd[57031]: Failed password for invalid user databse from 193.226.12.208 port 55482 ssh2 |
2020-02-03 04:04:31 |