City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: Facebook, Inc.
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.134.78.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12416
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;129.134.78.40. IN A
;; AUTHORITY SECTION:
. 2351 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019050100 1800 900 604800 86400
;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu May 02 00:36:59 +08 2019
;; MSG SIZE rcvd: 117
Host 40.78.134.129.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.3
Address: 67.207.67.3#53
** server can't find 40.78.134.129.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.59.82.134 | attackspam | lfd: (smtpauth) Failed SMTP AUTH login from 5.59.82.134 (ES/Spain/-): 5 in the last 3600 secs - Fri Jun 22 23:14:17 2018 |
2020-02-07 06:16:18 |
| 117.85.112.167 | attackspambots | lfd: (smtpauth) Failed SMTP AUTH login from 117.85.112.167 (CN/China/167.112.85.117.broad.wx.js.dynamic.163data.com.cn): 5 in the last 3600 secs - Mon Apr 23 17:33:04 2018 |
2020-02-07 06:50:40 |
| 208.124.154.155 | attackspam | lfd: (smtpauth) Failed SMTP AUTH login from 208.124.154.155 (CA/Canada/cmr-208-124-154-155.cr.net.cable.rogers.com): 5 in the last 3600 secs - Sat Jun 23 23:34:52 2018 |
2020-02-07 06:14:38 |
| 121.254.133.205 | attack | Since 5 days trying to login with various account names about every 30 minutes. Tried to use following account names so far: "ntps" "ntpo" "bin" "root" "webdev" "nologin" "vagrant" "redapp" "git" "test" "user" "guest" "mysql" "oracle" "postgres" "mythtv" "info" "mqm" "db2inst1" "db2fenc1" "ts3" "vyatta" "ubuntu" "steam" "jenkins" "ftpuser" "tomcat" "scanner" "service" "web" "www" "marcin" "robert" "odoo" "minecraft" "demo" and "usuario" |
2020-02-07 06:26:19 |
| 185.176.27.102 | attackspam | Feb 6 23:03:37 debian-2gb-nbg1-2 kernel: \[3285860.900798\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.102 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=32179 PROTO=TCP SPT=45601 DPT=27222 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-02-07 06:30:47 |
| 121.206.226.31 | attackbots | lfd: (smtpauth) Failed SMTP AUTH login from 121.206.226.31 (CN/China/31.226.206.121.broad.np.fj.dynamic.163data.com.cn): 5 in the last 3600 secs - Thu May 24 08:34:57 2018 |
2020-02-07 06:37:18 |
| 125.118.75.85 | attackspam | lfd: (smtpauth) Failed SMTP AUTH login from 125.118.75.85 (CN/China/-): 5 in the last 3600 secs - Fri May 25 19:26:59 2018 |
2020-02-07 06:31:59 |
| 80.91.125.215 | attackbotsspam | lfd: (smtpauth) Failed SMTP AUTH login from 80.91.125.215 (AL/Albania/ip-80-91-125-215.net.abissnet.al): 5 in the last 3600 secs - Fri Jun 22 23:07:52 2018 |
2020-02-07 06:20:08 |
| 82.202.167.197 | attackbots | lfd: (smtpauth) Failed SMTP AUTH login from 82.202.167.197 (RU/Russia/1.1): 5 in the last 3600 secs - Fri May 25 18:41:35 2018 |
2020-02-07 06:35:54 |
| 167.250.91.110 | attackbotsspam | lfd: (smtpauth) Failed SMTP AUTH login from 167.250.91.110 (BR/Brazil/cabo-wifi-1-167-250-91-110.caiweb.net.br): 5 in the last 3600 secs - Sun Apr 22 15:33:18 2018 |
2020-02-07 06:53:12 |
| 18.216.255.255 | attackspam | lfd: (smtpauth) Failed SMTP AUTH login from 18.216.255.255 (US/United States/ec2-18-216-255-255.us-east-2.compute.amazonaws.com): 5 in the last 3600 secs - Sun Apr 15 23:05:36 2018 |
2020-02-07 06:54:08 |
| 46.148.27.22 | attackbotsspam | lfd: (smtpauth) Failed SMTP AUTH login from 46.148.27.22 (UA/Ukraine/flat.hosted.by.invps.net): 5 in the last 3600 secs - Tue May 15 17:44:01 2018 |
2020-02-07 06:43:05 |
| 185.175.93.19 | attack | 02/06/2020-22:47:25.971515 185.175.93.19 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-02-07 06:19:03 |
| 66.85.157.79 | attackbots | lfd: (smtpauth) Failed SMTP AUTH login from 66.85.157.79 (US/United States/tbua.loreworld.com): 5 in the last 3600 secs - Wed Jun 20 21:28:06 2018 |
2020-02-07 06:22:28 |
| 78.187.41.158 | attackbots | Unauthorized connection attempt detected from IP address 78.187.41.158 to port 445 |
2020-02-07 06:41:07 |