City: unknown
Region: unknown
Country: Japan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 130.33.45.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54677
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;130.33.45.14. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 11:08:27 CST 2025
;; MSG SIZE rcvd: 105Host 14.45.33.130.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 14.45.33.130.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.241.67.202 | attackbots | Honeypot attack, port: 445, PTR: static.vnpt.vn. |
2020-02-08 20:43:09 |
| 1.171.154.249 | attackbots | unauthorized connection attempt |
2020-02-08 21:18:55 |
| 78.128.113.132 | attackspambots | Feb 8 13:42:18 relay postfix/smtpd\[16988\]: warning: unknown\[78.128.113.132\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 8 13:42:25 relay postfix/smtpd\[16986\]: warning: unknown\[78.128.113.132\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 8 13:54:00 relay postfix/smtpd\[27225\]: warning: unknown\[78.128.113.132\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 8 13:54:07 relay postfix/smtpd\[16989\]: warning: unknown\[78.128.113.132\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 8 13:54:29 relay postfix/smtpd\[27225\]: warning: unknown\[78.128.113.132\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-02-08 20:58:34 |
| 103.52.217.17 | attack | Honeypot attack, port: 389, PTR: PTR record not found |
2020-02-08 20:37:23 |
| 182.76.74.78 | attackspambots | no |
2020-02-08 20:51:04 |
| 119.29.2.157 | attackbots | Feb 7 20:16:15 web9 sshd\[8719\]: Invalid user cqx from 119.29.2.157 Feb 7 20:16:15 web9 sshd\[8719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.2.157 Feb 7 20:16:17 web9 sshd\[8719\]: Failed password for invalid user cqx from 119.29.2.157 port 60404 ssh2 Feb 7 20:19:36 web9 sshd\[9266\]: Invalid user flz from 119.29.2.157 Feb 7 20:19:36 web9 sshd\[9266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.2.157 |
2020-02-08 20:50:23 |
| 222.186.173.238 | attack | Feb 8 13:54:09 SilenceServices sshd[26371]: Failed password for root from 222.186.173.238 port 58726 ssh2 Feb 8 13:54:12 SilenceServices sshd[26371]: Failed password for root from 222.186.173.238 port 58726 ssh2 Feb 8 13:54:22 SilenceServices sshd[26371]: error: maximum authentication attempts exceeded for root from 222.186.173.238 port 58726 ssh2 [preauth] |
2020-02-08 21:04:44 |
| 200.6.245.11 | attackbots | Honeypot attack, port: 445, PTR: 11.245.6.200.static.intelnet.net.gt. |
2020-02-08 21:11:26 |
| 171.11.109.57 | attackbots | firewall-block, port(s): 445/tcp |
2020-02-08 21:01:11 |
| 106.52.16.54 | attack | Feb 8 11:36:46 haigwepa sshd[22192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.16.54 Feb 8 11:36:48 haigwepa sshd[22192]: Failed password for invalid user zfs from 106.52.16.54 port 36630 ssh2 ... |
2020-02-08 21:06:55 |
| 13.79.245.192 | attackspam | Lines containing failures of 13.79.245.192 Feb 5 02:26:59 HOSTNAME sshd[29980]: User r.r from 13.79.245.192 not allowed because not listed in AllowUsers Feb 5 02:26:59 HOSTNAME sshd[29980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.79.245.192 user=r.r Feb 5 02:27:01 HOSTNAME sshd[29980]: Failed password for invalid user r.r from 13.79.245.192 port 60348 ssh2 Feb 5 02:27:01 HOSTNAME sshd[29980]: Received disconnect from 13.79.245.192 port 60348:11: Bye Bye [preauth] Feb 5 02:27:01 HOSTNAME sshd[29980]: Disconnected from 13.79.245.192 port 60348 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=13.79.245.192 |
2020-02-08 21:00:53 |
| 111.230.25.204 | attackspam | Feb 8 09:56:54 v22018076622670303 sshd\[15481\]: Invalid user xpn from 111.230.25.204 port 34056 Feb 8 09:56:54 v22018076622670303 sshd\[15481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.25.204 Feb 8 09:56:56 v22018076622670303 sshd\[15481\]: Failed password for invalid user xpn from 111.230.25.204 port 34056 ssh2 ... |
2020-02-08 20:48:24 |
| 84.5.157.3 | attackspambots | Telnet/23 MH Probe, BF, Hack - |
2020-02-08 21:05:42 |
| 87.26.0.54 | attack | Honeypot attack, port: 81, PTR: host-87-26-0-54.business.telecomitalia.it. |
2020-02-08 21:16:28 |
| 104.248.29.180 | attack | Feb 7 22:31:47 home sshd[7265]: Invalid user gog from 104.248.29.180 port 40958 Feb 7 22:31:47 home sshd[7265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.29.180 Feb 7 22:31:47 home sshd[7265]: Invalid user gog from 104.248.29.180 port 40958 Feb 7 22:31:49 home sshd[7265]: Failed password for invalid user gog from 104.248.29.180 port 40958 ssh2 Feb 7 22:39:07 home sshd[7343]: Invalid user pcy from 104.248.29.180 port 54582 Feb 7 22:39:07 home sshd[7343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.29.180 Feb 7 22:39:07 home sshd[7343]: Invalid user pcy from 104.248.29.180 port 54582 Feb 7 22:39:09 home sshd[7343]: Failed password for invalid user pcy from 104.248.29.180 port 54582 ssh2 Feb 7 22:40:26 home sshd[7359]: Invalid user dob from 104.248.29.180 port 40112 Feb 7 22:40:26 home sshd[7359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.29.180 |
2020-02-08 21:16:08 |