City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.104.36.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17647
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.104.36.53. IN A
;; AUTHORITY SECTION:
. 253 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400
;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:32:24 CST 2022
;; MSG SIZE rcvd: 106Host 53.36.104.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 53.36.104.139.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 132.248.52.241 | attackspam | Jul 9 10:20:59 aat-srv002 sshd[9171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.248.52.241 Jul 9 10:21:01 aat-srv002 sshd[9171]: Failed password for invalid user lever from 132.248.52.241 port 45471 ssh2 Jul 9 10:24:21 aat-srv002 sshd[9216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.248.52.241 Jul 9 10:24:23 aat-srv002 sshd[9216]: Failed password for invalid user jboss from 132.248.52.241 port 54306 ssh2 ... |
2019-07-10 06:34:14 |
| 85.114.12.94 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-09 13:14:35,333 INFO [amun_request_handler] PortScan Detected on Port: 445 (85.114.12.94) |
2019-07-10 06:37:11 |
| 106.12.213.162 | attackbotsspam | Jul 9 15:32:55 ip-172-31-62-245 sshd\[3191\]: Invalid user usuario from 106.12.213.162\ Jul 9 15:32:57 ip-172-31-62-245 sshd\[3191\]: Failed password for invalid user usuario from 106.12.213.162 port 52872 ssh2\ Jul 9 15:40:54 ip-172-31-62-245 sshd\[3326\]: Invalid user theo from 106.12.213.162\ Jul 9 15:40:56 ip-172-31-62-245 sshd\[3326\]: Failed password for invalid user theo from 106.12.213.162 port 59312 ssh2\ Jul 9 15:42:25 ip-172-31-62-245 sshd\[3346\]: Invalid user odoo from 106.12.213.162\ |
2019-07-10 06:56:39 |
| 189.216.113.216 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-09 13:15:47,772 INFO [amun_request_handler] PortScan Detected on Port: 445 (189.216.113.216) |
2019-07-10 06:29:47 |
| 196.219.60.68 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-09 13:03:08,745 INFO [shellcode_manager] (196.219.60.68) no match, writing hexdump (5ca807c582ab0fb756ea8089e830d6a4 :2126107) - MS17010 (EternalBlue) |
2019-07-10 06:46:05 |
| 78.107.161.23 | attackbotsspam | RDP Bruteforce |
2019-07-10 06:44:50 |
| 129.250.206.86 | attackbots | Scanning random ports - tries to find possible vulnerable services |
2019-07-10 07:03:22 |
| 79.181.124.177 | attack | DDoS on port 53 UDP |
2019-07-10 06:31:18 |
| 157.55.39.229 | attack | Automatic report - Web App Attack |
2019-07-10 06:24:53 |
| 222.186.57.99 | attackspam | Unauthorised access (Jul 9) SRC=222.186.57.99 LEN=40 TTL=237 ID=34076 TCP DPT=139 WINDOW=1024 SYN Unauthorised access (Jul 9) SRC=222.186.57.99 LEN=40 TTL=237 ID=51313 TCP DPT=139 WINDOW=1024 SYN Unauthorised access (Jul 9) SRC=222.186.57.99 LEN=40 TTL=236 ID=47104 TCP DPT=139 WINDOW=1024 SYN Unauthorised access (Jul 9) SRC=222.186.57.99 LEN=40 TTL=236 ID=10522 TCP DPT=139 WINDOW=1024 SYN Unauthorised access (Jul 9) SRC=222.186.57.99 LEN=40 TTL=236 ID=56630 TCP DPT=139 WINDOW=1024 SYN Unauthorised access (Jul 8) SRC=222.186.57.99 LEN=40 TTL=236 ID=4095 TCP DPT=139 WINDOW=1024 SYN |
2019-07-10 06:39:29 |
| 105.106.197.216 | attackbots | PHI,WP GET /wp-login.php |
2019-07-10 06:46:56 |
| 112.85.42.89 | attackspambots | Jul 9 10:28:12 gcems sshd\[4278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root Jul 9 10:28:14 gcems sshd\[4278\]: Failed password for root from 112.85.42.89 port 15040 ssh2 Jul 9 10:28:17 gcems sshd\[4278\]: Failed password for root from 112.85.42.89 port 15040 ssh2 Jul 9 10:28:18 gcems sshd\[4278\]: Failed password for root from 112.85.42.89 port 15040 ssh2 Jul 9 10:29:54 gcems sshd\[4305\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root ... |
2019-07-10 06:36:47 |
| 195.9.24.138 | attackbotsspam | Unauthorized IMAP connection attempt |
2019-07-10 06:42:18 |
| 103.10.22.133 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-09 11:43:46,730 INFO [shellcode_manager] (103.10.22.133) no match, writing hexdump (fa6c2431eb3e511f628d914004bd7b33 :2308355) - MS17010 (EternalBlue) |
2019-07-10 06:21:00 |
| 91.236.116.89 | attack | 784 failed attempt(s) in the last 24h |
2019-07-10 07:07:12 |