City: unknown
Region: unknown
Country: Indonesia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.194.31.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3814
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.194.31.199. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 03:58:02 CST 2025
;; MSG SIZE rcvd: 107199.31.194.139.in-addr.arpa domain name pointer fm-dyn-139-194-31-199.fast.net.id.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
199.31.194.139.in-addr.arpa name = fm-dyn-139-194-31-199.fast.net.id.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 183.157.27.252 | attackspam | Brute forcing RDP port 3389 |
2020-05-25 16:34:32 |
| 134.209.241.57 | attackbots | 134.209.241.57 - - \[25/May/2020:08:05:18 +0200\] "POST /wp-login.php HTTP/1.0" 200 2889 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 134.209.241.57 - - \[25/May/2020:08:05:26 +0200\] "POST /wp-login.php HTTP/1.0" 200 2849 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 134.209.241.57 - - \[25/May/2020:08:05:30 +0200\] "POST /wp-login.php HTTP/1.0" 200 2847 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-05-25 16:40:05 |
| 184.70.63.186 | attackspam | May 25 03:26:24 ws12vmsma01 sshd[47977]: Failed password for invalid user admin from 184.70.63.186 port 48574 ssh2 May 25 03:30:09 ws12vmsma01 sshd[48501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.70.63.186 user=root May 25 03:30:11 ws12vmsma01 sshd[48501]: Failed password for root from 184.70.63.186 port 44320 ssh2 ... |
2020-05-25 17:01:36 |
| 217.199.161.244 | attackspambots | 217.199.161.244 - - \[25/May/2020:10:21:12 +0200\] "POST /wp-login.php HTTP/1.0" 200 6400 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 217.199.161.244 - - \[25/May/2020:10:21:13 +0200\] "POST /wp-login.php HTTP/1.0" 200 6267 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 217.199.161.244 - - \[25/May/2020:10:21:14 +0200\] "POST /wp-login.php HTTP/1.0" 200 6263 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-05-25 16:57:15 |
| 106.13.36.10 | attackbots | $f2bV_matches |
2020-05-25 16:36:29 |
| 118.71.43.247 | attack | port scan and connect, tcp 23 (telnet) |
2020-05-25 16:56:34 |
| 14.29.249.248 | attack | $f2bV_matches |
2020-05-25 17:02:30 |
| 91.200.85.138 | attackbots | DATE:2020-05-25 06:38:55, IP:91.200.85.138, PORT:5900 VNC brute force auth on honeypot server (epe-honey1-hq) |
2020-05-25 16:51:53 |
| 140.143.243.27 | attack | SSH auth scanning - multiple failed logins |
2020-05-25 16:58:35 |
| 192.241.185.120 | attackspambots | $f2bV_matches |
2020-05-25 16:30:23 |
| 128.1.91.203 | attack |
|
2020-05-25 16:51:09 |
| 80.211.53.33 | attackbotsspam | May 25 06:51:00 h2779839 sshd[12974]: Invalid user bfrs from 80.211.53.33 port 53408 May 25 06:51:00 h2779839 sshd[12974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.53.33 May 25 06:51:00 h2779839 sshd[12974]: Invalid user bfrs from 80.211.53.33 port 53408 May 25 06:51:02 h2779839 sshd[12974]: Failed password for invalid user bfrs from 80.211.53.33 port 53408 ssh2 May 25 06:52:47 h2779839 sshd[13021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.53.33 user=root May 25 06:52:49 h2779839 sshd[13021]: Failed password for root from 80.211.53.33 port 46736 ssh2 May 25 06:54:24 h2779839 sshd[13165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.53.33 user=root May 25 06:54:25 h2779839 sshd[13165]: Failed password for root from 80.211.53.33 port 40064 ssh2 May 25 06:56:01 h2779839 sshd[13210]: Invalid user webapp from 80.211.53.33 port 33392 ... |
2020-05-25 16:57:29 |
| 51.68.187.251 | attackspambots | May 25 10:32:49 abendstille sshd\[30324\]: Invalid user buhler from 51.68.187.251 May 25 10:32:49 abendstille sshd\[30324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.187.251 May 25 10:32:51 abendstille sshd\[30324\]: Failed password for invalid user buhler from 51.68.187.251 port 38382 ssh2 May 25 10:36:26 abendstille sshd\[1520\]: Invalid user miw from 51.68.187.251 May 25 10:36:26 abendstille sshd\[1520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.187.251 ... |
2020-05-25 16:47:16 |
| 157.230.119.3 | attack |
|
2020-05-25 16:54:44 |
| 114.33.178.21 | attackspambots | Telnet Server BruteForce Attack |
2020-05-25 17:02:59 |