City: Guangzhou
Region: Guangdong
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.145.243.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60889
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.145.243.249. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 14:51:57 CST 2025
;; MSG SIZE rcvd: 107Host 249.243.145.14.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 249.243.145.14.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 83.102.142.105 | attackbots | Unauthorized connection attempt from IP address 83.102.142.105 on Port 445(SMB) |
2020-02-26 08:15:39 |
| 51.235.144.122 | attack | Unauthorized connection attempt from IP address 51.235.144.122 on Port 445(SMB) |
2020-02-26 08:14:00 |
| 41.128.168.39 | attackbots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-02-26 08:25:38 |
| 201.20.42.129 | attack | Trying to (more than 3 packets) bruteforce (not open) Samba/Microsoft-DS port 445 |
2020-02-26 08:35:23 |
| 197.164.164.52 | attackspam | Unauthorized connection attempt from IP address 197.164.164.52 on Port 445(SMB) |
2020-02-26 08:16:37 |
| 217.197.233.154 | attack | Unauthorized connection attempt from IP address 217.197.233.154 on Port 445(SMB) |
2020-02-26 08:44:53 |
| 185.243.180.35 | attackspambots | Feb 26 03:22:50 our-server-hostname postfix/smtpd[2408]: connect from unknown[185.243.180.35] Feb x@x Feb x@x Feb 26 03:22:52 our-server-hostname postfix/smtpd[2408]: D3275A4000B: client=unknown[185.243.180.35] Feb x@x Feb x@x Feb 26 03:22:53 our-server-hostname postfix/smtpd[2408]: E4394A400C4: client=unknown[185.243.180.35] Feb 26 03:22:54 our-server-hostname postfix/smtpd[2599]: 2B704A40132: client=unknown[127.0.0.1], orig_client=unknown[185.243.180.35] Feb x@x Feb 26 03:22:54 our-server-hostname postfix/smtpd[2599]: 67969A4000B: client=unknown[127.0.0.1], orig_client=unknown[185.243.180.35] Feb x@x Feb x@x Feb x@x Feb 26 03:22:54 our-server-hostname postfix/smtpd[2408]: A642CA4000B: client=unknown[185.243.180.35] Feb 26 03:22:55 our-server-hostname postfix/smtpd[2599]: 27003A400C4: client=unknown[127.0.0.1], orig_client=unknown[185.243.180.35] Feb x@x Feb x@x Feb x@x Feb 26 03:22:55 our-server-hostname postfix/smtpd[2408]: 641CDA4000B: client=unknown[185.243.180.35]........ ------------------------------- |
2020-02-26 08:18:50 |
| 217.138.76.69 | attackspam | Feb 25 08:54:47 hanapaa sshd\[25910\]: Invalid user omn from 217.138.76.69 Feb 25 08:54:47 hanapaa sshd\[25910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.138.76.69 Feb 25 08:54:49 hanapaa sshd\[25910\]: Failed password for invalid user omn from 217.138.76.69 port 51672 ssh2 Feb 25 09:03:20 hanapaa sshd\[26580\]: Invalid user spice from 217.138.76.69 Feb 25 09:03:20 hanapaa sshd\[26580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.138.76.69 |
2020-02-26 08:14:22 |
| 51.75.52.127 | attackspam | 02/26/2020-00:55:06.102296 51.75.52.127 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 52 |
2020-02-26 08:23:26 |
| 89.175.56.150 | attackbotsspam | Unauthorized connection attempt from IP address 89.175.56.150 on Port 445(SMB) |
2020-02-26 08:19:06 |
| 125.16.182.132 | attackspam | Unauthorized connection attempt from IP address 125.16.182.132 on Port 445(SMB) |
2020-02-26 08:32:01 |
| 51.68.47.45 | attackspam | Feb 25 18:13:57 silence02 sshd[27974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.45 Feb 25 18:13:59 silence02 sshd[27974]: Failed password for invalid user n from 51.68.47.45 port 46778 ssh2 Feb 25 18:23:12 silence02 sshd[28532]: Failed password for root from 51.68.47.45 port 35722 ssh2 |
2020-02-26 08:33:47 |
| 41.32.222.20 | attack | Honeypot attack, port: 81, PTR: host-41.32.222.20.tedata.net. |
2020-02-26 08:34:28 |
| 18.220.69.238 | attackbots | Email rejected due to spam filtering |
2020-02-26 08:42:46 |
| 83.240.247.46 | attackspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-02-26 08:47:26 |