City: unknown
Region: unknown
Country: Thailand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.207.38.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51331
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.207.38.29. IN A
;; AUTHORITY SECTION:
. 382 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400
;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 05:33:39 CST 2022
;; MSG SIZE rcvd: 10529.38.207.14.in-addr.arpa domain name pointer mx-ll-14.207.38-29.dynamic.3bb.co.th.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
29.38.207.14.in-addr.arpa name = mx-ll-14.207.38-29.dynamic.3bb.co.th.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 1.39.184.80 | attackspam | Unauthorized connection attempt from IP address 1.39.184.80 on Port 445(SMB) |
2020-07-25 02:13:38 |
| 51.38.179.113 | attackspam | Jul 24 18:57:24 ajax sshd[10185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.179.113 Jul 24 18:57:26 ajax sshd[10185]: Failed password for invalid user internet from 51.38.179.113 port 48108 ssh2 |
2020-07-25 01:59:12 |
| 88.81.65.219 | attack | Jul 24 11:52:22 mail.srvfarm.net postfix/smtps/smtpd[2208709]: warning: unknown[88.81.65.219]: SASL PLAIN authentication failed: Jul 24 11:52:22 mail.srvfarm.net postfix/smtps/smtpd[2208709]: lost connection after AUTH from unknown[88.81.65.219] Jul 24 11:54:00 mail.srvfarm.net postfix/smtpd[2215365]: warning: unknown[88.81.65.219]: SASL PLAIN authentication failed: Jul 24 11:54:00 mail.srvfarm.net postfix/smtpd[2215365]: lost connection after AUTH from unknown[88.81.65.219] Jul 24 11:57:46 mail.srvfarm.net postfix/smtps/smtpd[2213332]: warning: unknown[88.81.65.219]: SASL PLAIN authentication failed: |
2020-07-25 01:42:23 |
| 185.203.168.30 | attackspam | Attempted connection to port 445. |
2020-07-25 01:57:25 |
| 171.251.102.20 | attackspam | Attempted connection to port 80. |
2020-07-25 02:01:45 |
| 62.210.194.5 | attackbots | Jul 24 17:24:18 mail.srvfarm.net postfix/smtpd[2350012]: lost connection after STARTTLS from r5.news.eu.rvca.com[62.210.194.5] Jul 24 17:26:42 mail.srvfarm.net postfix/smtpd[2350005]: lost connection after STARTTLS from r5.news.eu.rvca.com[62.210.194.5] Jul 24 17:27:55 mail.srvfarm.net postfix/smtpd[2350008]: lost connection after STARTTLS from r5.news.eu.rvca.com[62.210.194.5] Jul 24 17:29:01 mail.srvfarm.net postfix/smtpd[2350015]: lost connection after STARTTLS from r5.news.eu.rvca.com[62.210.194.5] Jul 24 17:31:08 mail.srvfarm.net postfix/smtpd[2350005]: lost connection after STARTTLS from r5.news.eu.rvca.com[62.210.194.5] |
2020-07-25 01:43:08 |
| 123.207.142.208 | attackbots | 07/24/2020-11:49:49.752269 123.207.142.208 Protocol: 6 ET SCAN Potential SSH Scan |
2020-07-25 02:12:48 |
| 186.251.79.146 | attack | Unauthorized connection attempt from IP address 186.251.79.146 on Port 445(SMB) |
2020-07-25 01:47:55 |
| 193.35.51.13 | attackspam | 2020-07-24 19:30:21 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-07-24 19:30:30 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-07-24 19:30:35 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-07-24 19:30:48 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-07-24 19:30:53 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-07-24 19:30:58 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-07-24 19:31:04 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-07-24 19:31:09 dovecot_login authenticator failed for \(\[193.35.51.13\ ... |
2020-07-25 01:36:18 |
| 51.77.230.147 | attackbotsspam | Jul 24 18:45:15 mail.srvfarm.net postfix/smtpd[21988]: warning: vps-113fc0af.vps.ovh.net[51.77.230.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 24 18:45:15 mail.srvfarm.net postfix/smtpd[21988]: lost connection after AUTH from vps-113fc0af.vps.ovh.net[51.77.230.147] Jul 24 18:49:12 mail.srvfarm.net postfix/smtpd[6287]: warning: vps-113fc0af.vps.ovh.net[51.77.230.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 24 18:49:12 mail.srvfarm.net postfix/smtpd[6287]: lost connection after AUTH from vps-113fc0af.vps.ovh.net[51.77.230.147] Jul 24 18:49:16 mail.srvfarm.net postfix/smtpd[21931]: warning: vps-113fc0af.vps.ovh.net[51.77.230.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 24 18:49:16 mail.srvfarm.net postfix/smtpd[22074]: warning: vps-113fc0af.vps.ovh.net[51.77.230.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 24 18:49:16 mail.srvfarm.net postfix/smtpd[9321]: warning: vps-113fc0af.vps.ovh.net[51.77.230.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-07-25 01:43:59 |
| 190.156.231.245 | attackspam | 2020-07-24T14:16:43.152786shield sshd\[24014\]: Invalid user mysql from 190.156.231.245 port 41689 2020-07-24T14:16:43.163297shield sshd\[24014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.156.231.245 2020-07-24T14:16:44.991843shield sshd\[24014\]: Failed password for invalid user mysql from 190.156.231.245 port 41689 ssh2 2020-07-24T14:22:50.516231shield sshd\[24963\]: Invalid user piotr from 190.156.231.245 port 44189 2020-07-24T14:22:50.527142shield sshd\[24963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.156.231.245 |
2020-07-25 01:56:42 |
| 187.121.221.126 | attack | Attempted Brute Force (dovecot) |
2020-07-25 02:11:28 |
| 35.183.177.212 | attack | Unauthorized connection attempt detected from IP address 35.183.177.212 to port 8080 |
2020-07-25 01:55:25 |
| 45.179.189.163 | attack | Jul 24 11:53:07 mail.srvfarm.net postfix/smtps/smtpd[2209303]: warning: unknown[45.179.189.163]: SASL PLAIN authentication failed: Jul 24 11:53:07 mail.srvfarm.net postfix/smtps/smtpd[2209303]: lost connection after AUTH from unknown[45.179.189.163] Jul 24 12:00:37 mail.srvfarm.net postfix/smtps/smtpd[2216387]: warning: unknown[45.179.189.163]: SASL PLAIN authentication failed: Jul 24 12:00:38 mail.srvfarm.net postfix/smtps/smtpd[2216387]: lost connection after AUTH from unknown[45.179.189.163] Jul 24 12:00:54 mail.srvfarm.net postfix/smtpd[2217484]: warning: unknown[45.179.189.163]: SASL PLAIN authentication failed: |
2020-07-25 01:44:49 |
| 14.252.50.169 | attackspambots | Unauthorized connection attempt from IP address 14.252.50.169 on Port 445(SMB) |
2020-07-25 02:08:28 |