City: unknown
Region: unknown
Country: Viet Nam
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.239.119.135
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62349
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.239.119.135.			IN	A
;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012200 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 00:35:40 CST 2025
;; MSG SIZE  rcvd: 107
        135.119.239.14.in-addr.arpa domain name pointer static.vnpt.vn.
        Server:		183.60.83.19
Address:	183.60.83.19#53
Non-authoritative answer:
135.119.239.14.in-addr.arpa	name = static.vnpt.vn.
Authoritative answers can be found from:
        | IP | Type | Details | Datetime | 
|---|---|---|---|
| 193.112.126.64 | attack | Apr 3 01:03:19 web9 sshd\[23568\]: Invalid user huyi from 193.112.126.64 Apr 3 01:03:19 web9 sshd\[23568\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.126.64 Apr 3 01:03:21 web9 sshd\[23568\]: Failed password for invalid user huyi from 193.112.126.64 port 59314 ssh2 Apr 3 01:08:44 web9 sshd\[24338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.126.64 user=root Apr 3 01:08:46 web9 sshd\[24338\]: Failed password for root from 193.112.126.64 port 58246 ssh2  | 
                    2020-04-03 19:15:51 | 
| 170.106.81.221 | attack | 113/tcp 32777/udp 3312/tcp... [2020-02-09/04-03]5pkt,3pt.(tcp),2pt.(udp)  | 
                    2020-04-03 19:18:24 | 
| 193.56.28.16 | attackbotsspam | Apr 3 12:08:58 relay postfix/smtpd\[31401\]: warning: unknown\[193.56.28.16\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 3 12:09:02 relay postfix/smtpd\[25489\]: warning: unknown\[193.56.28.16\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 3 12:09:04 relay postfix/smtpd\[31401\]: warning: unknown\[193.56.28.16\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 3 12:09:08 relay postfix/smtpd\[25489\]: warning: unknown\[193.56.28.16\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 3 12:09:14 relay postfix/smtpd\[25489\]: warning: unknown\[193.56.28.16\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 3 12:09:14 relay postfix/smtpd\[31401\]: warning: unknown\[193.56.28.16\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...  | 
                    2020-04-03 18:42:25 | 
| 123.206.47.228 | attackspambots | Apr 3 07:03:33 Tower sshd[13224]: Connection from 123.206.47.228 port 37290 on 192.168.10.220 port 22 rdomain "" Apr 3 07:03:36 Tower sshd[13224]: Failed password for root from 123.206.47.228 port 37290 ssh2 Apr 3 07:03:36 Tower sshd[13224]: Received disconnect from 123.206.47.228 port 37290:11: Bye Bye [preauth] Apr 3 07:03:36 Tower sshd[13224]: Disconnected from authenticating user root 123.206.47.228 port 37290 [preauth]  | 
                    2020-04-03 19:22:31 | 
| 142.93.56.221 | attackspambots | $f2bV_matches  | 
                    2020-04-03 18:40:11 | 
| 117.71.57.195 | attackspam | SSH brute-force attempt  | 
                    2020-04-03 18:59:07 | 
| 45.76.216.48 | attack | Apr 1 03:15:08 cumulus sshd[10224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.76.216.48 user=r.r Apr 1 03:15:10 cumulus sshd[10224]: Failed password for r.r from 45.76.216.48 port 52640 ssh2 Apr 1 03:15:10 cumulus sshd[10224]: Received disconnect from 45.76.216.48 port 52640:11: Bye Bye [preauth] Apr 1 03:15:10 cumulus sshd[10224]: Disconnected from 45.76.216.48 port 52640 [preauth] Apr 1 03:28:02 cumulus sshd[10904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.76.216.48 user=r.r Apr 1 03:28:04 cumulus sshd[10904]: Failed password for r.r from 45.76.216.48 port 57414 ssh2 Apr 1 03:28:04 cumulus sshd[10904]: Received disconnect from 45.76.216.48 port 57414:11: Bye Bye [preauth] Apr 1 03:28:04 cumulus sshd[10904]: Disconnected from 45.76.216.48 port 57414 [preauth] Apr 1 03:33:40 cumulus sshd[11222]: Invalid user admin from 45.76.216.48 port 52302 Apr 1 03:33:40 cum........ -------------------------------  | 
                    2020-04-03 19:22:59 | 
| 85.202.83.107 | attackspambots | Apr 2 23:41:42 nimbus postfix/postscreen[27284]: CONNECT from [85.202.83.107]:48335 to [192.168.14.12]:25 Apr 2 23:41:42 nimbus postfix/dnsblog[27824]: addr 85.202.83.107 listed by domain b.barracudacentral.org as 127.0.0.2 Apr 2 23:41:48 nimbus postfix/postscreen[27284]: PASS NEW [85.202.83.107]:48335 Apr 2 23:41:48 nimbus postfix/smtpd[27814]: connect from mail-a.webstudioseventytwo.com[85.202.83.107] Apr 2 23:41:48 nimbus policyd-spf[27828]: None; identhostnamey=helo; client-ip=85.202.83.107; helo=mail.blackholeofrandom.com; envelope-from=x@x Apr 2 23:41:48 nimbus policyd-spf[27828]: Pass; identhostnamey=mailfrom; client-ip=85.202.83.107; helo=mail.blackholeofrandom.com; envelope-from=x@x Apr 2 23:41:49 nimbus sqlgrey: grey: new: 85.202.83(85.202.83.107), x@x -> x@x Apr x@x Apr 2 23:41:49 nimbus postfix/smtpd[27814]: disconnect from mail-a.webstudioseventytwo.com[85.202.83.107] Apr 2 23:43:58 nimbus postfix/postscreen[27284]: CONNECT from [85.202.83.107]:552........ -------------------------------  | 
                    2020-04-03 18:47:10 | 
| 104.168.28.195 | attackbotsspam | Apr 3 11:30:01 haigwepa sshd[29968]: Failed password for root from 104.168.28.195 port 54067 ssh2 ...  | 
                    2020-04-03 19:12:37 | 
| 101.78.229.4 | attackspambots | $f2bV_matches  | 
                    2020-04-03 18:43:53 | 
| 185.157.40.249 | attackspam | xmlrpc attack  | 
                    2020-04-03 19:14:31 | 
| 178.128.222.84 | attack | Apr 3 12:20:42 vpn01 sshd[10949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.222.84 Apr 3 12:20:44 vpn01 sshd[10949]: Failed password for invalid user max from 178.128.222.84 port 49948 ssh2 ...  | 
                    2020-04-03 18:56:49 | 
| 92.118.37.55 | attack | Apr 3 13:04:35 debian-2gb-nbg1-2 kernel: \[8170915.075820\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.55 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=32553 PROTO=TCP SPT=48178 DPT=13833 WINDOW=1024 RES=0x00 SYN URGP=0  | 
                    2020-04-03 19:04:47 | 
| 46.238.53.245 | attackspam | Apr 3 08:56:02 server sshd\[26919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.238.53.245 user=root Apr 3 08:56:04 server sshd\[26919\]: Failed password for root from 46.238.53.245 port 40930 ssh2 Apr 3 09:06:42 server sshd\[29335\]: Invalid user user from 46.238.53.245 Apr 3 09:06:42 server sshd\[29335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.238.53.245 Apr 3 09:06:44 server sshd\[29335\]: Failed password for invalid user user from 46.238.53.245 port 47896 ssh2 ...  | 
                    2020-04-03 18:47:23 | 
| 54.223.154.75 | attackspambots | Invalid user vlv from 54.223.154.75 port 55918  | 
                    2020-04-03 19:13:58 |