City: unknown
Region: unknown
Country: Viet Nam
Internet Service Provider: Vietnam Posts and Telecommunications Group
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attack | [MK-Root1] Blocked by UFW |
2020-04-27 13:35:43 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.247.43.96 | attack | Honeypot attack, port: 445, PTR: static.vnpt.vn. |
2020-02-19 15:07:13 |
| 14.247.42.234 | attackspambots | Honeypot attack, port: 445, PTR: static.vnpt.vn. |
2019-07-05 18:20:02 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.247.4.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58069
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.247.4.107. IN A
;; AUTHORITY SECTION:
. 322 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020042601 1800 900 604800 86400
;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 27 13:35:40 CST 2020
;; MSG SIZE rcvd: 116107.4.247.14.in-addr.arpa domain name pointer static.vnpt.vn.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
107.4.247.14.in-addr.arpa name = static.vnpt.vn.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 194.26.29.51 | attack | May 22 10:15:42 debian-2gb-nbg1-2 kernel: \[12394160.228516\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.29.51 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=43329 PROTO=TCP SPT=40961 DPT=4255 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-22 16:49:56 |
| 185.220.100.242 | attack | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-05-22 16:27:07 |
| 198.143.158.82 | attackspam | Unauthorized connection attempt detected from IP address 198.143.158.82 to port 4040 |
2020-05-22 16:23:25 |
| 146.88.240.4 | attack | May 22 10:05:48 debian-2gb-nbg1-2 kernel: \[12393566.543001\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=146.88.240.4 DST=195.201.40.59 LEN=81 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=UDP SPT=34793 DPT=389 LEN=61 |
2020-05-22 16:25:07 |
| 212.47.241.15 | attackbotsspam | May 22 08:07:49 melroy-server sshd[11400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.47.241.15 May 22 08:07:51 melroy-server sshd[11400]: Failed password for invalid user mafeng from 212.47.241.15 port 53774 ssh2 ... |
2020-05-22 16:31:51 |
| 18.222.218.91 | attack | mue-Direct access to plugin not allowed |
2020-05-22 16:33:34 |
| 103.146.203.247 | attackspambots | Invalid user qrw from 103.146.203.247 port 45764 |
2020-05-22 16:20:25 |
| 159.89.114.40 | attackbotsspam | Invalid user ync from 159.89.114.40 port 38724 |
2020-05-22 16:39:21 |
| 106.13.84.151 | attackspam | SSH bruteforce |
2020-05-22 16:37:37 |
| 190.64.49.90 | attackbots | Invalid user sh from 190.64.49.90 port 52946 |
2020-05-22 16:44:44 |
| 162.243.137.229 | attackspambots | srv02 Mass scanning activity detected Target: 143(imap2) .. |
2020-05-22 16:22:21 |
| 190.0.159.74 | attackbots | 2020-05-22T06:47:10.761072dmca.cloudsearch.cf sshd[23725]: Invalid user gbq from 190.0.159.74 port 40161 2020-05-22T06:47:10.766941dmca.cloudsearch.cf sshd[23725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=r190-0-159-74.ir-static.adinet.com.uy 2020-05-22T06:47:10.761072dmca.cloudsearch.cf sshd[23725]: Invalid user gbq from 190.0.159.74 port 40161 2020-05-22T06:47:13.589515dmca.cloudsearch.cf sshd[23725]: Failed password for invalid user gbq from 190.0.159.74 port 40161 ssh2 2020-05-22T06:54:34.595608dmca.cloudsearch.cf sshd[24175]: Invalid user yfq from 190.0.159.74 port 43301 2020-05-22T06:54:34.602059dmca.cloudsearch.cf sshd[24175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=r190-0-159-74.ir-static.adinet.com.uy 2020-05-22T06:54:34.595608dmca.cloudsearch.cf sshd[24175]: Invalid user yfq from 190.0.159.74 port 43301 2020-05-22T06:54:36.464774dmca.cloudsearch.cf sshd[24175]: Failed password for i ... |
2020-05-22 16:48:10 |
| 107.180.92.3 | attackbotsspam | 2020-05-22T09:20:37.5038601240 sshd\[26322\]: Invalid user isr from 107.180.92.3 port 65023 2020-05-22T09:20:37.5079381240 sshd\[26322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.180.92.3 2020-05-22T09:20:39.0482461240 sshd\[26322\]: Failed password for invalid user isr from 107.180.92.3 port 65023 ssh2 ... |
2020-05-22 16:28:12 |
| 180.166.141.58 | attackbotsspam | May 22 10:29:51 debian-2gb-nbg1-2 kernel: \[12395009.396688\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=180.166.141.58 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=237 ID=54481 PROTO=TCP SPT=50029 DPT=64581 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-22 16:30:24 |
| 69.163.144.78 | attackspambots | Automatically reported by fail2ban report script (mx1) |
2020-05-22 16:53:54 |