City: unknown
Region: unknown
Country: Korea (the Republic of)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.82.166.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38707
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.82.166.49. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012900 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 21:01:50 CST 2025
;; MSG SIZE rcvd: 105Host 49.166.82.14.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 49.166.82.14.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 183.2.137.119 | attackbots | Unauthorized connection attempt from IP address 183.2.137.119 on Port 445(SMB) |
2019-07-14 07:20:43 |
| 49.207.16.53 | attackspambots | Unauthorized connection attempt from IP address 49.207.16.53 on Port 445(SMB) |
2019-07-14 07:27:41 |
| 111.251.71.171 | attackspambots | Automatic report - Port Scan Attack |
2019-07-14 07:19:23 |
| 59.4.8.199 | attackspambots | port scan and connect, tcp 23 (telnet) |
2019-07-14 07:15:40 |
| 121.78.147.196 | attackbotsspam | Unauthorized connection attempt from IP address 121.78.147.196 on Port 445(SMB) |
2019-07-14 07:42:34 |
| 37.104.247.12 | attackspambots | Lines containing failures of 37.104.247.12 Jul 13 16:56:54 mellenthin postfix/smtpd[5323]: connect from unknown[37.104.247.12] Jul x@x Jul 13 16:56:54 mellenthin postfix/smtpd[5323]: lost connection after DATA from unknown[37.104.247.12] Jul 13 16:56:54 mellenthin postfix/smtpd[5323]: disconnect from unknown[37.104.247.12] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=37.104.247.12 |
2019-07-14 07:38:58 |
| 36.72.217.108 | attackbotsspam | Unauthorized connection attempt from IP address 36.72.217.108 on Port 445(SMB) |
2019-07-14 07:37:17 |
| 180.180.243.223 | attackbotsspam | Web app attack attempts, scanning for vulnerability. Date: 2019 Jul 13. 10:46:24 Source IP: 180.180.243.223 Portion of the log(s): 180.180.243.223 - [13/Jul/2019:10:46:23 +0200] "GET /shell.php HTTP/1.1" 404 548 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)" 180.180.243.223 - [13/Jul/2019:10:46:12 +0200] GET /pmd_online.php 180.180.243.223 - [13/Jul/2019:10:46:12 +0200] GET /hell.php 180.180.243.223 - [13/Jul/2019:10:46:12 +0200] GET /log.php 180.180.243.223 - [13/Jul/2019:10:46:12 +0200] GET /license.php 180.180.243.223 - [13/Jul/2019:10:46:11 +0200] GET /help-e.php 180.180.243.223 - [13/Jul/2019:10:46:11 +0200] GET /logon.php 180.180.243.223 - [13/Jul/2019:10:46:11 +0200] GET /db_pma.php 180.180.243.223 - [13/Jul/2019:10:46:11 +0200] GET /db_cts.php 180.180.243.223 - [13/Jul/2019:10:46:11 +0200] GET /test.php 180.180.243.223 - [13/Jul/2019:10:46:10 +0200] GET /_query.php 180.180.243.223 - [13/Jul/2019:10:46:10 +0200] GET /java.php .... |
2019-07-14 07:19:42 |
| 144.217.4.14 | attack | " " |
2019-07-14 07:35:27 |
| 187.188.169.123 | attack | Jul 14 00:20:07 v22018076622670303 sshd\[16469\]: Invalid user yq from 187.188.169.123 port 48486 Jul 14 00:20:07 v22018076622670303 sshd\[16469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.188.169.123 Jul 14 00:20:10 v22018076622670303 sshd\[16469\]: Failed password for invalid user yq from 187.188.169.123 port 48486 ssh2 ... |
2019-07-14 07:08:27 |
| 221.160.100.14 | attack | Jul 13 22:32:55 MK-Soft-VM3 sshd\[15990\]: Invalid user secretariat from 221.160.100.14 port 34792 Jul 13 22:32:55 MK-Soft-VM3 sshd\[15990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.160.100.14 Jul 13 22:32:58 MK-Soft-VM3 sshd\[15990\]: Failed password for invalid user secretariat from 221.160.100.14 port 34792 ssh2 ... |
2019-07-14 07:14:33 |
| 46.101.127.49 | attackbotsspam | Jul 14 01:43:20 srv-4 sshd\[26041\]: Invalid user support from 46.101.127.49 Jul 14 01:43:20 srv-4 sshd\[26041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.127.49 Jul 14 01:43:22 srv-4 sshd\[26041\]: Failed password for invalid user support from 46.101.127.49 port 60724 ssh2 ... |
2019-07-14 07:05:36 |
| 198.50.180.183 | attack | WordPress brute force |
2019-07-14 07:11:09 |
| 41.65.227.162 | attack | Lines containing failures of 41.65.227.162 Jul 13 11:44:30 mellenthin postfix/smtpd[22411]: connect from unknown[41.65.227.162] Jul x@x Jul 13 11:44:30 mellenthin postfix/smtpd[22411]: lost connection after DATA from unknown[41.65.227.162] Jul 13 11:44:30 mellenthin postfix/smtpd[22411]: disconnect from unknown[41.65.227.162] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 Jul 13 16:56:47 mellenthin postfix/smtpd[31568]: connect from unknown[41.65.227.162] Jul x@x Jul 13 16:56:48 mellenthin postfix/smtpd[31568]: lost connection after DATA from unknown[41.65.227.162] Jul 13 16:56:48 mellenthin postfix/smtpd[31568]: disconnect from unknown[41.65.227.162] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=41.65.227.162 |
2019-07-14 07:19:06 |
| 185.53.88.29 | attack | SIP Server BruteForce Attack |
2019-07-14 07:08:56 |