City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 150.136.53.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30238
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;150.136.53.72. IN A
;; AUTHORITY SECTION:
. 244 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 05:33:34 CST 2022
;; MSG SIZE rcvd: 106Host 72.53.136.150.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 72.53.136.150.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.118.160.29 | attack | firewall-block, port(s): 1521/tcp |
2019-06-22 15:56:08 |
| 81.22.45.219 | attack | 22.06.2019 06:34:23 Connection to port 61789 blocked by firewall |
2019-06-22 15:13:09 |
| 80.211.3.109 | attackspambots | 2019-06-22T14:03:06.149325enmeeting.mahidol.ac.th sshd\[800\]: Invalid user ubnt from 80.211.3.109 port 46976 2019-06-22T14:03:06.167531enmeeting.mahidol.ac.th sshd\[800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.3.109 2019-06-22T14:03:09.001956enmeeting.mahidol.ac.th sshd\[800\]: Failed password for invalid user ubnt from 80.211.3.109 port 46976 ssh2 ... |
2019-06-22 15:15:55 |
| 77.242.76.218 | attack | Scanning random ports - tries to find possible vulnerable services |
2019-06-22 16:18:55 |
| 36.65.239.105 | attackspambots | Unauthorized connection attempt from IP address 36.65.239.105 on Port 445(SMB) |
2019-06-22 15:55:19 |
| 36.77.43.208 | attack | Unauthorized connection attempt from IP address 36.77.43.208 on Port 445(SMB) |
2019-06-22 15:33:01 |
| 162.243.151.46 | attackspam | " " |
2019-06-22 15:10:52 |
| 121.201.6.94 | attackbotsspam | Jun 22 00:33:50 localhost kernel: [12422224.027774] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=121.201.6.94 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=30398 DF PROTO=TCP SPT=58346 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 Jun 22 00:33:50 localhost kernel: [12422224.027801] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=121.201.6.94 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=30398 DF PROTO=TCP SPT=58346 DPT=445 SEQ=1234244257 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402) Jun 22 00:33:53 localhost kernel: [12422227.038307] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=121.201.6.94 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=31185 DF PROTO=TCP SPT=58346 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 Jun 22 00:33:53 localhost kernel: [12422227.038316] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=121.201.6.94 |
2019-06-22 15:12:29 |
| 41.41.10.13 | attackbots | Unauthorized connection attempt from IP address 41.41.10.13 on Port 445(SMB) |
2019-06-22 16:03:23 |
| 58.242.82.7 | attackspambots | Triggered by Fail2Ban at Vostok web server |
2019-06-22 15:21:01 |
| 119.148.35.65 | attack | Unauthorized connection attempt from IP address 119.148.35.65 on Port 445(SMB) |
2019-06-22 15:32:29 |
| 37.49.227.12 | attack | Daily port scanning for vulnerabilities |
2019-06-22 16:18:23 |
| 1.55.227.115 | attackbotsspam | Unauthorized connection attempt from IP address 1.55.227.115 on Port 445(SMB) |
2019-06-22 16:10:41 |
| 74.205.35.88 | attack | Autoban 74.205.35.88 AUTH/CONNECT |
2019-06-22 15:45:32 |
| 80.241.213.172 | attack | GET /000000000000.cfg HTTP/1.1 etc. |
2019-06-22 15:31:47 |