City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 150.242.29.89
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32888
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;150.242.29.89. IN A
;; AUTHORITY SECTION:
. 49 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022100 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 22 01:07:58 CST 2022
;; MSG SIZE rcvd: 106Host 89.29.242.150.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 89.29.242.150.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 81.236.60.210 | attackspambots | SSH login attempts. |
2020-02-17 16:30:00 |
| 194.8.129.63 | attackbotsspam | Unauthorized connection attempt detected from IP address 194.8.129.63 to port 445 |
2020-02-17 16:48:40 |
| 139.59.3.114 | attack | 2020-02-16T21:57:40.180901-07:00 suse-nuc sshd[32711]: Invalid user reviews from 139.59.3.114 port 52197 ... |
2020-02-17 16:21:34 |
| 45.143.222.107 | spam | [2020/02/17 15:47:35] [45.143.222.107:2100-0] User luxnet@luxnetcorp.com.tw AUTH fails. [2020/02/17 15:47:37] [45.143.222.107:2101-0] User luxnet@luxnetcorp.com.tw AUTH fails. [2020/02/17 15:47:38] [45.143.222.107:2101-0] User luxnet@luxnetcorp.com.tw AUTH fails. [2020/02/17 15:47:40] [45.143.222.107:2100-0] User luxnet@luxnetcorp.com.tw AUTH fails. [2020/02/17 15:47:52] [45.143.222.107:2095-0] User luxnet@luxnetcorp.com.tw AUTH fails. [ |
2020-02-17 16:45:18 |
| 5.255.255.5 | attackbots | SSH login attempts. |
2020-02-17 16:39:46 |
| 144.168.192.82 | attack | SSH login attempts. |
2020-02-17 16:43:21 |
| 74.208.5.21 | attackbots | SSH login attempts. |
2020-02-17 16:58:17 |
| 176.113.70.60 | attackbots | Feb 17 08:57:42 h2177944 kernel: \[5124173.998013\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=176.113.70.60 DST=85.214.117.9 LEN=127 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=UDP SPT=39277 DPT=1900 LEN=107 Feb 17 08:57:42 h2177944 kernel: \[5124173.998026\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=176.113.70.60 DST=85.214.117.9 LEN=127 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=UDP SPT=39277 DPT=1900 LEN=107 Feb 17 08:57:42 h2177944 kernel: \[5124173.998039\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=176.113.70.60 DST=85.214.117.9 LEN=127 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=UDP SPT=39278 DPT=1900 LEN=107 Feb 17 08:57:42 h2177944 kernel: \[5124173.998047\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=176.113.70.60 DST=85.214.117.9 LEN=127 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=UDP SPT=39278 DPT=1900 LEN=107 Feb 17 08:57:42 h2177944 kernel: \[5124173.998058\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=176.113.70.60 DST=85.214.117.9 LEN=127 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=UDP SPT=39279 DPT=1900 LEN=107 Feb 17 08 |
2020-02-17 16:26:36 |
| 178.62.36.116 | attack | Invalid user upload from 178.62.36.116 port 45396 |
2020-02-17 16:50:07 |
| 182.74.114.30 | attack | 1581915439 - 02/17/2020 05:57:19 Host: 182.74.114.30/182.74.114.30 Port: 445 TCP Blocked |
2020-02-17 16:49:49 |
| 104.26.8.246 | attackspambots | SSH login attempts. |
2020-02-17 17:05:08 |
| 68.178.213.244 | attackspambots | SSH login attempts. |
2020-02-17 16:56:01 |
| 118.69.225.171 | attack | DATE:2020-02-17 09:51:19, IP:118.69.225.171, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2020-02-17 17:06:40 |
| 77.40.3.157 | attackbots | IP: 77.40.3.157
Ports affected
Simple Mail Transfer (25)
Message Submission (587)
ASN Details
AS12389 Rostelecom
Russia (RU)
CIDR 77.40.0.0/17
Log Date: 17/02/2020 5:14:07 AM UTC |
2020-02-17 16:35:37 |
| 194.38.175.17 | attackbotsspam | SSH login attempts. |
2020-02-17 16:21:16 |