City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 158.30.7.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9054
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;158.30.7.70. IN A
;; AUTHORITY SECTION:
. 546 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022072202 1800 900 604800 86400
;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 23 08:52:52 CST 2022
;; MSG SIZE rcvd: 104Host 70.7.30.158.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 70.7.30.158.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.225.3.37 | attack | DATE:2019-08-05 15:20:11, IP:14.225.3.37, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-08-05 21:31:51 |
| 183.252.18.190 | attackspambots | [portscan] tcp/23 [TELNET] *(RWIN=40604)(08050931) |
2019-08-05 21:35:36 |
| 185.81.157.249 | attackspam | [SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08050931) |
2019-08-05 21:34:57 |
| 175.170.65.254 | attack | 23/tcp [2019-08-05]1pkt |
2019-08-05 22:04:47 |
| 195.210.138.202 | attackspambots | Port Scan: TCP/445 |
2019-08-05 21:33:42 |
| 181.57.167.193 | attackbotsspam | Unauthorised access (Aug 5) SRC=181.57.167.193 LEN=40 TTL=239 ID=46270 TCP DPT=445 WINDOW=1024 SYN |
2019-08-05 21:52:58 |
| 190.148.39.57 | attackbotsspam | [SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(08050931) |
2019-08-05 21:50:15 |
| 181.48.213.130 | attackbots | [SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(08050931) |
2019-08-05 22:04:13 |
| 201.111.170.23 | attack | [SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08050931) |
2019-08-05 21:09:10 |
| 197.48.112.4 | attackspambots | [portscan] tcp/23 [TELNET] *(RWIN=58407)(08050931) |
2019-08-05 21:33:09 |
| 60.6.151.140 | attack | [portscan] tcp/23 [TELNET] *(RWIN=61083)(08050931) |
2019-08-05 21:43:27 |
| 14.39.248.9 | attack | [portscan] tcp/22 [SSH] *(RWIN=65535)(08050931) |
2019-08-05 21:19:16 |
| 118.170.205.11 | attack | [portscan] tcp/23 [TELNET] *(RWIN=52918)(08050931) |
2019-08-05 21:27:42 |
| 178.207.9.210 | attackspam | [portscan] tcp/139 [NetBIOS Session Service] *(RWIN=1024)(08050931) |
2019-08-05 21:53:38 |
| 14.177.232.173 | attack | [SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(08050931) |
2019-08-05 21:32:10 |