City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 168.14.52.241
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47773
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;168.14.52.241. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021101 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 05:37:35 CST 2025
;; MSG SIZE rcvd: 106Host 241.52.14.168.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 241.52.14.168.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.99.239.230 | attack | frenzy |
2020-09-20 23:18:05 |
| 212.70.149.4 | attackspam | Sep 20 17:25:36 relay postfix/smtpd\[24352\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 20 17:28:45 relay postfix/smtpd\[30809\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 20 17:31:51 relay postfix/smtpd\[27809\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 20 17:34:57 relay postfix/smtpd\[28222\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 20 17:38:03 relay postfix/smtpd\[30324\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-09-20 23:42:37 |
| 116.206.232.11 | attack |
|
2020-09-20 23:58:38 |
| 111.255.25.82 | attackbots | Sep 19 17:00:53 scw-focused-cartwright sshd[26548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.255.25.82 Sep 19 17:00:54 scw-focused-cartwright sshd[26548]: Failed password for invalid user admin from 111.255.25.82 port 58107 ssh2 |
2020-09-20 23:51:35 |
| 218.152.207.173 | attack | (sshd) Failed SSH login from 218.152.207.173 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 09:05:10 rainbow sshd[3468070]: Invalid user admin from 218.152.207.173 port 36655 Sep 20 09:05:11 rainbow sshd[3468070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.152.207.173 Sep 20 09:05:11 rainbow sshd[3468092]: Invalid user admin from 218.152.207.173 port 36658 Sep 20 09:05:11 rainbow sshd[3468092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.152.207.173 Sep 20 09:05:12 rainbow sshd[3468070]: Failed password for invalid user admin from 218.152.207.173 port 36655 ssh2 |
2020-09-20 23:41:07 |
| 171.15.16.9 | attackspam | Unauthorized connection attempt from IP address 171.15.16.9 on Port 445(SMB) |
2020-09-20 23:20:15 |
| 69.10.58.111 | attackspam | Sep 19 14:33:04 mailserver postfix/smtpd[323]: connect from unknown[69.10.58.111] Sep 19 14:33:04 mailserver postfix/smtpd[323]: disconnect from unknown[69.10.58.111] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4 |
2020-09-20 23:16:38 |
| 49.233.177.173 | attackbots | "Unauthorized connection attempt on SSHD detected" |
2020-09-20 23:56:30 |
| 202.93.117.30 | attack | 1600545721 - 09/19/2020 22:02:01 Host: 202.93.117.30/202.93.117.30 Port: 445 TCP Blocked |
2020-09-20 23:27:52 |
| 121.66.252.158 | attackspambots | 121.66.252.158 (KR/South Korea/-), 7 distributed sshd attacks on account [user] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 20 11:08:52 server2 sshd[3484]: Invalid user user from 118.27.28.248 Sep 20 11:08:38 server2 sshd[3467]: Invalid user user from 188.165.42.223 Sep 20 11:08:40 server2 sshd[3467]: Failed password for invalid user user from 188.165.42.223 port 32934 ssh2 Sep 20 11:08:43 server2 sshd[3475]: Invalid user user from 104.168.44.234 Sep 20 11:08:46 server2 sshd[3475]: Failed password for invalid user user from 104.168.44.234 port 32787 ssh2 Sep 20 10:17:26 server2 sshd[24486]: Failed password for invalid user user from 121.66.252.158 port 52242 ssh2 Sep 20 10:17:24 server2 sshd[24486]: Invalid user user from 121.66.252.158 IP Addresses Blocked: 118.27.28.248 (JP/Japan/-) 188.165.42.223 (FR/France/-) 104.168.44.234 (US/United States/-) |
2020-09-20 23:31:55 |
| 89.163.164.183 | attack | Brute forcing email accounts |
2020-09-20 23:48:36 |
| 95.57.208.193 | attackspambots | Unauthorized connection attempt from IP address 95.57.208.193 on Port 445(SMB) |
2020-09-20 23:45:24 |
| 189.203.72.138 | attack | Sep 20 14:42:16 localhost sshd\[26359\]: Invalid user teamspeak from 189.203.72.138 port 33974 Sep 20 14:42:16 localhost sshd\[26359\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.203.72.138 Sep 20 14:42:17 localhost sshd\[26359\]: Failed password for invalid user teamspeak from 189.203.72.138 port 33974 ssh2 ... |
2020-09-20 23:47:14 |
| 223.19.47.97 | attack | Sep 20 03:10:09 vps639187 sshd\[6796\]: Invalid user pi from 223.19.47.97 port 33946 Sep 20 03:10:09 vps639187 sshd\[6796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.19.47.97 Sep 20 03:10:11 vps639187 sshd\[6796\]: Failed password for invalid user pi from 223.19.47.97 port 33946 ssh2 ... |
2020-09-20 23:58:16 |
| 110.86.182.100 | attack | IP 110.86.182.100 attacked honeypot on port: 5555 at 9/19/2020 10:00:39 AM |
2020-09-20 23:37:07 |