City: unknown
Region: unknown
Country: Taiwan (Province of China)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> 210.209.160.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14179
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;210.209.160.149.		IN	A
;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012301 1800 900 604800 86400
;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 03:47:00 CST 2025
;; MSG SIZE  rcvd: 108
        149.160.209.210.in-addr.arpa domain name pointer 210-209-160-149.veetime.com.
        Server:		183.60.83.19
Address:	183.60.83.19#53
Non-authoritative answer:
149.160.209.210.in-addr.arpa	name = 210-209-160-149.veetime.com.
Authoritative answers can be found from:
        | IP | Type | Details | Datetime | 
|---|---|---|---|
| 190.24.45.109 | attackspam | Automatic report - Banned IP Access  | 
                    2020-09-25 01:03:42 | 
| 137.116.146.201 | attackspam | (sshd) Failed SSH login from 137.116.146.201 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 24 12:41:25 server sshd[30289]: Invalid user cloudera from 137.116.146.201 port 32547 Sep 24 12:41:25 server sshd[30288]: Invalid user cloudera from 137.116.146.201 port 32546 Sep 24 12:41:25 server sshd[30292]: Invalid user cloudera from 137.116.146.201 port 32555 Sep 24 12:41:25 server sshd[30293]: Invalid user cloudera from 137.116.146.201 port 32560 Sep 24 12:41:25 server sshd[30296]: Invalid user cloudera from 137.116.146.201 port 32572  | 
                    2020-09-25 01:00:28 | 
| 213.154.3.2 | attackspam | Unauthorized connection attempt from IP address 213.154.3.2 on Port 445(SMB)  | 
                    2020-09-25 01:32:26 | 
| 52.142.41.110 | attackspam | Sep 24 09:47:25 propaganda sshd[14359]: Connection from 52.142.41.110 port 53039 on 10.0.0.161 port 22 rdomain "" Sep 24 09:47:25 propaganda sshd[14359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.142.41.110 user=root Sep 24 09:47:27 propaganda sshd[14359]: Failed password for root from 52.142.41.110 port 53039 ssh2  | 
                    2020-09-25 00:54:13 | 
| 23.101.135.220 | attackspambots | Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-09-24T16:19:03Z  | 
                    2020-09-25 01:17:18 | 
| 219.78.249.93 | attackbotsspam | Brute-force attempt banned  | 
                    2020-09-25 01:17:51 | 
| 60.190.159.42 | attackspambots | Unauthorized connection attempt from IP address 60.190.159.42 on Port 445(SMB)  | 
                    2020-09-25 01:13:11 | 
| 90.53.155.194 | attackbots | 20 attempts against mh-ssh on star  | 
                    2020-09-25 01:12:48 | 
| 45.172.108.73 | attackspam | Sep 23 22:01:46 gw1 sshd[16872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.172.108.73 Sep 23 22:01:48 gw1 sshd[16872]: Failed password for invalid user oracle from 45.172.108.73 port 60152 ssh2 ...  | 
                    2020-09-25 01:10:09 | 
| 68.183.80.42 | attack | Invalid user dm from 68.183.80.42 port 34006  | 
                    2020-09-25 01:16:16 | 
| 186.235.62.101 | attackbots | Unauthorized connection attempt from IP address 186.235.62.101 on Port 445(SMB)  | 
                    2020-09-25 01:13:36 | 
| 128.199.30.242 | attackspambots | Invalid user recepcion from 128.199.30.242 port 47510  | 
                    2020-09-25 01:22:43 | 
| 111.72.196.96 | attackspam | Sep 23 20:16:37 srv01 postfix/smtpd\[25857\]: warning: unknown\[111.72.196.96\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 23 20:16:48 srv01 postfix/smtpd\[25857\]: warning: unknown\[111.72.196.96\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 23 20:17:04 srv01 postfix/smtpd\[25857\]: warning: unknown\[111.72.196.96\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 23 20:17:23 srv01 postfix/smtpd\[25857\]: warning: unknown\[111.72.196.96\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 23 20:17:34 srv01 postfix/smtpd\[25857\]: warning: unknown\[111.72.196.96\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...  | 
                    2020-09-25 00:59:29 | 
| 94.102.49.109 | attack | Sep 24 03:28:07 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.49.109 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=19930 PROTO=TCP SPT=44964 DPT=15234 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 24 03:33:45 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.49.109 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=51382 PROTO=TCP SPT=44964 DPT=15593 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 24 03:39:14 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.49.109 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=21569 PROTO=TCP SPT=44964 DPT=15358 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 24 03:40:12 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.49.109 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=61357 PROTO=TCP SPT=44964 DPT=15265 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 24 03:43:12 ...  | 
                    2020-09-25 01:09:41 | 
| 152.136.203.208 | attackspam | prod6 ...  | 
                    2020-09-25 01:00:10 |