City: unknown
Region: unknown
Country: Taiwan (Province of China)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 211.74.29.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40236
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;211.74.29.112. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400
;; Query time: 156 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 10:22:11 CST 2025
;; MSG SIZE rcvd: 106112.29.74.211.in-addr.arpa domain name pointer sw29-112.adsl.seed.net.tw.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
112.29.74.211.in-addr.arpa name = sw29-112.adsl.seed.net.tw.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 219.150.93.157 | attackspambots | 2020-07-06T23:17:09.970874billing sshd[28077]: Invalid user sammy from 219.150.93.157 port 59220 2020-07-06T23:17:12.267944billing sshd[28077]: Failed password for invalid user sammy from 219.150.93.157 port 59220 ssh2 2020-07-06T23:24:26.187536billing sshd[11235]: Invalid user admin from 219.150.93.157 port 36671 ... |
2020-07-07 01:57:54 |
| 180.168.95.203 | attackbots | 2020-07-0614:53:371jsQcr-0005up-1j\<=info@whatsup2013.chH=\(localhost\)[185.216.128.37]:56991P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2995id=823e88dbd0fbd1d94540f65abdc9e3f69a4055@whatsup2013.chT="Yourlocalchicksarehungryforsex"fortgabriel2424@yahoo.comexsotictranspotation@icloud.combabyface16123@gmail.com2020-07-0614:54:371jsQdh-0005yC-Pu\<=info@whatsup2013.chH=\(localhost\)[202.137.154.152]:42359P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2978id=279e481b103beee2c58036659156dcd0ead78edb@whatsup2013.chT="Needtohaveonenighthookuptoday\?"forrigby.richard@yahoo.comacenter@acuityonline.comedu_rko_14@hotmail.com2020-07-0614:53:311jsQcj-0005tz-5A\<=info@whatsup2013.chH=\(localhost\)[85.26.162.70]:59209P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2958id=8f9460333813c6caeda81e4db97ef4f8c292a7fb@whatsup2013.chT="Wantinformalpussytoday\?"fortowboater065@gmail.comapexcarpen |
2020-07-07 01:36:38 |
| 106.52.137.134 | attack | SSH Brute-Forcing (server1) |
2020-07-07 01:44:39 |
| 138.255.220.62 | attackbots | VNC brute force attack detected by fail2ban |
2020-07-07 01:29:29 |
| 49.88.112.65 | attack | Jul 6 14:41:08 dns1 sshd[23829]: Failed password for root from 49.88.112.65 port 49401 ssh2 Jul 6 14:41:11 dns1 sshd[23829]: Failed password for root from 49.88.112.65 port 49401 ssh2 Jul 6 14:41:15 dns1 sshd[23829]: Failed password for root from 49.88.112.65 port 49401 ssh2 |
2020-07-07 01:50:11 |
| 46.38.150.72 | attackbots | Jul 6 19:41:40 relay postfix/smtpd\[17969\]: warning: unknown\[46.38.150.72\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 6 19:42:06 relay postfix/smtpd\[14213\]: warning: unknown\[46.38.150.72\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 6 19:42:29 relay postfix/smtpd\[14215\]: warning: unknown\[46.38.150.72\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 6 19:42:53 relay postfix/smtpd\[14091\]: warning: unknown\[46.38.150.72\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 6 19:43:18 relay postfix/smtpd\[16459\]: warning: unknown\[46.38.150.72\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-07 01:44:54 |
| 45.55.222.162 | attackspam | Jul 6 19:01:40 inter-technics sshd[23227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.222.162 user=root Jul 6 19:01:42 inter-technics sshd[23227]: Failed password for root from 45.55.222.162 port 40738 ssh2 Jul 6 19:06:07 inter-technics sshd[23610]: Invalid user tibo from 45.55.222.162 port 50606 Jul 6 19:06:07 inter-technics sshd[23610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.222.162 Jul 6 19:06:07 inter-technics sshd[23610]: Invalid user tibo from 45.55.222.162 port 50606 Jul 6 19:06:09 inter-technics sshd[23610]: Failed password for invalid user tibo from 45.55.222.162 port 50606 ssh2 ... |
2020-07-07 01:28:23 |
| 221.234.216.173 | attackspam | Jul 6 16:11:07 inter-technics sshd[13269]: Invalid user sammy from 221.234.216.173 port 14977 Jul 6 16:11:07 inter-technics sshd[13269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.234.216.173 Jul 6 16:11:07 inter-technics sshd[13269]: Invalid user sammy from 221.234.216.173 port 14977 Jul 6 16:11:10 inter-technics sshd[13269]: Failed password for invalid user sammy from 221.234.216.173 port 14977 ssh2 Jul 6 16:18:33 inter-technics sshd[13582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.234.216.173 user=root Jul 6 16:18:35 inter-technics sshd[13582]: Failed password for root from 221.234.216.173 port 42818 ssh2 ... |
2020-07-07 01:40:19 |
| 103.72.144.228 | attackbots | Jul 6 10:37:33 mail sshd\[46228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.72.144.228 user=root ... |
2020-07-07 01:31:11 |
| 137.74.132.175 | attackspambots | 2020-07-06T15:45:43.320430snf-827550 sshd[2633]: Invalid user block from 137.74.132.175 port 54134 2020-07-06T15:45:45.447297snf-827550 sshd[2633]: Failed password for invalid user block from 137.74.132.175 port 54134 ssh2 2020-07-06T15:54:37.406834snf-827550 sshd[2675]: Invalid user ylj from 137.74.132.175 port 52372 ... |
2020-07-07 01:42:40 |
| 139.99.238.213 | attackspam |
|
2020-07-07 01:53:56 |
| 104.219.151.119 | attack | DATE:2020-07-06 14:55:00, IP:104.219.151.119, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc) |
2020-07-07 01:26:00 |
| 172.245.157.164 | attackspam | Unauthorized connection attempt detected from IP address 172.245.157.164 to port 8088 |
2020-07-07 01:53:35 |
| 46.38.145.6 | attack | 2020-07-06 17:01:49 auth_plain authenticator failed for (User) [46.38.145.6]: 535 Incorrect authentication data (set_id=comprehensive@mail.csmailer.org) 2020-07-06 17:02:35 auth_plain authenticator failed for (User) [46.38.145.6]: 535 Incorrect authentication data (set_id=tyler@mail.csmailer.org) 2020-07-06 17:03:23 auth_plain authenticator failed for (User) [46.38.145.6]: 535 Incorrect authentication data (set_id=kps@mail.csmailer.org) 2020-07-06 17:04:09 auth_plain authenticator failed for (User) [46.38.145.6]: 535 Incorrect authentication data (set_id=bluebird@mail.csmailer.org) 2020-07-06 17:04:52 auth_plain authenticator failed for (User) [46.38.145.6]: 535 Incorrect authentication data (set_id=portugal@mail.csmailer.org) ... |
2020-07-07 01:26:53 |
| 45.7.138.40 | attackbots | trying to access non-authorized port |
2020-07-07 01:21:30 |