City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.237.34.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29294
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;49.237.34.138. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 14:28:14 CST 2022
;; MSG SIZE rcvd: 106138.34.237.49.in-addr.arpa domain name pointer ppp-49-237-34-138.revip6.asianet.co.th.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
138.34.237.49.in-addr.arpa name = ppp-49-237-34-138.revip6.asianet.co.th.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 157.230.248.89 | attackspambots | xmlrpc attack |
2019-11-15 19:34:47 |
| 5.235.229.240 | attackspam | Automatic report - Port Scan Attack |
2019-11-15 19:38:12 |
| 139.59.81.223 | attackspam | 2019-11-15T06:21:18.485999shield sshd\[5013\]: Invalid user kafka from 139.59.81.223 port 51566 2019-11-15T06:21:18.490238shield sshd\[5013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.81.223 2019-11-15T06:21:20.436273shield sshd\[5013\]: Failed password for invalid user kafka from 139.59.81.223 port 51566 ssh2 2019-11-15T06:22:21.850214shield sshd\[5146\]: Invalid user postgres from 139.59.81.223 port 32816 2019-11-15T06:22:21.854830shield sshd\[5146\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.81.223 |
2019-11-15 19:45:24 |
| 5.39.88.4 | attackspam | Nov 15 10:02:48 dedicated sshd[16046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.88.4 user=root Nov 15 10:02:50 dedicated sshd[16046]: Failed password for root from 5.39.88.4 port 41606 ssh2 |
2019-11-15 19:49:47 |
| 77.239.65.206 | attack | SMB Server BruteForce Attack |
2019-11-15 19:27:18 |
| 195.154.157.16 | attackspam | 195.154.157.16 - - \[15/Nov/2019:08:05:24 +0100\] "POST /wp-login.php HTTP/1.0" 200 5269 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 195.154.157.16 - - \[15/Nov/2019:08:05:37 +0100\] "POST /wp-login.php HTTP/1.0" 200 5099 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 195.154.157.16 - - \[15/Nov/2019:08:05:49 +0100\] "POST /wp-login.php HTTP/1.0" 200 5093 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-15 19:55:20 |
| 113.125.26.101 | attackbotsspam | Invalid user wwwadmin from 113.125.26.101 port 56740 |
2019-11-15 19:40:23 |
| 118.89.191.145 | attackspam | $f2bV_matches |
2019-11-15 19:43:22 |
| 196.179.36.34 | attackbotsspam | Brute force SMTP login attempts. |
2019-11-15 20:00:59 |
| 223.68.8.162 | attackspam | Nov 15 07:22:26 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3c:4d:20:28:99:3a:4d:30:af:08:00 SRC=223.68.8.162 DST=213.136.73.128 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF PROTO=TCP SPT=37934 DPT=10000 WINDOW=0 RES=0x00 RST URGP=0 Nov 15 07:22:26 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3c:4d:20:28:99:3a:4d:30:af:08:00 SRC=223.68.8.162 DST=213.136.73.128 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF PROTO=TCP SPT=37934 DPT=10000 WINDOW=0 RES=0x00 RST URGP=0 Nov 15 07:22:26 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3c:4d:20:28:99:3a:4d:30:af:08:00 SRC=223.68.8.162 DST=213.136.73.128 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF PROTO=TCP SPT=37934 DPT=10000 WINDOW=0 RES=0x00 RST URGP=0 Nov 15 07:22:26 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3c:4d:20:28:99:3a:4d:30:af:08:00 SRC=223.68.8.162 DST=213.136.73.128 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF PROTO=TCP SPT=37934 DPT=10000 WINDOW=0 RES=0x00 RST URGP=0 Nov 15 07:22:26 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3c:4d:20: |
2019-11-15 19:43:07 |
| 132.154.97.106 | attackspambots | RDP Bruteforce |
2019-11-15 19:37:15 |
| 58.65.201.3 | attackbots | Automatic report - Port Scan Attack |
2019-11-15 19:37:52 |
| 49.88.112.116 | attackspam | Nov 15 09:21:08 server sshd\[2232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.116 user=root Nov 15 09:21:10 server sshd\[2232\]: Failed password for root from 49.88.112.116 port 14227 ssh2 Nov 15 09:21:11 server sshd\[2232\]: Failed password for root from 49.88.112.116 port 14227 ssh2 Nov 15 09:21:15 server sshd\[2232\]: Failed password for root from 49.88.112.116 port 14227 ssh2 Nov 15 09:21:48 server sshd\[2350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.116 user=root ... |
2019-11-15 20:04:35 |
| 94.102.56.151 | attack | MH/MP Probe, Scan, Hack - |
2019-11-15 19:31:42 |
| 192.228.100.118 | attack | Nov 15 12:27:16 mail postfix/smtpd[5240]: warning: unknown[192.228.100.118]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 15 12:27:58 mail postfix/smtpd[5208]: warning: unknown[192.228.100.118]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 15 12:28:34 mail postfix/smtpd[5273]: warning: unknown[192.228.100.118]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 15 12:28:34 mail postfix/smtpd[5183]: warning: unknown[192.228.100.118]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-15 19:38:28 |