City: Bangkok
Region: Bangkok
Country: Thailand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.49.252.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7445
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.49.252.145. IN A
;; AUTHORITY SECTION:
. 488 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019100901 1800 900 604800 86400
;; Query time: 263 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 10 03:19:25 CST 2019
;; MSG SIZE rcvd: 117145.252.49.49.in-addr.arpa domain name pointer mx-ll-49.49.252-145.dynamic.3bb.co.th.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
145.252.49.49.in-addr.arpa name = mx-ll-49.49.252-145.dynamic.3bb.in.th.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 64.227.30.91 | attack | Jul 11 12:35:19 plex-server sshd[258506]: Failed password for mail from 64.227.30.91 port 41388 ssh2 Jul 11 12:38:15 plex-server sshd[258686]: Invalid user oracle-test from 64.227.30.91 port 54386 Jul 11 12:38:15 plex-server sshd[258686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.30.91 Jul 11 12:38:15 plex-server sshd[258686]: Invalid user oracle-test from 64.227.30.91 port 54386 Jul 11 12:38:18 plex-server sshd[258686]: Failed password for invalid user oracle-test from 64.227.30.91 port 54386 ssh2 ... |
2020-07-11 20:48:12 |
| 117.221.195.111 | attackspam | Unauthorized connection attempt from IP address 117.221.195.111 on Port 445(SMB) |
2020-07-11 20:23:47 |
| 95.95.0.228 | attackbots | 95.95.0.228 - - [11/Jul/2020:08:01:44 -0400] "GET /welcome/ HTTP/1.1" 200 7793 "https://ghostgamingvpn.io/welcome/protect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36" 95.95.0.228 - - [11/Jul/2020:08:01:45 -0400] "GET /welcome/css/main.css HTTP/1.1" 200 38870 "https://ghostgamingvpn.io/welcome/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36" 95.95.0.228 - - [11/Jul/2020:08:01:45 -0400] "GET /welcome/img/glogo.png HTTP/1.1" 200 18206 "https://ghostgamingvpn.io/welcome/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36" 95.95.0.228 - - [11/Jul/2020:08:01:45 -0400] "GET /welcome/js/wow.min.js HTTP/1.1" 200 8182 "https://ghostgamingvpn.io/welcome/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36" 95.95.0.228 - ... |
2020-07-11 20:34:22 |
| 45.143.222.159 | attackbotsspam | Jul 11 07:01:36 mailman postfix/smtpd[10248]: warning: unknown[45.143.222.159]: SASL LOGIN authentication failed: authentication failure |
2020-07-11 20:45:25 |
| 49.235.90.32 | attack | Jul 11 12:17:53 onepixel sshd[2862947]: Invalid user sahron from 49.235.90.32 port 58250 Jul 11 12:17:53 onepixel sshd[2862947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.90.32 Jul 11 12:17:53 onepixel sshd[2862947]: Invalid user sahron from 49.235.90.32 port 58250 Jul 11 12:17:55 onepixel sshd[2862947]: Failed password for invalid user sahron from 49.235.90.32 port 58250 ssh2 Jul 11 12:22:17 onepixel sshd[2865268]: Invalid user admin from 49.235.90.32 port 44846 |
2020-07-11 20:54:12 |
| 157.50.188.85 | attackbots | Unauthorized connection attempt from IP address 157.50.188.85 on Port 445(SMB) |
2020-07-11 20:52:00 |
| 112.133.251.40 | attack | Unauthorized connection attempt from IP address 112.133.251.40 on Port 445(SMB) |
2020-07-11 20:49:20 |
| 122.165.231.238 | attackbots | Unauthorized connection attempt from IP address 122.165.231.238 on Port 445(SMB) |
2020-07-11 20:36:38 |
| 78.117.221.120 | attackbots | Jul 11 13:45:30 nas sshd[20957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.117.221.120 Jul 11 13:45:32 nas sshd[20957]: Failed password for invalid user linda from 78.117.221.120 port 52859 ssh2 Jul 11 14:01:40 nas sshd[21547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.117.221.120 ... |
2020-07-11 20:43:25 |
| 85.105.30.249 | attack | Unauthorized connection attempt from IP address 85.105.30.249 on Port 445(SMB) |
2020-07-11 20:38:12 |
| 222.186.180.223 | attack | 2020-07-11T08:54:53.872688na-vps210223 sshd[25628]: Failed password for root from 222.186.180.223 port 10752 ssh2 2020-07-11T08:54:57.316441na-vps210223 sshd[25628]: Failed password for root from 222.186.180.223 port 10752 ssh2 2020-07-11T08:55:00.840410na-vps210223 sshd[25628]: Failed password for root from 222.186.180.223 port 10752 ssh2 2020-07-11T08:55:00.840943na-vps210223 sshd[25628]: error: maximum authentication attempts exceeded for root from 222.186.180.223 port 10752 ssh2 [preauth] 2020-07-11T08:55:00.840960na-vps210223 sshd[25628]: Disconnecting: Too many authentication failures [preauth] ... |
2020-07-11 20:57:11 |
| 61.246.7.145 | attackspam | (sshd) Failed SSH login from 61.246.7.145 (IN/India/abts-north-static-145.7.246.61.airtelbroadband.in): 5 in the last 3600 secs |
2020-07-11 20:26:23 |
| 134.175.54.154 | attackbotsspam | SSH Brute Force |
2020-07-11 20:47:40 |
| 113.177.238.34 | attack | Unauthorized connection attempt from IP address 113.177.238.34 on Port 445(SMB) |
2020-07-11 20:22:36 |
| 209.17.96.250 | attackspam | Jul 11 14:01:26 debian-2gb-nbg1-2 kernel: \[16727470.543552\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=209.17.96.250 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=63520 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-07-11 20:58:56 |