City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 64.94.19.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44115
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;64.94.19.42. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022400 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 24 20:22:10 CST 2025
;; MSG SIZE rcvd: 104Host 42.19.94.64.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.19.94.64.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 186.93.8.237 | attackbotsspam | DATE:2019-07-10_01:35:54, IP:186.93.8.237, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc) |
2019-07-10 08:00:54 |
| 185.211.245.198 | attack | Jul 10 01:27:12 localhost postfix/smtpd\[23977\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 10 01:27:22 localhost postfix/smtpd\[23977\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 10 01:32:31 localhost postfix/smtpd\[24186\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 10 01:32:41 localhost postfix/smtpd\[24186\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 10 01:36:34 localhost postfix/smtpd\[24361\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-07-10 07:43:06 |
| 34.205.105.179 | attackbots | Port scan attempt detected by AWS-CCS, CTS, India |
2019-07-10 07:26:53 |
| 139.199.15.191 | attackbots | SMB Server BruteForce Attack |
2019-07-10 07:22:22 |
| 188.165.140.127 | attack | WordPress XMLRPC scan :: 188.165.140.127 0.072 BYPASS [10/Jul/2019:06:47:42 1000] [censored_4] "POST /xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-07-10 07:28:21 |
| 163.172.93.131 | attackbotsspam | v+ssh-bruteforce |
2019-07-10 07:19:35 |
| 77.108.92.178 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-09 12:54:00,903 INFO [amun_request_handler] PortScan Detected on Port: 445 (77.108.92.178) |
2019-07-10 07:15:57 |
| 61.131.207.66 | attackspambots | SMB Server BruteForce Attack |
2019-07-10 07:25:48 |
| 80.87.77.100 | attackbots | Unauthorized connection attempt from IP address 80.87.77.100 on Port 445(SMB) |
2019-07-10 07:20:05 |
| 51.15.191.156 | attackbots | 3389BruteforceFW21 |
2019-07-10 07:31:09 |
| 128.199.215.184 | attack | Jul1001:35:52server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=128.199.215.184DST=136.243.224.57LEN=60TOS=0x00PREC=0x00TTL=53ID=28041DFPROTO=TCPSPT=48350DPT=22WINDOW=29200RES=0x00SYNURGP=0Jul1001:35:53server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=128.199.215.184DST=136.243.224.57LEN=60TOS=0x00PREC=0x00TTL=53ID=28042DFPROTO=TCPSPT=48350DPT=22WINDOW=29200RES=0x00SYNURGP=0Jul1001:35:55server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=128.199.215.184DST=136.243.224.57LEN=60TOS=0x00PREC=0x00TTL=53ID=25400DFPROTO=TCPSPT=47340DPT=222WINDOW=29200RES=0x00SYNURGP=0Jul1001:35:56server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=128.199.215.184DST=136.243.224.57LEN=60TOS=0x00PREC=0x00TTL=53ID=25401DFPROTO=TCPSPT=47340DPT=222WINDOW=29200RES=0x00SYNURGP=0Jul1001:35:57server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00 |
2019-07-10 07:44:55 |
| 187.17.165.111 | attackspam | Jul 10 01:52:45 minden010 sshd[30840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.17.165.111 Jul 10 01:52:47 minden010 sshd[30840]: Failed password for invalid user jie from 187.17.165.111 port 10179 ssh2 Jul 10 01:55:02 minden010 sshd[31610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.17.165.111 ... |
2019-07-10 07:57:20 |
| 109.87.86.95 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 16:17:50,670 INFO [shellcode_manager] (109.87.86.95) no match, writing hexdump (c55f10fbab04ca08d2ce477b60bda339 :2267115) - MS17010 (EternalBlue) |
2019-07-10 07:15:30 |
| 106.1.228.32 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-09 12:52:17,649 INFO [amun_request_handler] PortScan Detected on Port: 445 (106.1.228.32) |
2019-07-10 07:37:10 |
| 116.202.19.140 | attack | Triggered by Fail2Ban at Ares web server |
2019-07-10 08:03:00 |