City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 10.1.142.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56960
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;10.1.142.2. IN A
;; AUTHORITY SECTION:
. 558 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022112700 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 27 21:14:34 CST 2022
;; MSG SIZE rcvd: 103Host 2.142.1.10.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 2.142.1.10.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 195.54.161.41 | attackbotsspam | Jun 6 19:51:28 debian-2gb-nbg1-2 kernel: \[13724636.623916\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.54.161.41 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=424 PROTO=TCP SPT=59422 DPT=4564 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-07 01:55:52 |
| 142.93.186.206 | attack | firewall-block, port(s): 15699/tcp |
2020-06-07 02:05:59 |
| 209.85.202.26 | attackspambots | SmallBizIT.US 9 packets to tcp(40288,41221,44454) |
2020-06-07 01:54:31 |
| 194.26.29.146 | attackspambots | scans 43 times in preceeding hours on the ports (in chronological order) 11021 11691 11135 11814 11392 11512 11044 11482 11783 11860 11170 11818 11135 11393 11819 11512 11598 11576 11752 11681 11931 11155 11840 11731 11149 11800 11729 11841 11189 11518 11293 11631 11235 11126 11247 11959 11109 11557 11995 11660 11639 11541 11287 resulting in total of 612 scans from 194.26.29.0/24 block. |
2020-06-07 02:19:02 |
| 85.209.0.25 | attack | scans 3 times in preceeding hours on the ports (in chronological order) 3128 3128 3128 |
2020-06-07 02:16:01 |
| 168.158.8.28 | attackbotsspam | Ref: mx Logwatch report |
2020-06-07 01:45:22 |
| 193.27.228.13 | attackbotsspam |
|
2020-06-07 02:00:50 |
| 58.27.99.112 | attackbots | Jun 6 15:43:59 legacy sshd[32689]: Failed password for root from 58.27.99.112 port 50200 ssh2 Jun 6 15:46:18 legacy sshd[32730]: Failed password for root from 58.27.99.112 port 48676 ssh2 ... |
2020-06-07 01:42:44 |
| 148.251.48.231 | attackspambots |
|
2020-06-07 02:05:29 |
| 218.43.121.42 | attack | scans 2 times in preceeding hours on the ports (in chronological order) 17621 17621 |
2020-06-07 01:54:11 |
| 213.215.83.3 | attack |
|
2020-06-07 01:44:12 |
| 95.255.14.141 | attackspambots | 2020-06-06T13:22:17.018266abusebot-8.cloudsearch.cf sshd[10860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.255.14.141 user=root 2020-06-06T13:22:19.350244abusebot-8.cloudsearch.cf sshd[10860]: Failed password for root from 95.255.14.141 port 38704 ssh2 2020-06-06T13:25:33.705151abusebot-8.cloudsearch.cf sshd[11103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.255.14.141 user=root 2020-06-06T13:25:35.746299abusebot-8.cloudsearch.cf sshd[11103]: Failed password for root from 95.255.14.141 port 42532 ssh2 2020-06-06T13:28:43.416411abusebot-8.cloudsearch.cf sshd[11279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.255.14.141 user=root 2020-06-06T13:28:44.875276abusebot-8.cloudsearch.cf sshd[11279]: Failed password for root from 95.255.14.141 port 46768 ssh2 2020-06-06T13:31:55.401537abusebot-8.cloudsearch.cf sshd[11447]: pam_unix(sshd:auth): authe ... |
2020-06-07 01:41:19 |
| 217.12.49.164 | attackbots | Ref: mx Logwatch report |
2020-06-07 01:43:38 |
| 45.95.168.133 | attackspambots | 45.95.168.133 - - [06/Jun/2020:21:43:52 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2" ... |
2020-06-07 02:10:39 |
| 194.26.29.137 | attack | scans 47 times in preceeding hours on the ports (in chronological order) 8103 8838 8425 8172 8570 8151 8465 8542 8565 8035 8596 8611 8661 8375 8513 8582 8741 8897 8609 8194 8018 8407 8295 8290 8155 8178 8071 8823 8536 8451 8542 8249 8870 8897 8171 8616 8713 8327 8565 8966 8024 8064 8226 8783 8869 8267 8995 resulting in total of 612 scans from 194.26.29.0/24 block. |
2020-06-07 02:19:24 |