City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.227.42.218
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55303
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;105.227.42.218. IN A
;; AUTHORITY SECTION:
. 172 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020030600 1800 900 604800 86400
;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 06 14:08:34 CST 2020
;; MSG SIZE rcvd: 118218.42.227.105.in-addr.arpa domain name pointer 42-227-105-218.north.dsl.telkomsa.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
*** Can't find 218.42.227.105.in-addr.arpa.: No answer
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 219.140.119.44 | attackspambots | 219.140.119.44 - - \[31/Jan/2020:10:43:47 +0200\] "GET http://www.rfa.org/english/ HTTP/1.1" 404 206 "-" "Mozilla/5.0 \(Windows NT 10.0\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/45.0.2454.101 Safari/537.36" |
2020-01-31 22:39:59 |
| 101.255.52.171 | attackbots | Unauthorized connection attempt detected from IP address 101.255.52.171 to port 2220 [J] |
2020-01-31 22:50:24 |
| 101.204.248.138 | attackbotsspam | Unauthorized connection attempt detected from IP address 101.204.248.138 to port 2220 [J] |
2020-01-31 22:27:35 |
| 171.238.8.58 | attackbots | Jan 31 00:39:19 tempelhof postfix/smtpd[10263]: warning: hostname dynamic-ip-adsl.viettel.vn does not resolve to address 171.238.8.58: Name or service not known Jan 31 00:39:19 tempelhof postfix/smtpd[10263]: connect from unknown[171.238.8.58] Jan 31 00:39:21 tempelhof postfix/smtpd[10263]: NOQUEUE: reject: RCPT from unknown[171.238.8.58]: 554 5.7.1 Service unavailable; Client host [171.238.8.58] blocked using ix.dnsbl.xxxxxx.net; Your e-mail service was detected by spam.over.port25.me (NiX Spam) as spamming at Thu, 30 Jan 2020 17:53:50 +0100. Your admin should vishostname hxxp://www.dnsbl.xxxxxx.net/lookup.php?value=171.238.8.58; from=x@x helo= |
2020-01-31 22:52:17 |
| 209.17.96.202 | attack | IP: 209.17.96.202
Ports affected
http protocol over TLS/SSL (443)
World Wide Web HTTP (80)
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
AS174 Cogent Communications
United States (US)
CIDR 209.17.96.0/20
Log Date: 31/01/2020 9:52:56 AM UTC |
2020-01-31 22:51:53 |
| 92.63.196.10 | attackspambots | firewall-block, port(s): 34671/tcp |
2020-01-31 22:36:07 |
| 209.17.97.98 | attack | IP: 209.17.97.98
Ports affected
http protocol over TLS/SSL (443)
World Wide Web HTTP (80)
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
AS174 Cogent Communications
United States (US)
CIDR 209.17.96.0/20
Log Date: 31/01/2020 1:03:37 PM UTC |
2020-01-31 22:48:04 |
| 124.88.113.226 | attack | Unauthorized connection attempt detected from IP address 124.88.113.226 to port 8080 [J] |
2020-01-31 22:47:12 |
| 122.60.184.195 | attack | TCP Port Scanning |
2020-01-31 22:28:38 |
| 221.13.12.118 | attackbots | Unauthorized connection attempt detected from IP address 221.13.12.118 to port 443 [J] |
2020-01-31 22:42:35 |
| 117.148.157.48 | attack | Jan 31 09:43:32 debian-2gb-nbg1-2 kernel: \[2719472.260439\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=117.148.157.48 DST=195.201.40.59 LEN=40 TOS=0x04 PREC=0x00 TTL=239 ID=52731 PROTO=TCP SPT=51107 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-01-31 22:50:05 |
| 159.65.8.116 | attackbots | Unauthorized connection attempt detected from IP address 159.65.8.116 to port 2220 [J] |
2020-01-31 22:36:37 |
| 111.40.160.218 | attackbots | Invalid user moni from 111.40.160.218 port 61444 |
2020-01-31 22:52:42 |
| 34.74.244.200 | attack | REQUESTED PAGE: /xmlrpc.php?rsd |
2020-01-31 22:56:07 |
| 77.40.90.199 | attackspambots | IP: 77.40.90.199
Ports affected
Simple Mail Transfer (25)
Message Submission (587)
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
AS12389 Rostelecom
Russia (RU)
CIDR 77.40.0.0/17
Log Date: 31/01/2020 8:35:06 AM UTC |
2020-01-31 22:59:03 |