City: Uppsala
Region: Uppsala
Country: Sweden
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 130.238.21.98
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12027
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;130.238.21.98. IN A
;; AUTHORITY SECTION:
. 592 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019092601 1800 900 604800 86400
;; Query time: 268 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 27 03:50:53 CST 2019
;; MSG SIZE rcvd: 117
98.21.238.130.in-addr.arpa domain name pointer pc-21-98.Teknik.UU.SE.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
98.21.238.130.in-addr.arpa name = pc-21-98.Teknik.UU.SE.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 113.181.36.82 | attack | 1581396656 - 02/11/2020 05:50:56 Host: 113.181.36.82/113.181.36.82 Port: 445 TCP Blocked |
2020-02-11 18:46:50 |
| 1.1.237.164 | attackspam | Honeypot attack, port: 445, PTR: node-lno.pool-1-1.dynamic.totinternet.net. |
2020-02-11 18:58:18 |
| 182.74.16.99 | attackspambots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-02-11 18:59:28 |
| 42.188.96.75 | attackspam | Lines containing failures of 42.188.96.75 Feb 11 10:52:32 keyhelp sshd[16457]: Invalid user qmg from 42.188.96.75 port 58756 Feb 11 10:52:32 keyhelp sshd[16457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.188.96.75 Feb 11 10:52:34 keyhelp sshd[16457]: Failed password for invalid user qmg from 42.188.96.75 port 58756 ssh2 Feb 11 10:52:35 keyhelp sshd[16457]: Received disconnect from 42.188.96.75 port 58756:11: Bye Bye [preauth] Feb 11 10:52:35 keyhelp sshd[16457]: Disconnected from invalid user qmg 42.188.96.75 port 58756 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=42.188.96.75 |
2020-02-11 19:00:52 |
| 218.186.167.25 | attack | Honeypot attack, port: 445, PTR: 25.167.186.218.starhub.net.sg. |
2020-02-11 18:41:17 |
| 78.128.113.166 | attack | 20 attempts against mh_ha-misbehave-ban on cold |
2020-02-11 19:20:28 |
| 213.32.122.80 | attackspambots | Port 443 (HTTPS) access denied |
2020-02-11 19:15:33 |
| 118.37.188.64 | attack | Honeypot attack, port: 81, PTR: PTR record not found |
2020-02-11 19:05:16 |
| 218.92.0.172 | attackbots | Feb 11 12:06:58 srv-ubuntu-dev3 sshd[48612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.172 user=root Feb 11 12:07:00 srv-ubuntu-dev3 sshd[48612]: Failed password for root from 218.92.0.172 port 23641 ssh2 Feb 11 12:07:13 srv-ubuntu-dev3 sshd[48612]: Failed password for root from 218.92.0.172 port 23641 ssh2 Feb 11 12:06:58 srv-ubuntu-dev3 sshd[48612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.172 user=root Feb 11 12:07:00 srv-ubuntu-dev3 sshd[48612]: Failed password for root from 218.92.0.172 port 23641 ssh2 Feb 11 12:07:13 srv-ubuntu-dev3 sshd[48612]: Failed password for root from 218.92.0.172 port 23641 ssh2 Feb 11 12:06:58 srv-ubuntu-dev3 sshd[48612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.172 user=root Feb 11 12:07:00 srv-ubuntu-dev3 sshd[48612]: Failed password for root from 218.92.0.172 port 23641 ssh2 Feb 11 12 ... |
2020-02-11 19:12:22 |
| 122.100.185.23 | attack | Honeypot attack, port: 5555, PTR: nz185l23.bb122100.ctm.net. |
2020-02-11 19:09:18 |
| 88.105.17.33 | attackbotsspam | Honeypot attack, port: 81, PTR: 88-105-17-33.dynamic.dsl.as9105.com. |
2020-02-11 18:48:42 |
| 182.125.172.31 | attackbotsspam | SSH Brute-Forcing (server2) |
2020-02-11 18:43:48 |
| 216.243.31.2 | attack | Port 80 (HTTP) access denied |
2020-02-11 19:15:12 |
| 66.249.66.65 | attack | Unauthorized connection attempt detected from IP address 66.249.66.65 to port 80 |
2020-02-11 18:46:11 |
| 184.106.81.166 | attackspambots | 184.106.81.166 was recorded 6 times by 6 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 6, 18, 461 |
2020-02-11 19:05:49 |