City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: DoD Network Information Center
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.214.31.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33228
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;131.214.31.244. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019060701 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 08 03:01:21 CST 2019
;; MSG SIZE rcvd: 118
244.31.214.131.in-addr.arpa has no PTR record
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
*** Can't find 244.31.214.131.in-addr.arpa.: No answer
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 84.81.118.166 | attack | Honeypot attack, port: 23, PTR: ip545176a6.direct-adsl.nl. |
2019-12-27 15:33:33 |
| 47.103.3.18 | attack | 8545/tcp [2019-12-27]1pkt |
2019-12-27 16:00:54 |
| 116.206.8.16 | attackbotsspam | 445/tcp [2019-12-27]1pkt |
2019-12-27 16:10:25 |
| 112.134.160.34 | attackbotsspam | 445/tcp [2019-12-27]1pkt |
2019-12-27 15:46:40 |
| 49.228.76.14 | attackspambots | 27015/udp [2019-12-27]1pkt |
2019-12-27 15:51:00 |
| 134.147.248.2 | attackspam | Dec 27 08:38:22 sso sshd[29455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.147.248.2 Dec 27 08:38:24 sso sshd[29455]: Failed password for invalid user cluster from 134.147.248.2 port 58124 ssh2 ... |
2019-12-27 15:44:40 |
| 121.229.49.33 | attackbots | CN China - Failures: 5 smtpauth |
2019-12-27 16:09:48 |
| 121.40.75.184 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2019-12-27 15:38:26 |
| 138.68.92.107 | attack | Dec 27 06:52:44 cw sshd[7730]: User r.r from 138.68.92.107 not allowed because listed in DenyUsers Dec 27 06:52:44 cw sshd[7731]: Received disconnect from 138.68.92.107: 11: Bye Bye Dec 27 06:52:44 cw sshd[7732]: User r.r from 138.68.92.107 not allowed because listed in DenyUsers Dec 27 06:52:44 cw sshd[7733]: Received disconnect from 138.68.92.107: 11: Bye Bye Dec 27 06:52:44 cw sshd[7734]: Invalid user admin from 138.68.92.107 Dec 27 06:52:44 cw sshd[7735]: Received disconnect from 138.68.92.107: 11: Bye Bye Dec 27 06:52:45 cw sshd[7736]: Invalid user telnet from 138.68.92.107 Dec 27 06:52:45 cw sshd[7737]: Received disconnect from 138.68.92.107: 11: Bye Bye Dec 27 06:52:45 cw sshd[7738]: Invalid user ubnt from 138.68.92.107 Dec 27 06:52:46 cw sshd[7739]: Received disconnect from 138.68.92.107: 11: Bye Bye Dec 27 06:52:46 cw sshd[7740]: Invalid user user from 138.68.92.107 Dec 27 06:52:46 cw sshd[7741]: Received disconnect from 138.68.92.107: 11: Bye Bye Dec 27 06:52:........ ------------------------------- |
2019-12-27 15:42:57 |
| 111.161.74.100 | attackspambots | Dec 27 07:29:17 vpn01 sshd[10232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.74.100 Dec 27 07:29:19 vpn01 sshd[10232]: Failed password for invalid user cwc from 111.161.74.100 port 49170 ssh2 ... |
2019-12-27 15:58:50 |
| 103.255.7.8 | attack | 1577428149 - 12/27/2019 07:29:09 Host: 103.255.7.8/103.255.7.8 Port: 445 TCP Blocked |
2019-12-27 16:10:56 |
| 116.196.104.100 | attack | Dec 27 08:28:39 silence02 sshd[13838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 Dec 27 08:28:41 silence02 sshd[13838]: Failed password for invalid user arlet from 116.196.104.100 port 52722 ssh2 Dec 27 08:33:48 silence02 sshd[13973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 |
2019-12-27 15:38:48 |
| 121.229.1.13 | attackbots | Time: Fri Dec 27 04:45:29 2019 -0300 IP: 121.229.1.13 (CN/China/13.1.229.121.broad.nj.js.dynamic.163data.com.cn) Failures: 5 (smtpauth) Interval: 3600 seconds Blocked: Permanent Block |
2019-12-27 16:03:53 |
| 106.54.25.82 | attackbotsspam | Dec 27 08:00:40 [host] sshd[6070]: Invalid user deraaf from 106.54.25.82 Dec 27 08:00:40 [host] sshd[6070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.25.82 Dec 27 08:00:42 [host] sshd[6070]: Failed password for invalid user deraaf from 106.54.25.82 port 34102 ssh2 |
2019-12-27 15:43:20 |
| 125.34.90.156 | attack | CN China - Failures: 20 ftpd |
2019-12-27 15:53:11 |