City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 136.243.172.216
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25671
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;136.243.172.216. IN A
;; AUTHORITY SECTION:
. 78 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:47:22 CST 2022
;; MSG SIZE rcvd: 108216.172.243.136.in-addr.arpa domain name pointer edupage21.edupage.org.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
216.172.243.136.in-addr.arpa name = edupage21.edupage.org.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 210.245.26.142 | attack | Dec 17 07:07:14 mc1 kernel: \[721656.663334\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=210.245.26.142 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=60197 PROTO=TCP SPT=51862 DPT=9231 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 17 07:07:15 mc1 kernel: \[721657.361593\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=210.245.26.142 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=37689 PROTO=TCP SPT=51862 DPT=7109 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 17 07:11:30 mc1 kernel: \[721912.331567\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=210.245.26.142 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=39571 PROTO=TCP SPT=51862 DPT=7378 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-12-17 14:28:24 |
| 14.190.85.1 | attackspambots | Unauthorized connection attempt detected from IP address 14.190.85.1 to port 445 |
2019-12-17 14:04:13 |
| 167.172.232.99 | attackbotsspam | Invalid user shimaz from 167.172.232.99 port 58180 |
2019-12-17 14:24:55 |
| 14.98.4.82 | attackbots | $f2bV_matches |
2019-12-17 13:57:59 |
| 170.239.101.4 | attackbots | Dec 17 07:24:28 tux-35-217 sshd\[17086\]: Invalid user tsuruta from 170.239.101.4 port 12809 Dec 17 07:24:28 tux-35-217 sshd\[17086\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.239.101.4 Dec 17 07:24:30 tux-35-217 sshd\[17086\]: Failed password for invalid user tsuruta from 170.239.101.4 port 12809 ssh2 Dec 17 07:31:02 tux-35-217 sshd\[17158\]: Invalid user pareshia from 170.239.101.4 port 9310 Dec 17 07:31:02 tux-35-217 sshd\[17158\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.239.101.4 ... |
2019-12-17 14:42:35 |
| 222.186.180.9 | attackspambots | SSH-bruteforce attempts |
2019-12-17 14:16:41 |
| 222.186.175.216 | attackspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216 user=root Failed password for root from 222.186.175.216 port 16482 ssh2 Failed password for root from 222.186.175.216 port 16482 ssh2 Failed password for root from 222.186.175.216 port 16482 ssh2 Failed password for root from 222.186.175.216 port 16482 ssh2 |
2019-12-17 14:41:29 |
| 104.27.139.200 | attackspam | www.standjackets.com fake store |
2019-12-17 14:21:36 |
| 77.239.254.4 | attackspam | Dec 17 06:48:31 meumeu sshd[17834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.239.254.4 Dec 17 06:48:33 meumeu sshd[17834]: Failed password for invalid user zed from 77.239.254.4 port 35304 ssh2 Dec 17 06:55:17 meumeu sshd[18807]: Failed password for nagios from 77.239.254.4 port 43234 ssh2 ... |
2019-12-17 14:14:15 |
| 178.215.234.242 | attackbots | [portscan] Port scan |
2019-12-17 14:13:14 |
| 92.118.37.99 | attackbots | Dec 17 09:33:04 debian-2gb-vpn-nbg1-1 kernel: [942752.380181] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.99 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=23311 PROTO=TCP SPT=59355 DPT=2750 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-17 14:51:23 |
| 106.12.217.180 | attackbotsspam | Invalid user vasintha from 106.12.217.180 port 59426 |
2019-12-17 14:03:41 |
| 180.101.205.49 | attack | Dec 17 07:24:03 ns3042688 sshd\[16635\]: Invalid user darwin from 180.101.205.49 Dec 17 07:24:03 ns3042688 sshd\[16635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.101.205.49 Dec 17 07:24:05 ns3042688 sshd\[16635\]: Failed password for invalid user darwin from 180.101.205.49 port 58666 ssh2 Dec 17 07:30:58 ns3042688 sshd\[19983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.101.205.49 user=bin Dec 17 07:31:00 ns3042688 sshd\[19983\]: Failed password for bin from 180.101.205.49 port 42096 ssh2 ... |
2019-12-17 14:42:19 |
| 51.75.23.173 | attackspam | Dec 17 00:45:54 linuxvps sshd\[20606\]: Invalid user admin from 51.75.23.173 Dec 17 00:45:54 linuxvps sshd\[20606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.23.173 Dec 17 00:45:56 linuxvps sshd\[20606\]: Failed password for invalid user admin from 51.75.23.173 port 49146 ssh2 Dec 17 00:52:17 linuxvps sshd\[24699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.23.173 user=root Dec 17 00:52:20 linuxvps sshd\[24699\]: Failed password for root from 51.75.23.173 port 53161 ssh2 |
2019-12-17 14:03:15 |
| 67.85.105.1 | attack | Dec 17 06:49:53 sauna sshd[214530]: Failed password for root from 67.85.105.1 port 49452 ssh2 Dec 17 06:55:15 sauna sshd[214662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.85.105.1 ... |
2019-12-17 14:27:49 |