City: unknown
Region: unknown
Country: Sweden
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.28.239.234
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1298
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.28.239.234. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022703 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 11:56:00 CST 2025
;; MSG SIZE rcvd: 107234.239.28.139.in-addr.arpa domain name pointer 139-28-239-234.cust.ansluten.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
234.239.28.139.in-addr.arpa name = 139-28-239-234.cust.ansluten.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 50.238.88.90 | attackspam | Hacking |
2020-05-07 01:12:18 |
| 178.33.67.12 | attackspam | May 6 14:20:32 buvik sshd[30701]: Invalid user default from 178.33.67.12 May 6 14:20:32 buvik sshd[30701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.67.12 May 6 14:20:33 buvik sshd[30701]: Failed password for invalid user default from 178.33.67.12 port 52194 ssh2 ... |
2020-05-07 01:20:39 |
| 159.65.146.52 | attack | Fail2Ban Ban Triggered |
2020-05-07 01:54:08 |
| 95.242.178.12 | attackspam | Automatic report - Port Scan Attack |
2020-05-07 01:24:43 |
| 200.94.242.233 | attackbots | scans 2 times in preceeding hours on the ports (in chronological order) 8080 8080 |
2020-05-07 01:43:20 |
| 91.215.88.171 | attackspam | 2020-05-06T17:07:43.135808homeassistant sshd[21004]: Invalid user zn from 91.215.88.171 port 53058 2020-05-06T17:07:43.146274homeassistant sshd[21004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.215.88.171 ... |
2020-05-07 01:23:14 |
| 103.207.11.10 | attackspam | 2020-05-06T15:21:25.919587struts4.enskede.local sshd\[10608\]: Invalid user dylan from 103.207.11.10 port 58200 2020-05-06T15:21:25.926759struts4.enskede.local sshd\[10608\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.207.11.10 2020-05-06T15:21:28.411739struts4.enskede.local sshd\[10608\]: Failed password for invalid user dylan from 103.207.11.10 port 58200 ssh2 2020-05-06T15:28:17.235940struts4.enskede.local sshd\[10621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.207.11.10 user=root 2020-05-06T15:28:20.563686struts4.enskede.local sshd\[10621\]: Failed password for root from 103.207.11.10 port 57196 ssh2 ... |
2020-05-07 01:11:49 |
| 49.49.212.242 | attackbotsspam | 1588766314 - 05/06/2020 13:58:34 Host: 49.49.212.242/49.49.212.242 Port: 445 TCP Blocked |
2020-05-07 01:31:22 |
| 110.153.189.234 | attackbotsspam | Wed May 6 15:01:16 2020 \[pid 26644\] \[anonymous\] FTP response: Client "110.153.189.234", "530 Permission denied." Wed May 6 15:01:18 2020 \[pid 26646\] \[nikav\] FTP response: Client "110.153.189.234", "530 Permission denied." Wed May 6 15:01:20 2020 \[pid 26648\] \[nikav\] FTP response: Client "110.153.189.234", "530 Permission denied." |
2020-05-07 01:21:08 |
| 132.145.146.78 | attack | 2020-05-06T12:17:45.187576dmca.cloudsearch.cf sshd[25378]: Invalid user lix from 132.145.146.78 port 50744 2020-05-06T12:17:45.194289dmca.cloudsearch.cf sshd[25378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.146.78 2020-05-06T12:17:45.187576dmca.cloudsearch.cf sshd[25378]: Invalid user lix from 132.145.146.78 port 50744 2020-05-06T12:17:47.096298dmca.cloudsearch.cf sshd[25378]: Failed password for invalid user lix from 132.145.146.78 port 50744 ssh2 2020-05-06T12:24:09.749624dmca.cloudsearch.cf sshd[25820]: Invalid user update from 132.145.146.78 port 41976 2020-05-06T12:24:09.755984dmca.cloudsearch.cf sshd[25820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.146.78 2020-05-06T12:24:09.749624dmca.cloudsearch.cf sshd[25820]: Invalid user update from 132.145.146.78 port 41976 2020-05-06T12:24:12.045197dmca.cloudsearch.cf sshd[25820]: Failed password for invalid user update from 132.14 ... |
2020-05-07 01:22:58 |
| 85.239.35.161 | attackspam | May 6 19:18:27 debian64 sshd[31763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.239.35.161 ... |
2020-05-07 01:28:05 |
| 180.246.150.220 | attack | Unauthorised access (May 6) SRC=180.246.150.220 LEN=52 TTL=117 ID=6858 DF TCP DPT=445 WINDOW=8192 SYN |
2020-05-07 01:40:43 |
| 170.239.27.174 | attackbotsspam | Unauthorized connection attempt detected from IP address 170.239.27.174 to port 9673 |
2020-05-07 01:16:36 |
| 181.55.188.187 | attackbotsspam | May 6 11:49:43 debian sshd[6319]: Unable to negotiate with 181.55.188.187 port 17672: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] May 6 12:54:43 debian sshd[9344]: Unable to negotiate with 181.55.188.187 port 17672: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2020-05-07 01:37:48 |
| 191.31.16.243 | attackbotsspam | ... |
2020-05-07 01:34:13 |