City: Ann Arbor
Region: Michigan
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.213.18.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36919
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;141.213.18.2. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022802 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 08:37:12 CST 2025
;; MSG SIZE rcvd: 105Host 2.18.213.141.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 2.18.213.141.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 121.63.217.202 | attackspambots | Scanning random ports - tries to find possible vulnerable services |
2019-11-03 08:08:14 |
| 122.54.189.25 | attack | Scanning random ports - tries to find possible vulnerable services |
2019-11-03 08:07:47 |
| 51.38.51.200 | attackspambots | Nov 3 04:58:57 cvbnet sshd[24643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.51.200 Nov 3 04:58:59 cvbnet sshd[24643]: Failed password for invalid user ubnt from 51.38.51.200 port 57910 ssh2 ... |
2019-11-03 12:19:14 |
| 115.113.203.150 | attackspambots | Scanning random ports - tries to find possible vulnerable services |
2019-11-03 08:20:28 |
| 117.6.160.24 | attack | Scanning random ports - tries to find possible vulnerable services |
2019-11-03 08:15:19 |
| 222.186.52.78 | attackspambots | Nov 2 19:49:54 ny01 sshd[19475]: Failed password for root from 222.186.52.78 port 43260 ssh2 Nov 2 19:50:34 ny01 sshd[19558]: Failed password for root from 222.186.52.78 port 29784 ssh2 |
2019-11-03 08:07:07 |
| 91.121.211.59 | attack | Nov 2 17:55:45 web1 sshd\[15755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.211.59 user=root Nov 2 17:55:47 web1 sshd\[15755\]: Failed password for root from 91.121.211.59 port 40866 ssh2 Nov 2 17:59:04 web1 sshd\[16050\]: Invalid user metis from 91.121.211.59 Nov 2 17:59:04 web1 sshd\[16050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.211.59 Nov 2 17:59:06 web1 sshd\[16050\]: Failed password for invalid user metis from 91.121.211.59 port 51046 ssh2 |
2019-11-03 12:13:04 |
| 117.223.43.135 | attackbotsspam | Scanning random ports - tries to find possible vulnerable services |
2019-11-03 08:12:48 |
| 183.129.50.215 | attackbotsspam | Nov 3 04:51:45 mxgate1 postfix/postscreen[32036]: CONNECT from [183.129.50.215]:63775 to [176.31.12.44]:25 Nov 3 04:51:45 mxgate1 postfix/dnsblog[32041]: addr 183.129.50.215 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 3 04:51:45 mxgate1 postfix/dnsblog[32040]: addr 183.129.50.215 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 3 04:51:45 mxgate1 postfix/dnsblog[32040]: addr 183.129.50.215 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 3 04:51:45 mxgate1 postfix/dnsblog[32037]: addr 183.129.50.215 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Nov 3 04:51:46 mxgate1 postfix/dnsblog[32039]: addr 183.129.50.215 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 3 04:51:51 mxgate1 postfix/postscreen[32036]: DNSBL rank 5 for [183.129.50.215]:63775 Nov x@x Nov 3 04:51:53 mxgate1 postfix/postscreen[32036]: DISCONNECT [183.129.50.215]:63775 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=183.129.50.215 |
2019-11-03 12:15:33 |
| 37.115.216.65 | attackspam | WEB SPAM: Приветствую вас Доктор посоветовала Препараты вич терапия заразить |
2019-11-03 12:13:46 |
| 134.73.51.237 | attack | Lines containing failures of 134.73.51.237 Nov 3 04:51:29 shared04 postfix/smtpd[26430]: connect from wrest.imphostnamesol.com[134.73.51.237] Nov 3 04:51:29 shared04 policyd-spf[27050]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=134.73.51.237; helo=wrest.ariasaze.co; envelope-from=x@x Nov x@x Nov 3 04:51:29 shared04 postfix/smtpd[26430]: disconnect from wrest.imphostnamesol.com[134.73.51.237] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=134.73.51.237 |
2019-11-03 12:18:41 |
| 118.68.122.239 | attackbots | Scanning random ports - tries to find possible vulnerable services |
2019-11-03 08:11:14 |
| 222.186.180.223 | attackbots | Nov 3 01:13:42 firewall sshd[22167]: Failed password for root from 222.186.180.223 port 20512 ssh2 Nov 3 01:13:55 firewall sshd[22167]: error: maximum authentication attempts exceeded for root from 222.186.180.223 port 20512 ssh2 [preauth] Nov 3 01:13:55 firewall sshd[22167]: Disconnecting: Too many authentication failures [preauth] ... |
2019-11-03 12:16:38 |
| 113.160.96.93 | attack | Scanning random ports - tries to find possible vulnerable services |
2019-11-03 08:27:15 |
| 117.3.81.239 | attack | Scanning random ports - tries to find possible vulnerable services |
2019-11-03 08:16:27 |