City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 147.242.215.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24414
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;147.242.215.70. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 23:41:46 CST 2025
;; MSG SIZE rcvd: 107Host 70.215.242.147.in-addr.arpa not found: 2(SERVFAIL)
server can't find 147.242.215.70.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 46.188.98.10 | attackspam | 1,67-05/32 [bc03/m24] concatform PostRequest-Spammer scoring: Durban02 |
2019-07-31 16:50:16 |
| 45.82.34.84 | attackspambots | Sent Mail to address hacked/leaked/bought from crystalproductions.cz between 2011 and 2018 |
2019-07-31 17:04:21 |
| 185.176.27.246 | attackbots | 31.07.2019 08:28:23 Connection to port 58402 blocked by firewall |
2019-07-31 16:34:55 |
| 5.188.87.19 | attack | firewall-block, port(s): 6636/tcp, 9506/tcp |
2019-07-31 17:12:32 |
| 107.84.177.247 | attackbotsspam | Honeypot hit. |
2019-07-31 16:40:46 |
| 112.85.42.229 | attackbotsspam | Jul 31 03:27:07 aat-srv002 sshd[5352]: Failed password for root from 112.85.42.229 port 48871 ssh2 Jul 31 03:42:43 aat-srv002 sshd[5679]: Failed password for root from 112.85.42.229 port 11667 ssh2 Jul 31 03:43:35 aat-srv002 sshd[5702]: Failed password for root from 112.85.42.229 port 10996 ssh2 ... |
2019-07-31 16:52:38 |
| 36.235.67.174 | attack | Jul 31 00:21:28 localhost kernel: [15791082.096152] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=36.235.67.174 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=45444 PROTO=TCP SPT=54614 DPT=37215 WINDOW=52557 RES=0x00 SYN URGP=0 Jul 31 00:21:28 localhost kernel: [15791082.096160] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=36.235.67.174 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=45444 PROTO=TCP SPT=54614 DPT=37215 SEQ=758669438 ACK=0 WINDOW=52557 RES=0x00 SYN URGP=0 Jul 31 04:10:40 localhost kernel: [15804834.234271] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=36.235.67.174 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=48411 PROTO=TCP SPT=54614 DPT=37215 WINDOW=52557 RES=0x00 SYN URGP=0 Jul 31 04:10:40 localhost kernel: [15804834.234291] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=36.235.67.174 DST=[mungedIP2] LEN=40 TOS=0x0 |
2019-07-31 16:35:57 |
| 52.167.43.30 | attack | Jul 31 11:09:59 icinga sshd[21249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.167.43.30 Jul 31 11:10:01 icinga sshd[21249]: Failed password for invalid user anton from 52.167.43.30 port 37228 ssh2 ... |
2019-07-31 17:21:09 |
| 59.100.246.170 | attack | Jul 31 09:29:44 localhost sshd\[31228\]: Invalid user demo3 from 59.100.246.170 port 45242 Jul 31 09:29:45 localhost sshd\[31228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.100.246.170 ... |
2019-07-31 16:35:40 |
| 94.23.254.125 | attackbotsspam | Jul 31 09:27:27 debian sshd\[14933\]: Invalid user sale from 94.23.254.125 port 43478 Jul 31 09:27:27 debian sshd\[14933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.254.125 ... |
2019-07-31 16:36:14 |
| 168.0.73.136 | attack | firewall-block, port(s): 445/tcp |
2019-07-31 16:43:02 |
| 197.224.136.80 | attackspambots | Jul x@x Jul 31 09:53:31 kmh-mb-001 sshd[31986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.224.136.80 Jul x@x Jul 31 09:53:33 kmh-mb-001 sshd[31986]: Received disconnect from 197.224.136.80 port 41652:11: Bye Bye [preauth] Jul 31 09:53:33 kmh-mb-001 sshd[31986]: Disconnected from 197.224.136.80 port 41652 [preauth] Jul 31 09:59:21 kmh-mb-001 sshd[32177]: Invalid user manager1 from 197.224.136.80 port 36894 Jul 31 09:59:21 kmh-mb-001 sshd[32177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.224.136.80 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=197.224.136.80 |
2019-07-31 17:05:41 |
| 37.114.132.232 | attack | Jul 31 11:10:30 srv-4 sshd\[22914\]: Invalid user admin from 37.114.132.232 Jul 31 11:10:30 srv-4 sshd\[22914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.114.132.232 Jul 31 11:10:32 srv-4 sshd\[22914\]: Failed password for invalid user admin from 37.114.132.232 port 50597 ssh2 ... |
2019-07-31 16:39:50 |
| 212.129.128.249 | attackbotsspam | Jul 31 08:10:26 sshgateway sshd\[19392\]: Invalid user derek from 212.129.128.249 Jul 31 08:10:26 sshgateway sshd\[19392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.128.249 Jul 31 08:10:27 sshgateway sshd\[19392\]: Failed password for invalid user derek from 212.129.128.249 port 36354 ssh2 |
2019-07-31 16:45:39 |
| 200.66.117.148 | attackbotsspam | Brute force SMTP login attempts. |
2019-07-31 16:33:10 |