City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.18.56.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33905
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.18.56.214. IN A
;; AUTHORITY SECTION:
. 300 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022100601 1800 900 604800 86400
;; Query time: 77 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 07 03:27:56 CST 2022
;; MSG SIZE rcvd: 106Host 214.56.18.149.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 214.56.18.149.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 197.253.19.74 | attackspambots | Invalid user oracle from 197.253.19.74 port 1863 |
2020-05-14 15:29:56 |
| 177.66.216.236 | attack | DATE:2020-05-14 05:50:44, IP:177.66.216.236, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-05-14 15:28:41 |
| 117.210.210.208 | attackspam | Email SMTP authentication failure |
2020-05-14 15:36:52 |
| 36.27.30.208 | attackspambots | 2020-05-14T05:50:23.606709 X postfix/smtpd[398059]: NOQUEUE: reject: RCPT from unknown[36.27.30.208]: 554 5.7.1 Service unavailable; Client host [36.27.30.208] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/36.27.30.208 / https://www.spamhaus.org/sbl/query/SBL467436; from= |
2020-05-14 15:45:07 |
| 178.62.79.227 | attackbotsspam | Invalid user pierre from 178.62.79.227 port 40706 |
2020-05-14 15:17:43 |
| 150.109.57.43 | attackbots | Invalid user jl from 150.109.57.43 port 53282 |
2020-05-14 16:18:04 |
| 193.70.38.56 | attack | May 14 04:18:18 Host-KEWR-E sshd[22131]: Invalid user deploy from 193.70.38.56 port 50270 ... |
2020-05-14 16:20:13 |
| 14.175.156.193 | attack | 20/5/13@23:50:04: FAIL: Alarm-Network address from=14.175.156.193 ... |
2020-05-14 16:06:22 |
| 218.2.220.66 | attack | $f2bV_matches |
2020-05-14 16:07:48 |
| 87.251.74.191 | attackbotsspam | May 14 09:56:35 debian-2gb-nbg1-2 kernel: \[11701849.720305\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=87.251.74.191 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=11587 PROTO=TCP SPT=57566 DPT=29295 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-14 16:05:48 |
| 137.63.195.20 | attack | Invalid user gala from 137.63.195.20 port 54116 |
2020-05-14 15:50:52 |
| 5.135.164.201 | attack | (sshd) Failed SSH login from 5.135.164.201 (FR/France/ns3317498.ip-5-135-164.eu): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 14 05:50:33 ubnt-55d23 sshd[31649]: Invalid user csd from 5.135.164.201 port 45106 May 14 05:50:34 ubnt-55d23 sshd[31649]: Failed password for invalid user csd from 5.135.164.201 port 45106 ssh2 |
2020-05-14 15:37:41 |
| 191.34.162.186 | attackspam | SSH brute-force: detected 25 distinct usernames within a 24-hour window. |
2020-05-14 16:17:20 |
| 45.124.86.65 | attack | May 14 08:01:49 sip sshd[252365]: Invalid user test from 45.124.86.65 port 40402 May 14 08:01:51 sip sshd[252365]: Failed password for invalid user test from 45.124.86.65 port 40402 ssh2 May 14 08:06:45 sip sshd[252392]: Invalid user king from 45.124.86.65 port 40522 ... |
2020-05-14 15:20:00 |
| 37.49.230.128 | attack | May 14 05:50:57 debian-2gb-nbg1-2 kernel: \[11687112.621540\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=37.49.230.128 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=53413 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-05-14 15:18:38 |