City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.2.211.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11620
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.2.211.64. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012100 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 21 16:39:47 CST 2025
;; MSG SIZE rcvd: 105Host 64.211.2.149.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 64.211.2.149.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 102.252.80.171 | attackspam | 2019-07-05 09:56:31 unexpected disconnection while reading SMTP command from (8ta-252-80-171.telkomadsl.co.za) [102.252.80.171]:16992 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-07-05 09:56:57 unexpected disconnection while reading SMTP command from (8ta-252-80-171.telkomadsl.co.za) [102.252.80.171]:50330 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-07-05 09:57:14 unexpected disconnection while reading SMTP command from (8ta-252-80-171.telkomadsl.co.za) [102.252.80.171]:40839 I=[10.100.18.23]:25 (error: Connection reset by peer) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=102.252.80.171 |
2019-07-05 16:27:02 |
| 134.209.61.78 | attackspambots | Jul 5 10:03:58 Proxmox sshd\[31796\]: Invalid user jiu from 134.209.61.78 port 51878 Jul 5 10:03:58 Proxmox sshd\[31796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.61.78 Jul 5 10:04:01 Proxmox sshd\[31796\]: Failed password for invalid user jiu from 134.209.61.78 port 51878 ssh2 Jul 5 10:07:42 Proxmox sshd\[2684\]: Invalid user presta from 134.209.61.78 port 39196 Jul 5 10:07:42 Proxmox sshd\[2684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.61.78 Jul 5 10:07:45 Proxmox sshd\[2684\]: Failed password for invalid user presta from 134.209.61.78 port 39196 ssh2 |
2019-07-05 16:21:06 |
| 119.146.150.134 | attack | Jul 5 08:05:05 *** sshd[7800]: Invalid user mongouser from 119.146.150.134 |
2019-07-05 16:32:45 |
| 104.210.222.38 | attack | Invalid user hadoop from 104.210.222.38 port 44048 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.210.222.38 Failed password for invalid user hadoop from 104.210.222.38 port 44048 ssh2 Invalid user oka from 104.210.222.38 port 42100 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.210.222.38 |
2019-07-05 16:44:44 |
| 77.40.32.252 | attackspam | SMTP |
2019-07-05 16:07:33 |
| 86.123.53.17 | attackbotsspam | NAME : RO-RCS-RDS CIDR : 86.123.52.0/22 DDoS attack Romania - block certain countries :) IP: 86.123.53.17 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-07-05 16:42:54 |
| 212.156.132.182 | attackspam | Invalid user typo3 from 212.156.132.182 port 52435 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.156.132.182 Failed password for invalid user typo3 from 212.156.132.182 port 52435 ssh2 Invalid user sshvpn from 212.156.132.182 port 38265 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.156.132.182 |
2019-07-05 16:47:59 |
| 31.184.238.47 | attack | WordPress login Brute force / Web App Attack on client site. |
2019-07-05 16:02:29 |
| 213.98.87.245 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-05 07:36:06,507 INFO [amun_request_handler] PortScan Detected on Port: 445 (213.98.87.245) |
2019-07-05 16:24:59 |
| 198.108.67.58 | attackspambots | MultiHost/MultiPort Probe, Scan, Hack - |
2019-07-05 16:03:18 |
| 185.93.3.114 | attackbots | (From raphaeDichcronnork@gmail.com) Good day! chiroresults.com We suggesting Sending your message through the feedback form which can be found on the sites in the Communication partition. Contact form are filled in by our application and the captcha is solved. The profit of this method is that messages sent through feedback forms are whitelisted. This method raise the chances that your message will be read. Our database contains more than 25 million sites around the world to which we can send your message. The cost of one million messages 49 USD FREE TEST mailing of 50,000 messages to any country of your choice. This message is automatically generated to use our contacts for communication. Contact us. Telegram - @FeedbackFormEU Skype FeedbackForm2019 WhatsApp - +44 7598 509161 Email - FeedbackForm@make-success.com |
2019-07-05 16:09:38 |
| 113.70.161.149 | attackspam | Unauthorised access (Jul 5) SRC=113.70.161.149 LEN=40 TTL=51 ID=32081 TCP DPT=23 WINDOW=13493 SYN |
2019-07-05 15:59:03 |
| 51.75.247.13 | attackspambots | SSH Brute-Force reported by Fail2Ban |
2019-07-05 16:02:53 |
| 64.188.59.239 | attack | NAME : ISPRIME-ARIN-4 CIDR : 64.188.48.0/20 DDoS attack USA - New Jersey - block certain countries :) IP: 64.188.59.239 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-07-05 16:05:25 |
| 185.173.35.41 | attackspambots | MultiHost/MultiPort Probe, Scan, Hack - |
2019-07-05 16:34:14 |