City: Belo Horizonte
Region: Minas Gerais
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 152.254.42.229
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63752
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;152.254.42.229. IN A
;; AUTHORITY SECTION:
. 108 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022050501 1800 900 604800 86400
;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 06 02:35:22 CST 2022
;; MSG SIZE rcvd: 107229.42.254.152.in-addr.arpa domain name pointer 152-254-42-229.user.vivozap.com.br.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
229.42.254.152.in-addr.arpa name = 152-254-42-229.user.vivozap.com.br.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 201.39.70.186 | attackbots | SSH brute-force attempt |
2020-07-22 02:27:29 |
| 52.231.162.132 | attackbots | Unauthorized connection attempt detected from IP address 52.231.162.132 to port 1433 [T] |
2020-07-22 02:43:05 |
| 185.216.140.6 | attackbotsspam | Port scan: Attack repeated for 24 hours 185.216.140.6 - - [06/Jul/2020:00:29:35 +0300] "GET / HTTP/1.1" 403 440 "-" |
2020-07-22 02:30:06 |
| 218.92.0.219 | attack | Jul 21 20:26:21 abendstille sshd\[24827\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.219 user=root Jul 21 20:26:23 abendstille sshd\[24827\]: Failed password for root from 218.92.0.219 port 60487 ssh2 Jul 21 20:26:30 abendstille sshd\[25099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.219 user=root Jul 21 20:26:32 abendstille sshd\[25099\]: Failed password for root from 218.92.0.219 port 62173 ssh2 Jul 21 20:26:33 abendstille sshd\[25099\]: Failed password for root from 218.92.0.219 port 62173 ssh2 ... |
2020-07-22 02:26:50 |
| 52.163.85.241 | attackbotsspam | Unauthorized connection attempt detected from IP address 52.163.85.241 to port 1433 [T] |
2020-07-22 02:43:54 |
| 80.82.65.74 | attack | Jul 21 19:44:37 debian-2gb-nbg1-2 kernel: \[17612011.307712\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.65.74 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=22414 PROTO=TCP SPT=44598 DPT=60000 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-22 02:15:19 |
| 176.105.16.206 | attackbots | Unauthorized connection attempt detected from IP address 176.105.16.206 to port 4000 [T] |
2020-07-22 02:50:37 |
| 106.13.186.119 | attackspam | SSH Brute-Force. Ports scanning. |
2020-07-22 02:38:26 |
| 86.127.6.149 | attack | Unauthorized connection attempt detected from IP address 86.127.6.149 to port 23 [T] |
2020-07-22 02:15:04 |
| 69.174.184.91 | attackbotsspam | Unauthorized connection attempt detected from IP address 69.174.184.91 to port 22 [T] |
2020-07-22 02:42:09 |
| 120.31.138.70 | attackbotsspam | Jul 21 19:30:21 rotator sshd\[5007\]: Address 120.31.138.70 maps to ns1.eflydns.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Jul 21 19:30:21 rotator sshd\[5007\]: Invalid user kant from 120.31.138.70Jul 21 19:30:22 rotator sshd\[5007\]: Failed password for invalid user kant from 120.31.138.70 port 36714 ssh2Jul 21 19:35:25 rotator sshd\[5794\]: Address 120.31.138.70 maps to ns1.eflydns.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Jul 21 19:35:25 rotator sshd\[5794\]: Invalid user tomcat from 120.31.138.70Jul 21 19:35:26 rotator sshd\[5794\]: Failed password for invalid user tomcat from 120.31.138.70 port 40118 ssh2 ... |
2020-07-22 02:37:17 |
| 168.61.66.7 | attackspambots | Unauthorized connection attempt detected from IP address 168.61.66.7 to port 1433 |
2020-07-22 02:33:10 |
| 40.122.169.225 | attackbotsspam | Unauthorized connection attempt detected from IP address 40.122.169.225 to port 1433 |
2020-07-22 02:19:30 |
| 20.188.46.82 | attackbotsspam | Unauthorized connection attempt detected from IP address 20.188.46.82 to port 1433 |
2020-07-22 02:46:45 |
| 223.71.167.165 | attackspambots | 223.71.167.165 was recorded 19 times by 5 hosts attempting to connect to the following ports: 4064,8888,1583,10443,51106,2375,55553,4443,8443,8334,23424,6699,2501,8007,9595,113,8889,8123,9191. Incident counter (4h, 24h, all-time): 19, 114, 24305 |
2020-07-22 02:24:36 |