City: Ludhiana
Region: Punjab
Country: India
Internet Service Provider: Reliance
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.39.55.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56958
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;157.39.55.99. IN A
;; AUTHORITY SECTION:
. 591 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020013101 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 01 06:01:45 CST 2020
;; MSG SIZE rcvd: 116Host 99.55.39.157.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 99.55.39.157.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 84.245.9.208 | attack | " " |
2019-10-08 00:20:25 |
| 221.152.100.215 | attackbotsspam | Port 1433 Scan |
2019-10-08 00:40:38 |
| 191.83.189.59 | attackbotsspam | Unauthorised access (Oct 7) SRC=191.83.189.59 LEN=40 TOS=0x10 PREC=0x40 TTL=53 ID=62743 TCP DPT=8080 WINDOW=3803 SYN |
2019-10-08 00:52:18 |
| 49.88.112.68 | attackspambots | Oct 7 19:41:03 sauna sshd[232562]: Failed password for root from 49.88.112.68 port 27512 ssh2 ... |
2019-10-08 00:46:14 |
| 192.227.252.23 | attack | 2019-10-07T13:48:20.472282abusebot-5.cloudsearch.cf sshd\[22276\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.23 user=root |
2019-10-08 00:27:53 |
| 52.164.218.220 | attack | php injection |
2019-10-08 00:18:57 |
| 49.88.112.65 | attack | Oct 7 05:55:43 hanapaa sshd\[14871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.65 user=root Oct 7 05:55:45 hanapaa sshd\[14871\]: Failed password for root from 49.88.112.65 port 25173 ssh2 Oct 7 05:56:19 hanapaa sshd\[14920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.65 user=root Oct 7 05:56:21 hanapaa sshd\[14920\]: Failed password for root from 49.88.112.65 port 45582 ssh2 Oct 7 05:57:05 hanapaa sshd\[14977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.65 user=root |
2019-10-08 00:38:20 |
| 139.59.190.69 | attackspambots | 2019-10-07T14:26:43.174796abusebot-8.cloudsearch.cf sshd\[15076\]: Invalid user Welcome@2016 from 139.59.190.69 port 39165 |
2019-10-08 00:46:40 |
| 94.125.61.236 | attackspam | Oct 7 16:24:28 h2177944 kernel: \[3334371.670780\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.236 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=74 ID=60616 DF PROTO=TCP SPT=60391 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 17:06:00 h2177944 kernel: \[3336863.046789\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.236 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=70 ID=57182 DF PROTO=TCP SPT=57317 DPT=53 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 17:07:19 h2177944 kernel: \[3336941.937321\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.236 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=78 ID=34204 DF PROTO=TCP SPT=62092 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 17:11:54 h2177944 kernel: \[3337216.376104\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.236 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=64 ID=34270 DF PROTO=TCP SPT=60758 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 17:18:43 h2177944 kernel: \[3337625.500986\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.236 DST=85.214. |
2019-10-08 00:34:53 |
| 49.88.112.85 | attackbotsspam | Oct 7 16:27:43 [HOSTNAME] sshd[2503]: User **removed** from 49.88.112.85 not allowed because not listed in AllowUsers Oct 7 16:43:18 [HOSTNAME] sshd[4332]: User **removed** from 49.88.112.85 not allowed because not listed in AllowUsers Oct 7 17:51:01 [HOSTNAME] sshd[12184]: User **removed** from 49.88.112.85 not allowed because not listed in AllowUsers ... |
2019-10-08 00:54:11 |
| 176.185.19.13 | attackspambots | [Aegis] @ 2019-10-07 12:41:58 0100 -> Maximum authentication attempts exceeded. |
2019-10-08 00:30:52 |
| 203.66.168.81 | attackbots | 2019-10-07T15:47:59.609760abusebot-5.cloudsearch.cf sshd\[23245\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203-66-168-81.hinet-ip.hinet.net user=root |
2019-10-08 00:18:39 |
| 186.54.80.251 | attackspam | Automatic report - Port Scan Attack |
2019-10-08 01:01:52 |
| 211.35.76.241 | attackbots | Automatic report - Banned IP Access |
2019-10-08 00:31:21 |
| 94.125.61.224 | attackbotsspam | Oct 7 15:50:19 h2177944 kernel: \[3332322.523075\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.224 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=72 ID=14239 DF PROTO=TCP SPT=62540 DPT=21 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 15:52:23 h2177944 kernel: \[3332446.081451\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.224 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=61 ID=6727 DF PROTO=TCP SPT=60951 DPT=143 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 15:54:41 h2177944 kernel: \[3332584.673336\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.224 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=67 ID=38918 DF PROTO=TCP SPT=54860 DPT=993 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 15:55:20 h2177944 kernel: \[3332623.188596\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.224 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=62 ID=14792 DF PROTO=TCP SPT=63616 DPT=25 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 15:56:55 h2177944 kernel: \[3332718.272238\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.224 DST=85.214. |
2019-10-08 01:02:41 |