City: unknown
Region: unknown
Country: Kazakhstan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.0.2.154
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44273
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;164.0.2.154. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 18:34:14 CST 2025
;; MSG SIZE rcvd: 104154.2.0.164.in-addr.arpa domain name pointer 164-0-2-154.kcell.kz.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
154.2.0.164.in-addr.arpa name = 164-0-2-154.kcell.kz.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 36.92.147.213 | attackbotsspam | 1582032130 - 02/18/2020 14:22:10 Host: 36.92.147.213/36.92.147.213 Port: 445 TCP Blocked |
2020-02-19 02:35:49 |
| 222.186.169.194 | attack | Feb 18 19:13:20 h2177944 sshd\[14397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root Feb 18 19:13:22 h2177944 sshd\[14397\]: Failed password for root from 222.186.169.194 port 33484 ssh2 Feb 18 19:13:25 h2177944 sshd\[14397\]: Failed password for root from 222.186.169.194 port 33484 ssh2 Feb 18 19:13:28 h2177944 sshd\[14397\]: Failed password for root from 222.186.169.194 port 33484 ssh2 ... |
2020-02-19 02:21:31 |
| 45.134.179.15 | attackspambots | Port 9833 scan denied |
2020-02-19 02:39:35 |
| 46.229.168.163 | attack | The IP has triggered Cloudflare WAF. CF-Ray: 566da9635bc9f126 | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: challenge | Country: US | CF_IPClass: unknown | Protocol: HTTP/1.1 | Method: GET | Host: ping.skk.moe | User-Agent: Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html) | CF_DC: IAD. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2020-02-19 02:18:48 |
| 159.65.162.186 | attack | Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools |
2020-02-19 02:29:36 |
| 185.175.93.14 | attackbotsspam | ET DROP Dshield Block Listed Source group 1 - port: 2330 proto: TCP cat: Misc Attack |
2020-02-19 02:31:11 |
| 91.134.242.199 | attack | Feb 18 14:44:19 plex sshd[10884]: Invalid user ubuntu from 91.134.242.199 port 42142 |
2020-02-19 02:00:26 |
| 197.167.2.252 | attackspam | 20/2/18@08:22:44: FAIL: Alarm-Network address from=197.167.2.252 ... |
2020-02-19 02:01:06 |
| 192.241.236.41 | attack | Port 8005 scan denied |
2020-02-19 02:34:38 |
| 109.124.214.176 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-19 02:16:43 |
| 213.16.1.53 | attack | Automatic report - Port Scan Attack |
2020-02-19 02:09:18 |
| 37.194.179.100 | attackbotsspam | 2020-02-18T13:50:31.809933ldap.arvenenaske.de sshd[4625]: Connection from 37.194.179.100 port 54600 on 5.199.128.55 port 22 2020-02-18T13:50:32.498528ldap.arvenenaske.de sshd[4625]: Invalid user jeanette from 37.194.179.100 port 54600 2020-02-18T13:50:32.508030ldap.arvenenaske.de sshd[4625]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.194.179.100 user=jeanette 2020-02-18T13:50:32.509164ldap.arvenenaske.de sshd[4625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.194.179.100 2020-02-18T13:50:31.809933ldap.arvenenaske.de sshd[4625]: Connection from 37.194.179.100 port 54600 on 5.199.128.55 port 22 2020-02-18T13:50:32.498528ldap.arvenenaske.de sshd[4625]: Invalid user jeanette from 37.194.179.100 port 54600 2020-02-18T13:50:33.993659ldap.arvenenaske.de sshd[4625]: Failed password for invalid user jeanette from 37.194.179.100 port 54600 ssh2 2020-02-18T13:57:50.026312ldap.arvenenaske.d........ ------------------------------ |
2020-02-19 02:46:13 |
| 173.201.196.210 | attackbots | Automatic report - XMLRPC Attack |
2020-02-19 01:59:16 |
| 78.186.24.218 | attack | Automatic report - Port Scan Attack |
2020-02-19 02:07:12 |
| 140.143.9.142 | attackspam | Feb 18 20:03:01 scivo sshd[24340]: Invalid user ts from 140.143.9.142 Feb 18 20:03:01 scivo sshd[24340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.9.142 Feb 18 20:03:03 scivo sshd[24340]: Failed password for invalid user ts from 140.143.9.142 port 35442 ssh2 Feb 18 20:03:03 scivo sshd[24340]: Received disconnect from 140.143.9.142: 11: Bye Bye [preauth] Feb 18 20:10:58 scivo sshd[24770]: Did not receive identification string from 140.143.9.142 Feb 18 20:19:48 scivo sshd[25214]: Invalid user user01 from 140.143.9.142 Feb 18 20:19:48 scivo sshd[25214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.9.142 Feb 18 20:19:49 scivo sshd[25214]: Failed password for invalid user user01 from 140.143.9.142 port 32776 ssh2 Feb 18 20:19:50 scivo sshd[25214]: Received disconnect from 140.143.9.142: 11: Bye Bye [preauth] Feb 18 20:21:29 scivo sshd[25343]: Invalid user nava from 140......... ------------------------------- |
2020-02-19 02:01:40 |