City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 173.239.29.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10090
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;173.239.29.239. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020400 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 15:17:18 CST 2025
;; MSG SIZE rcvd: 107Host 239.29.239.173.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 239.29.239.173.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.54.98.89 | attackspam | Unauthorized SSH login attempts |
2020-08-06 02:06:41 |
| 213.194.141.31 | attack | Port probing on unauthorized port 23 |
2020-08-06 02:03:19 |
| 62.151.177.85 | attackbotsspam | (sshd) Failed SSH login from 62.151.177.85 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 5 19:36:22 srv sshd[1007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.151.177.85 user=root Aug 5 19:36:24 srv sshd[1007]: Failed password for root from 62.151.177.85 port 56614 ssh2 Aug 5 19:40:41 srv sshd[1078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.151.177.85 user=root Aug 5 19:40:43 srv sshd[1078]: Failed password for root from 62.151.177.85 port 34916 ssh2 Aug 5 19:43:13 srv sshd[1111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.151.177.85 user=root |
2020-08-06 02:07:32 |
| 89.144.47.244 | attackspam | ET DROP Dshield Block Listed Source group 1 - port: 3390 proto: tcp cat: Misc Attackbytes: 60 |
2020-08-06 01:59:10 |
| 118.24.108.205 | attackbots | Aug 5 15:07:12 ws24vmsma01 sshd[119696]: Failed password for root from 118.24.108.205 port 38018 ssh2 ... |
2020-08-06 02:19:28 |
| 176.123.10.71 | attackspambots | Aug 5 20:02:25 debian-2gb-nbg1-2 kernel: \[18909005.665921\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=176.123.10.71 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=42462 DPT=8088 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-08-06 02:21:10 |
| 189.80.37.70 | attackspambots | Lines containing failures of 189.80.37.70 Aug 4 14:29:19 jarvis sshd[16387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.80.37.70 user=r.r Aug 4 14:29:22 jarvis sshd[16387]: Failed password for r.r from 189.80.37.70 port 40706 ssh2 Aug 4 14:29:23 jarvis sshd[16387]: Received disconnect from 189.80.37.70 port 40706:11: Bye Bye [preauth] Aug 4 14:29:23 jarvis sshd[16387]: Disconnected from authenticating user r.r 189.80.37.70 port 40706 [preauth] Aug 4 14:42:15 jarvis sshd[17317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.80.37.70 user=r.r Aug 4 14:42:17 jarvis sshd[17317]: Failed password for r.r from 189.80.37.70 port 50044 ssh2 Aug 4 14:42:18 jarvis sshd[17317]: Received disconnect from 189.80.37.70 port 50044:11: Bye Bye [preauth] Aug 4 14:42:18 jarvis sshd[17317]: Disconnected from authenticating user r.r 189.80.37.70 port 50044 [preauth] Aug 4 14:46:38 jarvis ........ ------------------------------ |
2020-08-06 01:54:25 |
| 110.8.67.146 | attack | 2020-08-05T13:13:25.720994shield sshd\[22340\]: Invalid user !QAZXCFGHJKOP from 110.8.67.146 port 39162 2020-08-05T13:13:25.731395shield sshd\[22340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.8.67.146 2020-08-05T13:13:27.075839shield sshd\[22340\]: Failed password for invalid user !QAZXCFGHJKOP from 110.8.67.146 port 39162 ssh2 2020-08-05T13:14:44.663585shield sshd\[22480\]: Invalid user qweasd!@\# from 110.8.67.146 port 55134 2020-08-05T13:14:44.670435shield sshd\[22480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.8.67.146 |
2020-08-06 02:12:54 |
| 222.108.213.43 | attackspambots | Tried our host z. |
2020-08-06 02:06:19 |
| 51.77.200.24 | attack | Unauthorized SSH login attempts |
2020-08-06 01:51:43 |
| 128.199.134.165 | attackspam | 08/05/2020-13:52:13.739478 128.199.134.165 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-08-06 01:53:37 |
| 193.35.51.13 | attackspam | 2020-08-05 20:11:52 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data \(set_id=73568237@yt.gl\) 2020-08-05 20:11:59 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-08-05 20:12:10 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-08-05 20:12:15 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-08-05 20:12:27 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-08-05 20:12:33 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-08-05 20:12:38 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-08-05 20:12:43 dovecot_login authenticator fa ... |
2020-08-06 02:20:26 |
| 91.83.163.189 | attackbotsspam | (smtpauth) Failed SMTP AUTH login from 91.83.163.189 (HU/Hungary/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-08-05 16:44:07 plain authenticator failed for ([91.83.163.189]) [91.83.163.189]: 535 Incorrect authentication data (set_id=info@vertix.co) |
2020-08-06 02:06:58 |
| 209.85.167.65 | normal | sending fraudulent emails: Hallo, ich bin Omar Ali, ich bin Banker hier in Dubai. Ich habe Sie bezüglich eines Kontos eines Staatsbürgers Ihres Landes kontaktiert. Dieser Mann starb vor 12 Jahren und erwähnte niemanden, der sein bei unserer Bank hinterlegtes Geld geerbt hatte. Die Bank erlaubte mir, den nächsten Verwandten mit einem verstorbenen Kunden zu finden, aber ich fand ihn nicht. Dieses Konto wird beschlagnahmt, wenn niemand erklärt, dass das Bankkonto der nächste Angehörige ist. Ich habe mich daher entschlossen, Sie zum gegenseitigen Nutzen zu kontaktieren. Ich warte auf Ihre Antwort für weitere Details. Respektvoll, Omar Ali |
2020-08-06 02:29:05 |
| 161.35.61.129 | attack | Port scan: Attack repeated for 24 hours |
2020-08-06 02:30:03 |