City: unknown
Region: unknown
Country: Kazakhstan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.134.218.47
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63194
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.134.218.47. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022400 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 24 16:41:28 CST 2025
;; MSG SIZE rcvd: 105
47.218.134.2.in-addr.arpa domain name pointer 2.134.218.47.dynamic.telecom.kz.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
47.218.134.2.in-addr.arpa name = 2.134.218.47.dynamic.telecom.kz.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 114.223.173.219 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/114.223.173.219/ CN - 1H : (292) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 114.223.173.219 CIDR : 114.223.0.0/16 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 ATTACKS DETECTED ASN4134 : 1H - 45 3H - 89 6H - 89 12H - 92 24H - 92 DateTime : 2019-10-27 04:48:51 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-27 17:37:28 |
| 92.42.46.81 | attackbotsspam | Oct 27 05:12:13 sshgateway sshd\[23148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.42.46.81 user=root Oct 27 05:12:15 sshgateway sshd\[23148\]: Failed password for root from 92.42.46.81 port 37274 ssh2 Oct 27 05:20:43 sshgateway sshd\[23203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.42.46.81 user=root |
2019-10-27 18:04:33 |
| 87.98.150.12 | attackbots | 2019-10-27T10:49:22.249315scmdmz1 sshd\[11096\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip12.ip-87-98-150.eu user=root 2019-10-27T10:49:23.975372scmdmz1 sshd\[11096\]: Failed password for root from 87.98.150.12 port 56766 ssh2 2019-10-27T10:53:01.236143scmdmz1 sshd\[11469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip12.ip-87-98-150.eu user=root ... |
2019-10-27 18:06:36 |
| 180.76.249.74 | attackspambots | Oct 26 23:33:38 php1 sshd\[14566\]: Invalid user three from 180.76.249.74 Oct 26 23:33:38 php1 sshd\[14566\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.249.74 Oct 26 23:33:40 php1 sshd\[14566\]: Failed password for invalid user three from 180.76.249.74 port 54092 ssh2 Oct 26 23:38:17 php1 sshd\[15070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.249.74 user=root Oct 26 23:38:20 php1 sshd\[15070\]: Failed password for root from 180.76.249.74 port 32948 ssh2 |
2019-10-27 17:43:03 |
| 81.89.113.142 | attack | xmlrpc attack |
2019-10-27 17:44:07 |
| 220.167.100.60 | attackbots | Oct 26 13:43:02 server sshd\[14668\]: Invalid user usuario from 220.167.100.60 Oct 26 13:43:02 server sshd\[14668\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.167.100.60 Oct 26 13:43:03 server sshd\[14668\]: Failed password for invalid user usuario from 220.167.100.60 port 45462 ssh2 Oct 27 13:01:06 server sshd\[4594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.167.100.60 user=root Oct 27 13:01:09 server sshd\[4594\]: Failed password for root from 220.167.100.60 port 44200 ssh2 ... |
2019-10-27 18:02:33 |
| 34.199.43.59 | attackbotsspam | RDP Bruteforce |
2019-10-27 17:59:24 |
| 54.36.149.33 | attack | Automatic report - Banned IP Access |
2019-10-27 18:11:16 |
| 95.84.128.25 | attackspam | Autoban 95.84.128.25 AUTH/CONNECT |
2019-10-27 18:08:18 |
| 14.63.167.192 | attack | $f2bV_matches |
2019-10-27 17:42:10 |
| 62.2.148.66 | attack | Oct 26 01:00:27 uapps sshd[19747]: User r.r from 62-2-148-66.static.cablecom.ch not allowed because not listed in AllowUsers Oct 26 01:00:27 uapps sshd[19747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-2-148-66.static.cablecom.ch user=r.r Oct 26 01:00:29 uapps sshd[19747]: Failed password for invalid user r.r from 62.2.148.66 port 58377 ssh2 Oct 26 01:00:29 uapps sshd[19747]: Received disconnect from 62.2.148.66: 11: Bye Bye [preauth] Oct 26 01:21:32 uapps sshd[19966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-2-148-66.static.cablecom.ch Oct 26 01:21:34 uapps sshd[19966]: Failed password for invalid user ts3 from 62.2.148.66 port 43424 ssh2 Oct 26 01:21:34 uapps sshd[19966]: Received disconnect from 62.2.148.66: 11: Bye Bye [preauth] Oct 26 01:25:46 uapps sshd[19991]: User r.r from 62-2-148-66.static.cablecom.ch not allowed because not listed in AllowUsers Oct 26 01:25:46 ........ ------------------------------- |
2019-10-27 18:14:37 |
| 106.13.39.233 | attackbots | 2019-10-27T09:43:34.878152shield sshd\[18392\]: Invalid user jet from 106.13.39.233 port 49986 2019-10-27T09:43:34.880926shield sshd\[18392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.39.233 2019-10-27T09:43:36.800642shield sshd\[18392\]: Failed password for invalid user jet from 106.13.39.233 port 49986 ssh2 2019-10-27T09:48:32.172850shield sshd\[19865\]: Invalid user Satu from 106.13.39.233 port 36018 2019-10-27T09:48:32.180577shield sshd\[19865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.39.233 |
2019-10-27 17:55:50 |
| 103.206.100.214 | attack | (imapd) Failed IMAP login from 103.206.100.214 (IN/India/axntech-dynamic-214.100.206.103.axntechnologies.in): 1 in the last 3600 secs |
2019-10-27 17:50:14 |
| 178.128.76.6 | attackspam | Oct 27 08:22:14 vps58358 sshd\[15647\]: Invalid user com from 178.128.76.6Oct 27 08:22:16 vps58358 sshd\[15647\]: Failed password for invalid user com from 178.128.76.6 port 48046 ssh2Oct 27 08:25:56 vps58358 sshd\[15722\]: Invalid user admin321 from 178.128.76.6Oct 27 08:25:58 vps58358 sshd\[15722\]: Failed password for invalid user admin321 from 178.128.76.6 port 58558 ssh2Oct 27 08:29:44 vps58358 sshd\[15894\]: Invalid user !@\)\)%!zogon360 from 178.128.76.6Oct 27 08:29:46 vps58358 sshd\[15894\]: Failed password for invalid user !@\)\)%!zogon360 from 178.128.76.6 port 40814 ssh2 ... |
2019-10-27 17:49:24 |
| 5.135.185.27 | attack | Oct 24 20:52:27 xb0 sshd[21641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.185.27 user=r.r Oct 24 20:52:29 xb0 sshd[21641]: Failed password for r.r from 5.135.185.27 port 44026 ssh2 Oct 24 20:52:29 xb0 sshd[21641]: Received disconnect from 5.135.185.27: 11: Bye Bye [preauth] Oct 24 21:10:51 xb0 sshd[19568]: Failed password for invalid user paul from 5.135.185.27 port 38312 ssh2 Oct 24 21:10:51 xb0 sshd[19568]: Received disconnect from 5.135.185.27: 11: Bye Bye [preauth] Oct 24 21:14:32 xb0 sshd[29677]: Failed password for invalid user PDV from 5.135.185.27 port 52282 ssh2 Oct 24 21:14:32 xb0 sshd[29677]: Received disconnect from 5.135.185.27: 11: Bye Bye [preauth] Oct 24 21:18:15 xb0 sshd[27142]: Failed password for invalid user riverdal from 5.135.185.27 port 38026 ssh2 Oct 24 21:18:15 xb0 sshd[27142]: Received disconnect from 5.135.185.27: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.htm |
2019-10-27 17:47:15 |