City: unknown
Region: unknown
Country: Kazakhstan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.79.138.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12591
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.79.138.245. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020300 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 03 22:17:08 CST 2025
;; MSG SIZE rcvd: 105245.138.79.2.in-addr.arpa domain name pointer 2-79-138-245.kcell.kz.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
245.138.79.2.in-addr.arpa name = 2-79-138-245.kcell.kz.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 191.5.65.101 | attackbotsspam | Fail2Ban Ban Triggered |
2019-10-20 19:18:35 |
| 132.232.113.102 | attackbots | $f2bV_matches |
2019-10-20 19:05:31 |
| 54.38.241.171 | attackbotsspam | Invalid user cynthia from 54.38.241.171 port 52874 |
2019-10-20 19:32:19 |
| 104.168.248.96 | attack | Oct 16 14:01:06 mailserver sshd[5322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.248.96 user=r.r Oct 16 14:01:08 mailserver sshd[5322]: Failed password for r.r from 104.168.248.96 port 39566 ssh2 Oct 16 14:01:08 mailserver sshd[5322]: Received disconnect from 104.168.248.96 port 39566:11: Bye Bye [preauth] Oct 16 14:01:08 mailserver sshd[5322]: Disconnected from 104.168.248.96 port 39566 [preauth] Oct 16 14:20:06 mailserver sshd[7210]: Invalid user 123123 from 104.168.248.96 Oct 16 14:20:06 mailserver sshd[7210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.248.96 Oct 16 14:20:08 mailserver sshd[7210]: Failed password for invalid user 123123 from 104.168.248.96 port 45106 ssh2 Oct 16 14:20:08 mailserver sshd[7210]: Received disconnect from 104.168.248.96 port 45106:11: Bye Bye [preauth] Oct 16 14:20:08 mailserver sshd[7210]: Disconnected from 104.168.248.96 port 451........ ------------------------------- |
2019-10-20 19:19:46 |
| 106.12.17.43 | attack | Invalid user chandru from 106.12.17.43 port 37336 |
2019-10-20 19:32:37 |
| 52.221.54.107 | attackbotsspam | Oct 20 12:35:37 pornomens sshd\[27599\]: Invalid user info from 52.221.54.107 port 36706 Oct 20 12:35:37 pornomens sshd\[27599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.221.54.107 Oct 20 12:35:39 pornomens sshd\[27599\]: Failed password for invalid user info from 52.221.54.107 port 36706 ssh2 ... |
2019-10-20 19:25:19 |
| 51.75.195.25 | attackbots | Oct 19 19:46:10 tdfoods sshd\[12257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=25.ip-51-75-195.eu user=root Oct 19 19:46:12 tdfoods sshd\[12257\]: Failed password for root from 51.75.195.25 port 38238 ssh2 Oct 19 19:49:44 tdfoods sshd\[12549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=25.ip-51-75-195.eu user=root Oct 19 19:49:46 tdfoods sshd\[12549\]: Failed password for root from 51.75.195.25 port 49118 ssh2 Oct 19 19:53:22 tdfoods sshd\[12853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=25.ip-51-75-195.eu user=root |
2019-10-20 19:06:27 |
| 167.99.74.119 | attackbots | C1,WP GET /chicken-house2018/wp-login.php |
2019-10-20 19:29:54 |
| 91.196.103.162 | attackbots | 20.10.2019 05:46:21 - RDP Login Fail Detected by https://www.elinox.de/RDP-Wächter |
2019-10-20 19:06:07 |
| 185.40.15.215 | attackbotsspam | slow and persistent scanner |
2019-10-20 19:20:24 |
| 165.22.97.166 | attackbots | Oct 16 21:53:44 h2065291 sshd[24302]: Invalid user apache from 165.22.97.166 Oct 16 21:53:44 h2065291 sshd[24302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.97.166 Oct 16 21:53:47 h2065291 sshd[24302]: Failed password for invalid user apache from 165.22.97.166 port 52154 ssh2 Oct 16 21:53:47 h2065291 sshd[24302]: Received disconnect from 165.22.97.166: 11: Bye Bye [preauth] Oct 16 22:07:25 h2065291 sshd[24401]: Invalid user PS from 165.22.97.166 Oct 16 22:07:25 h2065291 sshd[24401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.97.166 Oct 16 22:07:27 h2065291 sshd[24401]: Failed password for invalid user PS from 165.22.97.166 port 58480 ssh2 Oct 16 22:07:27 h2065291 sshd[24401]: Received disconnect from 165.22.97.166: 11: Bye Bye [preauth] Oct 16 22:11:38 h2065291 sshd[24447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165......... ------------------------------- |
2019-10-20 19:31:47 |
| 129.28.166.212 | attackspam | Invalid user neighbourhoodbillboard from 129.28.166.212 port 44112 |
2019-10-20 18:55:25 |
| 212.30.52.243 | attackbots | Oct 20 07:18:29 ovpn sshd\[18420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.30.52.243 user=root Oct 20 07:18:30 ovpn sshd\[18420\]: Failed password for root from 212.30.52.243 port 55377 ssh2 Oct 20 07:23:53 ovpn sshd\[19442\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.30.52.243 user=root Oct 20 07:23:54 ovpn sshd\[19442\]: Failed password for root from 212.30.52.243 port 52234 ssh2 Oct 20 07:27:58 ovpn sshd\[20238\]: Invalid user jair from 212.30.52.243 Oct 20 07:27:58 ovpn sshd\[20238\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.30.52.243 |
2019-10-20 19:03:40 |
| 189.69.46.90 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/189.69.46.90/ BR - 1H : (321) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN27699 IP : 189.69.46.90 CIDR : 189.69.0.0/16 PREFIX COUNT : 267 UNIQUE IP COUNT : 6569728 ATTACKS DETECTED ASN27699 : 1H - 9 3H - 18 6H - 30 12H - 65 24H - 135 DateTime : 2019-10-20 05:46:10 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-20 19:09:35 |
| 178.128.191.43 | attackbots | Oct 20 05:45:17 srv206 sshd[3839]: Invalid user infogasp from 178.128.191.43 Oct 20 05:45:17 srv206 sshd[3839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.191.43 Oct 20 05:45:17 srv206 sshd[3839]: Invalid user infogasp from 178.128.191.43 Oct 20 05:45:19 srv206 sshd[3839]: Failed password for invalid user infogasp from 178.128.191.43 port 34230 ssh2 ... |
2019-10-20 19:34:08 |