City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.164.25.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17321
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.164.25.212. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021000 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 15:15:50 CST 2025
;; MSG SIZE rcvd: 106Host 212.25.164.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 212.25.164.20.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 188.76.8.168 | attack | Automatic report - Port Scan |
2020-04-22 21:31:11 |
| 178.131.53.181 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-04-22 22:01:17 |
| 116.179.32.150 | attackbots | Bad bot/spoofed identity |
2020-04-22 21:43:10 |
| 61.133.232.252 | attack | Apr 22 09:34:33 mail sshd\[61347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.252 user=root ... |
2020-04-22 21:56:31 |
| 50.104.13.15 | spambotsattackproxy | This is 1 of several ip addresses stalking and hard my kids and me on internet for 2 in a half years. They have my credit card info all my passwords stole 7 email ACCTS that r still active and used with different names. They edit right on the screen everything even legal documents. My ip is 192.168.254.254 please look into this issue and block these psycho paths. Also they have my apps cloned so they can run them...they are blocking this from coming to u......also they edit the logs so PULL ever single one ther |
2020-04-22 21:31:46 |
| 51.91.120.67 | attackspambots | Apr 22 15:42:56 ns3164893 sshd[2215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.120.67 Apr 22 15:42:59 ns3164893 sshd[2215]: Failed password for invalid user ad from 51.91.120.67 port 35328 ssh2 ... |
2020-04-22 22:12:02 |
| 217.182.74.196 | attackbotsspam | k+ssh-bruteforce |
2020-04-22 22:06:36 |
| 101.53.233.109 | attackbots | Apr 22 15:42:47 nginx sshd[55460]: Invalid user ubnt from 101.53.233.109 Apr 22 15:42:47 nginx sshd[55460]: Connection closed by 101.53.233.109 port 11285 [preauth] |
2020-04-22 21:49:18 |
| 117.157.111.113 | attackbots | failed_logins |
2020-04-22 21:41:09 |
| 50.104.13.15 | spambotsattackproxy | This is 1 of several ip addresses stalking and hard my kids and me on internet for 2 in a half years. They have my credit card info all my passwords stole 7 email ACCTS that r still active and used with different names. They edit right on the screen everything even legal documents. My ip is 192.168.254.254 please look into this issue and block these psycho paths. Also they have my apps cloned so they can run them...they are blocking this from coming to u......also they edit the logs so PULL ever single one ther |
2020-04-22 21:31:30 |
| 27.154.225.186 | attackbots | leo_www |
2020-04-22 21:32:26 |
| 111.39.172.148 | attackbotsspam | scans 2 times in preceeding hours on the ports (in chronological order) 3879 27204 |
2020-04-22 21:38:25 |
| 177.205.90.184 | attack | Apr 22 14:27:19 meumeu sshd[6824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.205.90.184 Apr 22 14:27:21 meumeu sshd[6824]: Failed password for invalid user testtest from 177.205.90.184 port 51126 ssh2 Apr 22 14:30:38 meumeu sshd[7414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.205.90.184 ... |
2020-04-22 21:32:54 |
| 111.206.198.101 | attackspam | Bad bot/spoofed identity |
2020-04-22 21:37:06 |
| 78.128.113.42 | attackbotsspam | Port scan |
2020-04-22 21:50:47 |