City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.200.107.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1360
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;21.200.107.213. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021202 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 06:16:24 CST 2025
;; MSG SIZE rcvd: 107Host 213.107.200.21.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 213.107.200.21.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.209.0.91 | attack | Portscan or hack attempt detected by psad/fwsnort |
2019-11-11 03:00:43 |
| 185.176.27.18 | attackbotsspam | 185.176.27.18 was recorded 146 times by 28 hosts attempting to connect to the following ports: 55390,104,7011,22222,15351,44301,65001,1389,23813,53411,406,58706,7001,42312,9874,3383,8001,53911,50720,37037,13389,33430,48048,33333,5589,18902,65110,23500,20013,31313,50213,11111,16111,50007,4489,9833,3394,33901,41812,33001,30000,2009,60001,3393,56010,8412,10101,33224. Incident counter (4h, 24h, all-time): 146, 770, 4185 |
2019-11-11 03:02:05 |
| 92.53.90.132 | attack | Port Scan: TCP/5927 |
2019-11-11 03:04:24 |
| 36.48.159.58 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 20 - port: 1433 proto: TCP cat: Misc Attack |
2019-11-11 02:33:07 |
| 185.175.93.18 | attackspam | 185.175.93.18 was recorded 83 times by 28 hosts attempting to connect to the following ports: 9833,9104,9201,50004,61301,7102,2600,33885,5402,63390,8004,2908,24701,5202,4589,1807,1889,52340,54104,55588,10501,2401,45200,53000,56551,49606,57180,19407,7001,2008,19000,62223,50101,43389,48553,5004,16204,53535,45000,48620,13501,6006,1818,23401,21200,8989,21100,4000,13605,65001,1401,2501,6689,9901,3351,60002,55601,10003,54085,1002,2001,61901,22000,13389,21001,19900,49898,24401,1018,59914,48247,45001,9001,13204. Incident counter (4h, 24h, all-time): 83, 519, 2381 |
2019-11-11 02:42:54 |
| 37.49.231.121 | attackspam | 11/10/2019-13:22:35.538722 37.49.231.121 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 33 |
2019-11-11 02:32:40 |
| 88.99.95.219 | attackspam | Nov 10 13:55:43 TORMINT sshd\[17798\]: Invalid user choyee from 88.99.95.219 Nov 10 13:55:43 TORMINT sshd\[17798\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.99.95.219 Nov 10 13:55:45 TORMINT sshd\[17798\]: Failed password for invalid user choyee from 88.99.95.219 port 34780 ssh2 ... |
2019-11-11 03:09:37 |
| 89.248.174.222 | attackspam | Nov 9 08:36:29 SRC=89.248.174.222 PROTO=TCP SPT=47065 DPT=8089 Nov 9 09:26:54 SRC=89.248.174.222 PROTO=TCP SPT=49176 DPT=8089 Nov 9 10:12:04 SRC=89.248.174.222 PROTO=TCP SPT=52276 DPT=8089 Nov 9 11:00:17 SRC=89.248.174.222 PROTO=TCP SPT=55968 DPT=8089 Nov 9 12:48:59 SRC=89.248.174.222 PROTO=TCP SPT=40952 DPT=8089 |
2019-11-11 02:48:39 |
| 51.75.134.211 | attack | ET COMPROMISED Known Compromised or Hostile Host Traffic group 14 - port: 5902 proto: TCP cat: Misc Attack |
2019-11-11 02:56:13 |
| 185.176.27.246 | attackbots | 11/10/2019-13:37:21.108937 185.176.27.246 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-11 02:39:20 |
| 139.198.189.36 | attackspam | Nov 10 08:06:04 wbs sshd\[29743\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36 user=root Nov 10 08:06:06 wbs sshd\[29743\]: Failed password for root from 139.198.189.36 port 55628 ssh2 Nov 10 08:10:12 wbs sshd\[30229\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36 user=root Nov 10 08:10:15 wbs sshd\[30229\]: Failed password for root from 139.198.189.36 port 59608 ssh2 Nov 10 08:14:18 wbs sshd\[30559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36 user=mysql |
2019-11-11 02:44:46 |
| 5.188.206.14 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 6 - port: 55000 proto: TCP cat: Misc Attack |
2019-11-11 02:34:03 |
| 89.248.174.215 | attackspam | 11/10/2019-11:31:45.628600 89.248.174.215 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 98 |
2019-11-11 02:49:03 |
| 89.248.168.202 | attack | slow and persistent scanner |
2019-11-11 02:49:55 |
| 185.176.27.34 | attackbots | 11/10/2019-19:05:37.786966 185.176.27.34 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-11 02:40:49 |