City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.112.250.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49806
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.112.250.129. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012500 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 25 19:46:00 CST 2025
;; MSG SIZE rcvd: 108Host 129.250.112.214.in-addr.arpa not found: 2(SERVFAIL)
server can't find 214.112.250.129.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.99.238.213 | attack | Jul 4 04:08:11 debian-2gb-nbg1-2 kernel: \[16087111.880049\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=139.99.238.213 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=54321 PROTO=TCP SPT=60092 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-07-04 10:32:32 |
| 141.98.9.137 | attackspam | Jul 3 23:34:21 dns1 sshd[32010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.137 Jul 3 23:34:23 dns1 sshd[32010]: Failed password for invalid user operator from 141.98.9.137 port 36920 ssh2 Jul 3 23:35:04 dns1 sshd[32095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.137 |
2020-07-04 10:42:44 |
| 87.103.213.56 | attackbots | Unauthorized connection attempt from IP address 87.103.213.56 on Port 445(SMB) |
2020-07-04 10:26:47 |
| 170.130.187.18 | attackbotsspam | Unauthorized connection attempt detected from IP address 170.130.187.18 to port 3389 |
2020-07-04 10:29:07 |
| 119.29.177.237 | attack | Jul 4 06:36:00 dhoomketu sshd[1263573]: Invalid user bh from 119.29.177.237 port 55140 Jul 4 06:36:00 dhoomketu sshd[1263573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.177.237 Jul 4 06:36:00 dhoomketu sshd[1263573]: Invalid user bh from 119.29.177.237 port 55140 Jul 4 06:36:03 dhoomketu sshd[1263573]: Failed password for invalid user bh from 119.29.177.237 port 55140 ssh2 Jul 4 06:37:27 dhoomketu sshd[1263585]: Invalid user agent from 119.29.177.237 port 42248 ... |
2020-07-04 10:45:56 |
| 118.24.153.230 | attack | Jul 4 00:19:15 jumpserver sshd[320410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.153.230 Jul 4 00:19:15 jumpserver sshd[320410]: Invalid user tomcat from 118.24.153.230 port 54146 Jul 4 00:19:17 jumpserver sshd[320410]: Failed password for invalid user tomcat from 118.24.153.230 port 54146 ssh2 ... |
2020-07-04 10:49:30 |
| 46.22.223.100 | attackspambots | Unauthorized connection attempt detected from IP address 46.22.223.100 to port 23 |
2020-07-04 10:17:02 |
| 45.141.84.110 | attack | Jul 4 04:56:32 debian-2gb-nbg1-2 kernel: \[16090013.058180\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.110 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=41821 PROTO=TCP SPT=55780 DPT=8243 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-04 10:58:24 |
| 137.220.138.252 | attackbots | [ssh] SSH attack |
2020-07-04 10:45:40 |
| 118.71.162.0 | attackbotsspam | Unauthorized connection attempt from IP address 118.71.162.0 on Port 445(SMB) |
2020-07-04 10:40:38 |
| 144.217.76.62 | attackbotsspam | [2020-07-03 22:10:06] NOTICE[1197][C-0000104a] chan_sip.c: Call from '' (144.217.76.62:40203) to extension '10248323395006' rejected because extension not found in context 'public'. [2020-07-03 22:10:06] SECURITY[1214] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-03T22:10:06.516-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="10248323395006",SessionID="0x7f6d2833d578",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/144.217.76.62/5060",ACLName="no_extension_match" [2020-07-03 22:11:51] NOTICE[1197][C-0000104b] chan_sip.c: Call from '' (144.217.76.62:29243) to extension '102048323395006' rejected because extension not found in context 'public'. [2020-07-03 22:11:51] SECURITY[1214] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-03T22:11:51.174-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="102048323395006",SessionID="0x7f6d288c4af8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/144 ... |
2020-07-04 10:29:26 |
| 115.159.214.200 | attackspambots | Jul 4 06:47:22 dhoomketu sshd[1263915]: Invalid user jts3 from 115.159.214.200 port 51190 Jul 4 06:47:22 dhoomketu sshd[1263915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.214.200 Jul 4 06:47:22 dhoomketu sshd[1263915]: Invalid user jts3 from 115.159.214.200 port 51190 Jul 4 06:47:23 dhoomketu sshd[1263915]: Failed password for invalid user jts3 from 115.159.214.200 port 51190 ssh2 Jul 4 06:51:34 dhoomketu sshd[1264043]: Invalid user uday from 115.159.214.200 port 43012 ... |
2020-07-04 10:32:58 |
| 177.47.193.74 | attackbotsspam | Port scan: Attack repeated for 24 hours |
2020-07-04 10:27:32 |
| 222.186.31.127 | attack | Jul 4 04:33:20 dbanaszewski sshd[12272]: Unable to negotiate with 222.186.31.127 port 24637: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jul 4 04:38:46 dbanaszewski sshd[12319]: Unable to negotiate with 222.186.31.127 port 45642: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jul 4 04:40:25 dbanaszewski sshd[12374]: Unable to negotiate with 222.186.31.127 port 27075: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] |
2020-07-04 10:51:48 |
| 64.71.145.122 | attackspam | Unauthorized IMAP connection attempt |
2020-07-04 10:22:32 |