City: Frankfort
Region: Kentucky
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 216.249.134.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61705
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;216.249.134.214. IN A
;; AUTHORITY SECTION:
. 190 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022013100 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 31 19:34:15 CST 2022
;; MSG SIZE rcvd: 108Host 214.134.249.216.in-addr.arpa not found: 2(SERVFAIL)
server can't find 216.249.134.214.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 39.120.217.138 | attackbots | 2019-06-28T09:41:41.187735stt-1.[munged] kernel: [5760925.890497] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=39.120.217.138 DST=[mungedIP1] LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=5960 DF PROTO=TCP SPT=62599 DPT=4899 WINDOW=8192 RES=0x00 SYN URGP=0 2019-06-28T09:41:44.179757stt-1.[munged] kernel: [5760928.882523] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=39.120.217.138 DST=[mungedIP1] LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=6332 DF PROTO=TCP SPT=62599 DPT=4899 WINDOW=8192 RES=0x00 SYN URGP=0 2019-06-28T09:41:50.179809stt-1.[munged] kernel: [5760934.882553] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=39.120.217.138 DST=[mungedIP1] LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=6990 DF PROTO=TCP SPT=62599 DPT=4899 WINDOW=8192 RES=0x00 SYN URGP=0 |
2019-06-29 03:38:18 |
| 5.67.147.192 | attackbotsspam | $f2bV_matches |
2019-06-29 03:43:45 |
| 138.97.224.160 | attack | SMTP-sasl brute force ... |
2019-06-29 03:57:35 |
| 51.75.89.73 | attackspam | port scan/probe/communication attempt |
2019-06-29 04:14:14 |
| 176.159.208.68 | attack | (sshd) Failed SSH login from 176.159.208.68 (static-176-159-208-68.ftth.abo.bbox.fr): 5 in the last 3600 secs |
2019-06-29 03:52:42 |
| 177.189.125.206 | attackbots | 8080/tcp [2019-06-28]1pkt |
2019-06-29 04:14:58 |
| 190.214.49.2 | attack | Jun 28 15:32:13 tux postfix/smtpd[30926]: connect from mail.distrhostnameo09d21.saludzona5.gob.ec[190.214.49.2] Jun 28 15:32:14 tux postfix/smtpd[30926]: Anonymous TLS connection established from mail.distrhostnameo09d21.saludzona5.gob.ec[190.214.49.2]: TLSv1.2 whostnameh cipher AECDH-AES256-SHA (256/256 bhostnames) Jun x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=190.214.49.2 |
2019-06-29 03:52:04 |
| 199.195.251.251 | attackspambots | 3389BruteforceFW22 |
2019-06-29 03:46:51 |
| 102.165.50.122 | attackspambots | Jun 28 15:47:36 garuda postfix/smtpd[5769]: connect from unknown[102.165.50.122] Jun 28 15:47:46 garuda postfix/smtpd[5769]: SSL_accept error from unknown[102.165.50.122]: lost connection Jun 28 15:47:46 garuda postfix/smtpd[5769]: lost connection after CONNECT from unknown[102.165.50.122] Jun 28 15:47:46 garuda postfix/smtpd[5769]: disconnect from unknown[102.165.50.122] commands=0/0 Jun 28 15:50:20 garuda postfix/smtpd[5831]: connect from unknown[102.165.50.122] Jun 28 15:50:20 garuda postfix/smtpd[5831]: warning: unknown[102.165.50.122]: SASL LOGIN authentication failed: authentication failure Jun 28 15:50:20 garuda postfix/smtpd[5831]: lost connection after AUTH from unknown[102.165.50.122] Jun 28 15:50:20 garuda postfix/smtpd[5831]: disconnect from unknown[102.165.50.122] ehlo=1 auth=0/1 commands=1/2 Jun 28 15:50:20 garuda postfix/smtpd[5831]: connect from unknown[102.165.50.122] Jun 28 15:50:21 garuda postfix/smtpd[5831]: warning: unknown[102.165.50.122]: SASL LOG........ ------------------------------- |
2019-06-29 04:13:40 |
| 206.189.33.234 | attackspam | Jun 28 19:35:23 srv-4 sshd\[2287\]: Invalid user deploy from 206.189.33.234 Jun 28 19:35:23 srv-4 sshd\[2287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.33.234 Jun 28 19:35:25 srv-4 sshd\[2287\]: Failed password for invalid user deploy from 206.189.33.234 port 35754 ssh2 ... |
2019-06-29 04:11:20 |
| 219.155.212.183 | attack | Jun 28 15:37:50 olgosrv01 sshd[30832]: reveeclipse mapping checking getaddrinfo for hn.kd.pix [219.155.212.183] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 28 15:37:50 olgosrv01 sshd[30832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.155.212.183 user=r.r Jun 28 15:37:52 olgosrv01 sshd[30832]: Failed password for r.r from 219.155.212.183 port 58668 ssh2 Jun 28 15:37:54 olgosrv01 sshd[30832]: Failed password for r.r from 219.155.212.183 port 58668 ssh2 Jun 28 15:37:57 olgosrv01 sshd[30832]: Failed password for r.r from 219.155.212.183 port 58668 ssh2 Jun 28 15:37:59 olgosrv01 sshd[30832]: Failed password for r.r from 219.155.212.183 port 58668 ssh2 Jun 28 15:38:01 olgosrv01 sshd[30832]: Failed password for r.r from 219.155.212.183 port 58668 ssh2 Jun 28 15:38:04 olgosrv01 sshd[30832]: Failed password for r.r from 219.155.212.183 port 58668 ssh2 Jun 28 15:38:04 olgosrv01 sshd[30832]: PAM 5 more authentication failures; logname=........ ------------------------------- |
2019-06-29 04:09:27 |
| 82.49.5.193 | attackspambots | Lines containing failures of 82.49.5.193 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=82.49.5.193 |
2019-06-29 04:00:05 |
| 216.244.66.248 | attackbots | Misuse of DNS server |
2019-06-29 04:09:46 |
| 114.79.188.56 | attackspam | Jun 28 15:33:52 mxgate1 postfix/postscreen[17638]: CONNECT from [114.79.188.56]:34862 to [176.31.12.44]:25 Jun 28 15:33:52 mxgate1 postfix/dnsblog[17642]: addr 114.79.188.56 listed by domain zen.spamhaus.org as 127.0.0.4 Jun 28 15:33:52 mxgate1 postfix/dnsblog[17642]: addr 114.79.188.56 listed by domain zen.spamhaus.org as 127.0.0.10 Jun 28 15:33:52 mxgate1 postfix/dnsblog[17643]: addr 114.79.188.56 listed by domain cbl.abuseat.org as 127.0.0.2 Jun 28 15:33:52 mxgate1 postfix/dnsblog[17640]: addr 114.79.188.56 listed by domain b.barracudacentral.org as 127.0.0.2 Jun 28 15:33:53 mxgate1 postfix/postscreen[17638]: PREGREET 18 after 1.1 from [114.79.188.56]:34862: HELO yhkesus.com Jun 28 15:33:53 mxgate1 postfix/postscreen[17638]: DNSBL rank 4 for [114.79.188.56]:34862 Jun x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=114.79.188.56 |
2019-06-29 04:02:22 |
| 177.23.58.56 | attack | libpam_shield report: forced login attempt |
2019-06-29 03:51:03 |