City: unknown
Region: unknown
Country: Taiwan (Province of China)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 219.70.210.47
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3213
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;219.70.210.47. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021900 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 17:43:42 CST 2025
;; MSG SIZE rcvd: 10647.210.70.219.in-addr.arpa domain name pointer host-219-70-210-47.dynamic.kbtelecom.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
47.210.70.219.in-addr.arpa name = host-219-70-210-47.dynamic.kbtelecom.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.136.110.47 | attackspam | Nov 1 09:59:24 mc1 kernel: \[3885081.417212\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.110.47 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=59475 PROTO=TCP SPT=54723 DPT=8111 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 1 10:06:16 mc1 kernel: \[3885492.933503\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.110.47 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=2646 PROTO=TCP SPT=54723 DPT=7863 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 1 10:09:08 mc1 kernel: \[3885664.760890\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.110.47 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=16931 PROTO=TCP SPT=54723 DPT=8299 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-01 17:24:57 |
| 54.37.88.73 | attackbotsspam | Nov 1 06:40:07 microserver sshd[4811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.88.73 user=root Nov 1 06:40:09 microserver sshd[4811]: Failed password for root from 54.37.88.73 port 36506 ssh2 Nov 1 06:43:14 microserver sshd[5112]: Invalid user 123g from 54.37.88.73 port 45180 Nov 1 06:43:14 microserver sshd[5112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.88.73 Nov 1 06:43:16 microserver sshd[5112]: Failed password for invalid user 123g from 54.37.88.73 port 45180 ssh2 Nov 1 06:55:49 microserver sshd[7002]: Invalid user |
2019-11-01 16:53:46 |
| 220.92.16.66 | attackbots | 2019-11-01T05:50:05.539956abusebot-5.cloudsearch.cf sshd\[9489\]: Invalid user bjorn from 220.92.16.66 port 48074 |
2019-11-01 17:10:13 |
| 104.248.121.67 | attackbots | Nov 1 09:32:19 vmanager6029 sshd\[10271\]: Invalid user tiffany from 104.248.121.67 port 53780 Nov 1 09:32:19 vmanager6029 sshd\[10271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.121.67 Nov 1 09:32:21 vmanager6029 sshd\[10271\]: Failed password for invalid user tiffany from 104.248.121.67 port 53780 ssh2 |
2019-11-01 16:55:06 |
| 36.77.94.135 | attackspam | 1433/tcp [2019-11-01]1pkt |
2019-11-01 16:47:43 |
| 211.152.62.14 | attack | Fail2Ban Ban Triggered |
2019-11-01 16:54:38 |
| 58.127.28.54 | attackspambots | Nov 1 06:35:05 localhost sshd\[84750\]: Invalid user 123456 from 58.127.28.54 port 58490 Nov 1 06:35:05 localhost sshd\[84750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.127.28.54 Nov 1 06:35:07 localhost sshd\[84750\]: Failed password for invalid user 123456 from 58.127.28.54 port 58490 ssh2 Nov 1 06:39:21 localhost sshd\[84896\]: Invalid user 1 from 58.127.28.54 port 40910 Nov 1 06:39:21 localhost sshd\[84896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.127.28.54 ... |
2019-11-01 17:12:24 |
| 185.36.216.117 | attack | slow and persistent scanner |
2019-11-01 17:02:18 |
| 83.103.98.211 | attackbotsspam | Invalid user odoo from 83.103.98.211 port 55518 |
2019-11-01 17:15:08 |
| 129.204.101.132 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/129.204.101.132/ CN - 1H : (704) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN45090 IP : 129.204.101.132 CIDR : 129.204.64.0/18 PREFIX COUNT : 1788 UNIQUE IP COUNT : 2600192 ATTACKS DETECTED ASN45090 : 1H - 2 3H - 2 6H - 2 12H - 2 24H - 7 DateTime : 2019-11-01 07:02:43 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN - data recovery |
2019-11-01 17:27:45 |
| 37.187.142.141 | attackbotsspam | Nov 1 04:33:12 shenron sshd[30093]: Did not receive identification string from 37.187.142.141 Nov 1 04:33:17 shenron sshd[30094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.142.141 user=r.r Nov 1 04:33:17 shenron sshd[30103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.142.141 user=r.r Nov 1 04:33:17 shenron sshd[30100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.142.141 user=r.r Nov 1 04:33:17 shenron sshd[30095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.142.141 user=r.r Nov 1 04:33:18 shenron sshd[30098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.142.141 user=r.r Nov 1 04:33:18 shenron sshd[30143]: Did not receive identification string from 37.187.142.141 Nov 1 04:33:19 shenron sshd[30098]: Failed ........ ------------------------------- |
2019-11-01 17:04:20 |
| 5.88.188.77 | attack | Nov 1 09:21:47 cvbnet sshd[18299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.88.188.77 Nov 1 09:21:49 cvbnet sshd[18299]: Failed password for invalid user akiyasu from 5.88.188.77 port 57058 ssh2 ... |
2019-11-01 17:14:00 |
| 42.236.10.72 | attackspambots | Automatic report - Banned IP Access |
2019-11-01 17:24:01 |
| 132.232.52.48 | attackspam | Invalid user DEBIAN@2018 from 132.232.52.48 port 44392 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.52.48 Failed password for invalid user DEBIAN@2018 from 132.232.52.48 port 44392 ssh2 Invalid user vivaldi from 132.232.52.48 port 47578 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.52.48 |
2019-11-01 16:52:08 |
| 104.40.4.156 | attackbotsspam | Nov 1 07:33:59 vps647732 sshd[7913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.40.4.156 Nov 1 07:34:01 vps647732 sshd[7913]: Failed password for invalid user mammamia from 104.40.4.156 port 30720 ssh2 ... |
2019-11-01 17:14:45 |