City: unknown
Region: unknown
Country: Korea (the Republic of)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 221.150.74.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5143
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;221.150.74.13. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021501 1800 900 604800 86400
;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 05:55:58 CST 2025
;; MSG SIZE rcvd: 106Host 13.74.150.221.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 13.74.150.221.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 220.176.204.91 | attackspam | $f2bV_matches |
2020-02-07 04:21:28 |
| 222.244.81.251 | attackbotsspam | Brute force blocker - service: proftpd1 - aantal: 147 - Mon Jan 14 10:25:08 2019 |
2020-02-07 04:32:55 |
| 190.106.199.138 | attackbots | Brute force blocker - service: dovecot1 - aantal: 25 - Tue Jan 8 10:45:08 2019 |
2020-02-07 04:47:17 |
| 39.67.196.106 | attackbotsspam | Brute force blocker - service: proftpd1 - aantal: 48 - Fri Jan 25 06:40:08 2019 |
2020-02-07 04:07:02 |
| 89.41.43.192 | attack | Automatic report - Port Scan Attack |
2020-02-07 04:29:51 |
| 187.32.178.33 | attackbotsspam | Feb 6 19:57:13 *** sshd[24653]: Invalid user cje from 187.32.178.33 |
2020-02-07 04:42:39 |
| 114.34.55.169 | attackspambots | Fail2Ban Ban Triggered |
2020-02-07 04:28:23 |
| 212.83.183.39 | attackbots | "Test Inject un'a=0" |
2020-02-07 04:29:19 |
| 95.85.12.25 | attackbots | Feb 6 20:28:32 web8 sshd\[10516\]: Invalid user gbi from 95.85.12.25 Feb 6 20:28:32 web8 sshd\[10516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.12.25 Feb 6 20:28:34 web8 sshd\[10516\]: Failed password for invalid user gbi from 95.85.12.25 port 47074 ssh2 Feb 6 20:31:34 web8 sshd\[12120\]: Invalid user tzf from 95.85.12.25 Feb 6 20:31:34 web8 sshd\[12120\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.12.25 |
2020-02-07 04:34:18 |
| 63.80.185.36 | attack | Feb 6 21:04:18 mxgate1 postfix/postscreen[17935]: CONNECT from [63.80.185.36]:49555 to [176.31.12.44]:25 Feb 6 21:04:18 mxgate1 postfix/dnsblog[17936]: addr 63.80.185.36 listed by domain zen.spamhaus.org as 127.0.0.3 Feb 6 21:04:18 mxgate1 postfix/dnsblog[17938]: addr 63.80.185.36 listed by domain bl.spamcop.net as 127.0.0.2 Feb 6 21:04:18 mxgate1 postfix/dnsblog[17937]: addr 63.80.185.36 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Feb 6 21:04:24 mxgate1 postfix/postscreen[18965]: DNSBL rank 4 for [63.80.185.36]:49555 Feb x@x Feb 6 21:04:25 mxgate1 postfix/postscreen[18965]: DISCONNECT [63.80.185.36]:49555 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=63.80.185.36 |
2020-02-07 04:39:14 |
| 61.141.64.29 | attack | Brute force blocker - service: proftpd1 - aantal: 39 - Sun Jan 13 11:55:08 2019 |
2020-02-07 04:34:43 |
| 154.8.231.250 | attackbots | Feb 6 20:57:23 lnxmysql61 sshd[2348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.231.250 Feb 6 20:57:23 lnxmysql61 sshd[2348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.231.250 |
2020-02-07 04:33:34 |
| 27.50.79.25 | attackspam | ET SCAN NMAP SIP Version Detect OPTIONS Scan Attempted Information Leak OS-OTHER Bash CGI environment variable injection attempt Attempted Administrator Privilege Gain POLICY-OTHER PHP uri tag injection attempt Web Application Attack SERVER-WEBAPP WebNMS Framework directory traversal attempt Attempted Administrator Privilege Gain SERVER-WEBAPP Ulterius web server directory traversal attempt Web Application Attack SERVER-WEBAPP Siemens IP-Camera credential disclosure attempt Attempted Administrator Privilege Gain Directory access attempt to GET /etc/passwd (custom wwwssa query 2) Web Application Attack SQL union select - possible sql injection attempt - GET parameter Misc Attack SQL url ending in comment characters - possible sql injection attempt Web Application Attack Directory access attempt (XSS_attempt) to |