City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 252.239.254.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11920
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;252.239.254.213. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 10:38:42 CST 2025
;; MSG SIZE rcvd: 108Host 213.254.239.252.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 213.254.239.252.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.2.210.229 | attack | B: Magento admin pass test (wrong country) |
2019-11-14 23:59:01 |
| 186.215.100.50 | attackbotsspam | SPAM Delivery Attempt |
2019-11-15 00:23:37 |
| 203.195.245.13 | attackbots | Nov 14 17:05:26 vps666546 sshd\[25693\]: Invalid user 123321 from 203.195.245.13 port 46790 Nov 14 17:05:26 vps666546 sshd\[25693\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.245.13 Nov 14 17:05:28 vps666546 sshd\[25693\]: Failed password for invalid user 123321 from 203.195.245.13 port 46790 ssh2 Nov 14 17:11:09 vps666546 sshd\[26042\]: Invalid user barnickel from 203.195.245.13 port 54090 Nov 14 17:11:09 vps666546 sshd\[26042\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.245.13 ... |
2019-11-15 00:18:49 |
| 178.128.55.52 | attackspam | 2019-11-14T15:44:30.234587abusebot-5.cloudsearch.cf sshd\[5074\]: Invalid user robert from 178.128.55.52 port 58372 |
2019-11-15 00:17:14 |
| 129.213.40.57 | attack | detected by Fail2Ban |
2019-11-14 23:50:48 |
| 223.247.223.39 | attack | Nov 14 11:09:37 server sshd\[8461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.223.39 user=root Nov 14 11:09:38 server sshd\[8461\]: Failed password for root from 223.247.223.39 port 42904 ssh2 Nov 14 19:04:54 server sshd\[4038\]: Invalid user backup from 223.247.223.39 Nov 14 19:04:54 server sshd\[4038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.223.39 Nov 14 19:04:56 server sshd\[4038\]: Failed password for invalid user backup from 223.247.223.39 port 52680 ssh2 ... |
2019-11-15 00:24:38 |
| 164.52.24.178 | attack | firewall-block, port(s): 444/tcp |
2019-11-14 23:56:51 |
| 159.203.83.217 | attackspambots | 8080/tcp... [2019-11-05/14]8pkt,2pt.(tcp) |
2019-11-14 23:52:28 |
| 118.25.98.75 | attackbots | Nov 14 17:06:14 sd-53420 sshd\[7349\]: Invalid user tq from 118.25.98.75 Nov 14 17:06:15 sd-53420 sshd\[7349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.98.75 Nov 14 17:06:16 sd-53420 sshd\[7349\]: Failed password for invalid user tq from 118.25.98.75 port 46952 ssh2 Nov 14 17:11:13 sd-53420 sshd\[8793\]: User root from 118.25.98.75 not allowed because none of user's groups are listed in AllowGroups Nov 14 17:11:13 sd-53420 sshd\[8793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.98.75 user=root ... |
2019-11-15 00:20:34 |
| 103.133.108.33 | attackspambots | Nov 14 10:34:40 targaryen sshd[31273]: Invalid user admin from 103.133.108.33 Nov 14 10:34:40 targaryen sshd[31275]: Invalid user support from 103.133.108.33 Nov 14 10:34:40 targaryen sshd[31277]: Invalid user admin from 103.133.108.33 Nov 14 10:34:41 targaryen sshd[31279]: Invalid user system from 103.133.108.33 Nov 14 10:34:41 targaryen sshd[31283]: Invalid user admin from 103.133.108.33 Nov 14 10:34:41 targaryen sshd[31281]: Invalid user support from 103.133.108.33 ... |
2019-11-15 00:04:00 |
| 106.13.34.212 | attackspam | 2019-11-14T15:16:21.895316abusebot-4.cloudsearch.cf sshd\[3425\]: Invalid user tomcat1 from 106.13.34.212 port 49916 |
2019-11-14 23:50:33 |
| 51.68.137.26 | attackspambots | Nov 14 15:32:03 vps58358 sshd\[7943\]: Invalid user apache from 51.68.137.26Nov 14 15:32:06 vps58358 sshd\[7943\]: Failed password for invalid user apache from 51.68.137.26 port 57136 ssh2Nov 14 15:36:04 vps58358 sshd\[7962\]: Invalid user hidding from 51.68.137.26Nov 14 15:36:06 vps58358 sshd\[7962\]: Failed password for invalid user hidding from 51.68.137.26 port 38992 ssh2Nov 14 15:39:56 vps58358 sshd\[8033\]: Invalid user eugen from 51.68.137.26Nov 14 15:39:58 vps58358 sshd\[8033\]: Failed password for invalid user eugen from 51.68.137.26 port 49082 ssh2 ... |
2019-11-15 00:18:14 |
| 92.50.151.170 | attack | 2019-11-14T15:42:22.380600abusebot-4.cloudsearch.cf sshd\[3478\]: Invalid user georgiana from 92.50.151.170 port 51770 |
2019-11-15 00:10:28 |
| 188.131.173.220 | attack | Nov 14 15:29:52 vps sshd[25742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.173.220 Nov 14 15:29:53 vps sshd[25742]: Failed password for invalid user saloni from 188.131.173.220 port 46998 ssh2 Nov 14 15:40:24 vps sshd[26212]: Failed password for root from 188.131.173.220 port 47422 ssh2 ... |
2019-11-14 23:54:51 |
| 58.64.157.132 | attack | From: Digital Federal Credit Union [mailto:onlinemessage@armstong.com] DCU phishing/fraud; illicit use of entity name/credentials/copyright. Unsolicited bulk spam - zid-vpns-8-48.uibk.ac.at, University Of Innsbruck - 138.232.8.48 Spam link www.28niubi1.com = 58.64.157.132 NWT iDC Data Service – BLACKLISTED - phishing redirect: - northernexpressions.com.au = 104.247.75.218 InMotion Hosting, Inc. Appear to redirect/replicate valid DCU web site: - Spam link u6118461.ct.sendgrid.net = repeat IP 167.89.123.16, 167.89.115.54, 167.89.118.35 – SendGrid - Spam link media.whatcounts.com = 99.84.13.60, 99.84.13.158, 99.84.13.67, 99.84.13.207 – Amazon |
2019-11-15 00:22:13 |