City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 27.30.89.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46491
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;27.30.89.74. IN A
;; AUTHORITY SECTION:
. 28 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 22:47:36 CST 2025
;; MSG SIZE rcvd: 104Host 74.89.30.27.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 74.89.30.27.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 173.0.37.130 | attackbotsspam | [portscan] tcp/1433 [MsSQL] [scan/connect: 2 time(s)] *(RWIN=8192)(04301449) |
2020-05-01 00:09:54 |
| 112.212.109.69 | attackbots | [portscan] tcp/23 [TELNET] *(RWIN=23652)(04301449) |
2020-04-30 23:50:32 |
| 36.91.175.212 | attackbotsspam | [portscan] tcp/1433 [MsSQL] *(RWIN=1024)(04301449) |
2020-05-01 00:28:54 |
| 218.56.158.88 | attackspam | 1433/tcp 1433/tcp 1433/tcp... [2020-04-13/30]5pkt,1pt.(tcp) |
2020-05-01 00:32:49 |
| 94.242.171.220 | attackbots | Port probing on unauthorized port 23 |
2020-05-01 00:19:09 |
| 78.186.200.80 | attack | [portscan] tcp/23 [TELNET] *(RWIN=4459)(04301449) |
2020-05-01 00:21:30 |
| 49.88.112.65 | attack | Apr 30 17:36:26 vps sshd[279419]: Failed password for root from 49.88.112.65 port 64243 ssh2 Apr 30 17:36:28 vps sshd[279419]: Failed password for root from 49.88.112.65 port 64243 ssh2 Apr 30 17:39:19 vps sshd[291750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.65 user=root Apr 30 17:39:21 vps sshd[291750]: Failed password for root from 49.88.112.65 port 48228 ssh2 Apr 30 17:39:23 vps sshd[291750]: Failed password for root from 49.88.112.65 port 48228 ssh2 ... |
2020-04-30 23:58:49 |
| 209.141.33.231 | attackspam | [portscan] tcp/22 [SSH] [scan/connect: 3 time(s)] in blocklist.de:'listed [ssh]' *(RWIN=65535)(04301449) |
2020-05-01 00:34:01 |
| 45.95.168.254 | attack | [portscan] tcp/22 [SSH] in blocklist.de:'listed [ssh]' *(RWIN=65535)(04301449) |
2020-05-01 00:28:12 |
| 117.159.5.113 | attack | [portscan] tcp/1433 [MsSQL] *(RWIN=1024)(04301449) |
2020-05-01 00:13:36 |
| 185.125.32.102 | attackbotsspam | [portscan] tcp/1433 [MsSQL] [scan/connect: 2 time(s)] *(RWIN=8192)(04301449) |
2020-05-01 00:07:02 |
| 139.162.120.76 | attackbots | [portscan] tcp/81 [alter-web/web-proxy] *(RWIN=65535)(04301449) |
2020-05-01 00:11:50 |
| 54.91.82.218 | attackbots | [portscan] tcp/81 [alter-web/web-proxy] *(RWIN=43521)(04301449) |
2020-05-01 00:24:43 |
| 92.118.37.70 | attack | scans 2 times in preceeding hours on the ports (in chronological order) 3389 3389 resulting in total of 18 scans from 92.118.37.0/24 block. |
2020-04-30 23:51:49 |
| 59.63.10.144 | attackbots | [portscan] tcp/23 [TELNET] *(RWIN=52841)(04301449) |
2020-04-30 23:56:27 |