City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 29.211.67.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13072
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;29.211.67.138. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 03:13:16 CST 2025
;; MSG SIZE rcvd: 106
Host 138.67.211.29.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 138.67.211.29.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.176.27.102 | attack | Feb 23 00:57:11 debian-2gb-nbg1-2 kernel: \[4675036.172337\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.102 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=57916 PROTO=TCP SPT=52940 DPT=17296 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-02-23 08:42:53 |
| 114.220.76.79 | attackbots | $f2bV_matches |
2020-02-23 08:52:16 |
| 202.129.210.59 | attackbotsspam | SSH bruteforce |
2020-02-23 08:55:27 |
| 177.1.214.84 | attackbotsspam | Feb 22 19:49:03 plusreed sshd[26548]: Invalid user halflife from 177.1.214.84 ... |
2020-02-23 09:02:16 |
| 177.156.78.24 | attack | Automatic report - Port Scan Attack |
2020-02-23 09:14:29 |
| 172.81.215.106 | attackbots | Feb 22 16:49:00 mockhub sshd[20857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.215.106 Feb 22 16:49:02 mockhub sshd[20857]: Failed password for invalid user oracle from 172.81.215.106 port 51656 ssh2 ... |
2020-02-23 09:02:52 |
| 192.157.231.152 | attackbots | Honeypot attack, port: 445, PTR: 192.157.231.152. |
2020-02-23 08:40:19 |
| 41.93.50.8 | attack | Feb 23 01:35:22 ns382633 sshd\[15326\]: Invalid user handsdata from 41.93.50.8 port 33502 Feb 23 01:35:22 ns382633 sshd\[15326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.93.50.8 Feb 23 01:35:24 ns382633 sshd\[15326\]: Failed password for invalid user handsdata from 41.93.50.8 port 33502 ssh2 Feb 23 01:49:12 ns382633 sshd\[17331\]: Invalid user bananapi from 41.93.50.8 port 51372 Feb 23 01:49:12 ns382633 sshd\[17331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.93.50.8 |
2020-02-23 08:54:57 |
| 122.228.19.79 | attackspam | 22.02.2020 23:44:48 Connection to port 2048 blocked by firewall |
2020-02-23 08:45:01 |
| 139.59.80.65 | attackbots | Feb 23 01:00:52 web8 sshd\[14415\]: Invalid user es from 139.59.80.65 Feb 23 01:00:52 web8 sshd\[14415\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.80.65 Feb 23 01:00:53 web8 sshd\[14415\]: Failed password for invalid user es from 139.59.80.65 port 42042 ssh2 Feb 23 01:03:59 web8 sshd\[16091\]: Invalid user freeswitch from 139.59.80.65 Feb 23 01:03:59 web8 sshd\[16091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.80.65 |
2020-02-23 09:12:50 |
| 51.255.170.237 | attack | 51.255.170.237 - - [23/Feb/2020:04:49:19 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2" ... |
2020-02-23 08:52:32 |
| 222.186.175.202 | attackbots | Feb 23 01:49:08 ns381471 sshd[15968]: Failed password for root from 222.186.175.202 port 26680 ssh2 Feb 23 01:49:23 ns381471 sshd[15968]: error: maximum authentication attempts exceeded for root from 222.186.175.202 port 26680 ssh2 [preauth] |
2020-02-23 08:51:04 |
| 46.101.43.224 | attackbotsspam | Invalid user sinusbot from 46.101.43.224 port 60098 |
2020-02-23 08:37:49 |
| 139.59.211.245 | attackspam | Feb 23 05:49:12 gw1 sshd[25284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.211.245 Feb 23 05:49:14 gw1 sshd[25284]: Failed password for invalid user server-pilotuser from 139.59.211.245 port 57910 ssh2 ... |
2020-02-23 08:53:30 |
| 46.109.84.254 | attack | port scan and connect, tcp 23 (telnet) |
2020-02-23 09:04:53 |