City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 30.21.68.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6910
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;30.21.68.31. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 20:38:42 CST 2025
;; MSG SIZE rcvd: 104Host 31.68.21.30.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 31.68.21.30.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 119.82.253.47 | attackspambots | Hacked my steam acc |
2019-07-14 07:11:27 |
| 158.69.37.5 | attackspam | WordPress brute force |
2019-07-14 07:24:18 |
| 187.188.169.123 | attack | Jul 14 00:20:07 v22018076622670303 sshd\[16469\]: Invalid user yq from 187.188.169.123 port 48486 Jul 14 00:20:07 v22018076622670303 sshd\[16469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.188.169.123 Jul 14 00:20:10 v22018076622670303 sshd\[16469\]: Failed password for invalid user yq from 187.188.169.123 port 48486 ssh2 ... |
2019-07-14 07:08:27 |
| 47.91.57.207 | attack | Automatic report - Port Scan Attack |
2019-07-14 06:56:52 |
| 209.85.160.194 | attackspambots | Claimed to be from Apple ID |
2019-07-14 06:54:09 |
| 180.180.243.223 | attackbotsspam | Web app attack attempts, scanning for vulnerability. Date: 2019 Jul 13. 10:46:24 Source IP: 180.180.243.223 Portion of the log(s): 180.180.243.223 - [13/Jul/2019:10:46:23 +0200] "GET /shell.php HTTP/1.1" 404 548 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)" 180.180.243.223 - [13/Jul/2019:10:46:12 +0200] GET /pmd_online.php 180.180.243.223 - [13/Jul/2019:10:46:12 +0200] GET /hell.php 180.180.243.223 - [13/Jul/2019:10:46:12 +0200] GET /log.php 180.180.243.223 - [13/Jul/2019:10:46:12 +0200] GET /license.php 180.180.243.223 - [13/Jul/2019:10:46:11 +0200] GET /help-e.php 180.180.243.223 - [13/Jul/2019:10:46:11 +0200] GET /logon.php 180.180.243.223 - [13/Jul/2019:10:46:11 +0200] GET /db_pma.php 180.180.243.223 - [13/Jul/2019:10:46:11 +0200] GET /db_cts.php 180.180.243.223 - [13/Jul/2019:10:46:11 +0200] GET /test.php 180.180.243.223 - [13/Jul/2019:10:46:10 +0200] GET /_query.php 180.180.243.223 - [13/Jul/2019:10:46:10 +0200] GET /java.php .... |
2019-07-14 07:19:42 |
| 124.47.21.22 | attack | Telnet Server BruteForce Attack |
2019-07-14 07:05:11 |
| 176.235.248.186 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-13 13:27:40,513 INFO [shellcode_manager] (176.235.248.186) no match, writing hexdump (cd4698be7e5d77c124c8075d28823f02 :2541018) - MS17010 (EternalBlue) |
2019-07-14 06:57:38 |
| 218.92.0.155 | attackspambots | Jul 14 00:22:20 lnxmysql61 sshd[28087]: Failed password for root from 218.92.0.155 port 19964 ssh2 Jul 14 00:22:23 lnxmysql61 sshd[28087]: Failed password for root from 218.92.0.155 port 19964 ssh2 Jul 14 00:22:26 lnxmysql61 sshd[28087]: Failed password for root from 218.92.0.155 port 19964 ssh2 Jul 14 00:22:28 lnxmysql61 sshd[28087]: Failed password for root from 218.92.0.155 port 19964 ssh2 |
2019-07-14 06:55:30 |
| 31.184.238.120 | attackspambots | Looking for resource vulnerabilities |
2019-07-14 07:02:53 |
| 149.129.226.94 | attackbotsspam | Automatic report - Port Scan Attack |
2019-07-14 06:46:07 |
| 5.234.232.0 | attackbots | Automatic report - Port Scan Attack |
2019-07-14 06:47:24 |
| 91.134.138.193 | attackspam | Automatic report - Banned IP Access |
2019-07-14 06:59:32 |
| 37.251.146.89 | attack | RDP Bruteforce |
2019-07-14 07:07:23 |
| 14.230.58.156 | attack | Lines containing failures of 14.230.58.156 Jul 13 16:56:41 mellenthin postfix/smtpd[7337]: warning: hostname static.vnpt.vn does not resolve to address 14.230.58.156 Jul 13 16:56:41 mellenthin postfix/smtpd[7337]: connect from unknown[14.230.58.156] Jul x@x Jul 13 16:56:42 mellenthin postfix/smtpd[7337]: lost connection after DATA from unknown[14.230.58.156] Jul 13 16:56:42 mellenthin postfix/smtpd[7337]: disconnect from unknown[14.230.58.156] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.230.58.156 |
2019-07-14 06:59:58 |