City: Bonn
Region: North Rhine-Westphalia
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 31.212.2.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37284
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;31.212.2.27. IN A
;; AUTHORITY SECTION:
. 589 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020030201 1800 900 604800 86400
;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 03 03:49:27 CST 2020
;; MSG SIZE rcvd: 115Host 27.2.212.31.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 27.2.212.31.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 198.108.67.108 | attack | Port scan: Attack repeated for 24 hours |
2019-08-13 04:39:43 |
| 203.156.197.127 | attack | 445/tcp 445/tcp 445/tcp... [2019-06-24/08-12]12pkt,1pt.(tcp) |
2019-08-13 04:09:05 |
| 103.218.170.110 | attackbots | Aug 12 16:49:04 cp sshd[18238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.218.170.110 |
2019-08-13 04:34:34 |
| 118.126.96.180 | attackbots | fail2ban honeypot |
2019-08-13 04:26:39 |
| 5.188.206.250 | attack | Aug 12 19:54:03 h2177944 kernel: \[3956205.084532\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.206.250 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=24553 PROTO=TCP SPT=46156 DPT=3292 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 12 19:54:32 h2177944 kernel: \[3956233.919120\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.206.250 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=61278 PROTO=TCP SPT=46156 DPT=3253 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 12 19:58:09 h2177944 kernel: \[3956450.848400\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.206.250 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=10284 PROTO=TCP SPT=46156 DPT=3348 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 12 20:12:10 h2177944 kernel: \[3957291.340273\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.206.250 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=28568 PROTO=TCP SPT=46156 DPT=3199 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 12 20:19:10 h2177944 kernel: \[3957711.388464\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.206.250 DST=85.214.117.9 |
2019-08-13 04:29:06 |
| 46.101.17.215 | attackspam | Automatic report - Banned IP Access |
2019-08-13 04:33:46 |
| 198.160.245.99 | attack | Aug 12 17:41:39 MK-Soft-VM7 sshd\[30820\]: Invalid user ivone from 198.160.245.99 port 53784 Aug 12 17:41:39 MK-Soft-VM7 sshd\[30820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.160.245.99 Aug 12 17:41:41 MK-Soft-VM7 sshd\[30820\]: Failed password for invalid user ivone from 198.160.245.99 port 53784 ssh2 ... |
2019-08-13 04:34:11 |
| 45.118.145.51 | attack | $f2bV_matches |
2019-08-13 04:08:02 |
| 211.210.13.201 | attackbotsspam | Aug 12 20:10:19 XXX sshd[27193]: Invalid user teamspeak from 211.210.13.201 port 51416 |
2019-08-13 04:36:53 |
| 213.186.244.4 | attackspambots | Aug 12 06:49:00 askasleikir sshd[12807]: Failed password for root from 213.186.244.4 port 43438 ssh2 |
2019-08-13 04:17:33 |
| 213.74.203.106 | attackspam | 2019-08-12T21:34:12.871587centos sshd\[18754\]: Invalid user nagios from 213.74.203.106 port 44580 2019-08-12T21:34:12.877844centos sshd\[18754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.74.203.106 2019-08-12T21:34:14.793861centos sshd\[18754\]: Failed password for invalid user nagios from 213.74.203.106 port 44580 ssh2 |
2019-08-13 04:00:13 |
| 122.11.149.224 | attackbots | 445/tcp 445/tcp 445/tcp... [2019-06-12/08-12]18pkt,1pt.(tcp) |
2019-08-13 04:29:21 |
| 93.170.55.11 | attack | 23/tcp 23/tcp 23/tcp [2019-07-17/08-12]3pkt |
2019-08-13 04:05:09 |
| 64.187.186.163 | attack | 445/tcp 445/tcp 445/tcp... [2019-06-11/08-12]15pkt,1pt.(tcp) |
2019-08-13 04:16:53 |
| 218.148.41.48 | attack | Aug 12 06:54:43 askasleikir sshd[12931]: Failed password for invalid user office from 218.148.41.48 port 35498 ssh2 |
2019-08-13 04:17:09 |