City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 35.242.50.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33298
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;35.242.50.214. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 15:34:38 CST 2025
;; MSG SIZE rcvd: 106214.50.242.35.in-addr.arpa domain name pointer 214.50.242.35.bc.googleusercontent.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
214.50.242.35.in-addr.arpa name = 214.50.242.35.bc.googleusercontent.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 111.73.46.104 | attackbotsspam | *Port Scan* detected from 111.73.46.104 (CN/China/-). 4 hits in the last 295 seconds |
2019-07-10 12:43:00 |
| 156.209.159.132 | attack | Jul 10 02:25:07 srv-4 sshd\[31497\]: Invalid user admin from 156.209.159.132 Jul 10 02:25:07 srv-4 sshd\[31497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.209.159.132 Jul 10 02:25:09 srv-4 sshd\[31497\]: Failed password for invalid user admin from 156.209.159.132 port 42770 ssh2 ... |
2019-07-10 12:33:29 |
| 153.36.242.114 | attackspam | Jul 5 06:25:45 lvps92-51-164-246 sshd[10518]: User r.r from 153.36.242.114 not allowed because not listed in AllowUsers Jul 5 06:25:45 lvps92-51-164-246 sshd[10518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.242.114 user=r.r Jul 5 06:25:47 lvps92-51-164-246 sshd[10518]: Failed password for invalid user r.r from 153.36.242.114 port 59960 ssh2 Jul 5 06:25:54 lvps92-51-164-246 sshd[10518]: Received disconnect from 153.36.242.114: 11: [preauth] Jul 5 06:25:54 lvps92-51-164-246 sshd[10518]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.242.114 user=r.r Jul 5 06:26:14 lvps92-51-164-246 sshd[10522]: User r.r from 153.36.242.114 not allowed because not listed in AllowUsers Jul 5 06:26:14 lvps92-51-164-246 sshd[10522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.242.114 user=r.r Jul 5 06:26:16 lvps92-51-164-246 sshd[10522]: F........ ------------------------------- |
2019-07-10 12:12:51 |
| 109.66.235.1 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 19:51:49,042 INFO [shellcode_manager] (109.66.235.1) no match, writing hexdump (d3cef9b34f9a65e7a4e853042b85e25c :2112205) - MS17010 (EternalBlue) |
2019-07-10 12:07:20 |
| 190.73.114.102 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 19:56:50,741 INFO [shellcode_manager] (190.73.114.102) no match, writing hexdump (751c1ee47b283e83505ecb6df370fb92 :2199330) - MS17010 (EternalBlue) |
2019-07-10 12:38:47 |
| 193.169.252.143 | attackspam | Jul 10 04:01:36 mail postfix/smtpd\[28298\]: warning: unknown\[193.169.252.143\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 10 04:40:12 mail postfix/smtpd\[28944\]: warning: unknown\[193.169.252.143\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 10 04:59:27 mail postfix/smtpd\[29084\]: warning: unknown\[193.169.252.143\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 10 05:18:54 mail postfix/smtpd\[29545\]: warning: unknown\[193.169.252.143\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2019-07-10 12:47:54 |
| 103.52.52.22 | attack | Reported by AbuseIPDB proxy server. |
2019-07-10 12:08:08 |
| 139.59.56.121 | attackspam | Jul 10 05:20:22 XXX sshd[54715]: Invalid user thaiset from 139.59.56.121 port 53474 |
2019-07-10 12:06:14 |
| 201.243.226.154 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 20:05:19,343 INFO [shellcode_manager] (201.243.226.154) no match, writing hexdump (d863bce569ad7f3dfa01154c860f56ee :2132037) - MS17010 (EternalBlue) |
2019-07-10 12:04:04 |
| 117.131.40.208 | attackbotsspam | *Port Scan* detected from 117.131.40.208 (CN/China/-). 4 hits in the last 195 seconds |
2019-07-10 12:38:18 |
| 180.120.192.51 | attack | TCP port 23 (Telnet) attempt blocked by firewall. [2019-07-10 01:25:54] |
2019-07-10 11:58:57 |
| 104.244.79.33 | attackbotsspam | " " |
2019-07-10 12:22:57 |
| 95.213.177.122 | attack | Jul 10 02:08:13 TCP Attack: SRC=95.213.177.122 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=240 PROTO=TCP SPT=44492 DPT=65531 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-07-10 12:13:45 |
| 165.22.96.158 | attack | Jul 10 06:13:21 fr01 sshd[18585]: Invalid user sameer from 165.22.96.158 Jul 10 06:13:21 fr01 sshd[18585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.96.158 Jul 10 06:13:21 fr01 sshd[18585]: Invalid user sameer from 165.22.96.158 Jul 10 06:13:23 fr01 sshd[18585]: Failed password for invalid user sameer from 165.22.96.158 port 54588 ssh2 Jul 10 06:15:17 fr01 sshd[18894]: Invalid user nvidia from 165.22.96.158 ... |
2019-07-10 12:35:48 |
| 93.42.75.89 | attack | SSHD brute force attack detected by fail2ban |
2019-07-10 12:45:10 |