City: unknown
Region: unknown
Country: Israel
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.129.125.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35532
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.129.125.149. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 03:04:16 CST 2022
;; MSG SIZE rcvd: 107b'Host 149.125.129.45.in-addr.arpa not found: 2(SERVFAIL)
';; Got SERVFAIL reply from 183.60.82.98, trying next server
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 149.125.129.45.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.3.139.85 | attack | Unauthorized connection attempt detected from IP address 218.3.139.85 to port 2220 [J] |
2020-01-13 09:26:31 |
| 200.29.132.214 | attack | " " |
2020-01-13 09:17:09 |
| 185.209.0.91 | attackbots | Jan 13 06:06:33 debian-2gb-nbg1-2 kernel: \[1151297.368711\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.209.0.91 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=27026 PROTO=TCP SPT=42494 DPT=3905 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-01-13 13:08:05 |
| 109.57.86.21 | attack | Jan 12 21:18:17 xxx sshd[29363]: Invalid user testing from 109.57.86.21 Jan 12 21:18:19 xxx sshd[29363]: Failed password for invalid user testing from 109.57.86.21 port 35318 ssh2 Jan 12 22:06:26 xxx sshd[32327]: Invalid user wp from 109.57.86.21 Jan 12 22:06:29 xxx sshd[32327]: Failed password for invalid user wp from 109.57.86.21 port 52430 ssh2 Jan 12 22:18:24 xxx sshd[742]: Invalid user redmine from 109.57.86.21 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=109.57.86.21 |
2020-01-13 09:31:56 |
| 167.99.75.174 | attackspam | Jan 13 01:15:17 flomail sshd[32175]: Invalid user dummy from 167.99.75.174 Jan 13 01:16:19 flomail sshd[32468]: Invalid user webmaster from 167.99.75.174 Jan 13 01:17:24 flomail sshd[32551]: Invalid user postgres from 167.99.75.174 |
2020-01-13 09:25:26 |
| 150.107.24.134 | attack | Portscan or hack attempt detected by psad/fwsnort |
2020-01-13 13:12:34 |
| 165.22.78.222 | attackspam | Unauthorized connection attempt detected from IP address 165.22.78.222 to port 2220 [J] |
2020-01-13 09:31:23 |
| 85.207.32.51 | attack | Jan 13 03:48:16 hosting sshd[15880]: Invalid user connie from 85.207.32.51 port 42826 ... |
2020-01-13 09:12:49 |
| 89.248.168.63 | attackbotsspam | Fail2Ban Ban Triggered |
2020-01-13 13:05:46 |
| 92.118.37.99 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 93 - port: 37601 proto: TCP cat: Misc Attack |
2020-01-13 09:10:36 |
| 222.186.180.142 | attackbotsspam | Jan 13 06:00:59 h2177944 sshd\[1199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.142 user=root Jan 13 06:01:01 h2177944 sshd\[1199\]: Failed password for root from 222.186.180.142 port 60467 ssh2 Jan 13 06:01:03 h2177944 sshd\[1199\]: Failed password for root from 222.186.180.142 port 60467 ssh2 Jan 13 06:01:05 h2177944 sshd\[1199\]: Failed password for root from 222.186.180.142 port 60467 ssh2 ... |
2020-01-13 13:09:28 |
| 61.41.159.29 | attackbotsspam | SSH bruteforce (Triggered fail2ban) |
2020-01-13 09:19:40 |
| 222.186.30.57 | attackbotsspam | Jan 12 23:35:03 debian sshd[3646]: Unable to negotiate with 222.186.30.57 port 35367: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jan 13 00:04:17 debian sshd[5024]: Unable to negotiate with 222.186.30.57 port 20894: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2020-01-13 13:11:40 |
| 152.253.80.250 | attackbotsspam | Jan 12 22:13:08 v32671 sshd[6764]: Address 152.253.80.250 maps to 152-253-80-250.user.vivozap.com.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jan 12 22:13:08 v32671 sshd[6764]: Received disconnect from 152.253.80.250: 11: Bye Bye [preauth] Jan 12 22:13:10 v32671 sshd[6766]: Address 152.253.80.250 maps to 152-253-80-250.user.vivozap.com.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jan 12 22:13:11 v32671 sshd[6766]: Received disconnect from 152.253.80.250: 11: Bye Bye [preauth] Jan 12 22:13:13 v32671 sshd[6768]: Address 152.253.80.250 maps to 152-253-80-250.user.vivozap.com.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jan 12 22:13:13 v32671 sshd[6768]: Invalid user ubnt from 152.253.80.250 Jan 12 22:13:13 v32671 sshd[6768]: Received disconnect from 152.253.80.250: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=152.253.80.250 |
2020-01-13 09:12:09 |
| 80.213.194.37 | attackbotsspam | $f2bV_matches |
2020-01-13 13:01:14 |