City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 6.252.78.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2733
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;6.252.78.99. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 23:50:32 CST 2025
;; MSG SIZE rcvd: 104Host 99.78.252.6.in-addr.arpa not found: 2(SERVFAIL)
server can't find 6.252.78.99.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.176.27.6 | attack | Dec 22 09:27:51 h2177944 kernel: \[202063.438727\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.6 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=9198 PROTO=TCP SPT=43570 DPT=23130 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 22 09:27:51 h2177944 kernel: \[202063.438741\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.6 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=9198 PROTO=TCP SPT=43570 DPT=23130 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 22 09:28:26 h2177944 kernel: \[202098.500319\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.6 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=53590 PROTO=TCP SPT=43570 DPT=21548 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 22 09:28:26 h2177944 kernel: \[202098.500333\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.6 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=53590 PROTO=TCP SPT=43570 DPT=21548 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 22 09:39:39 h2177944 kernel: \[202771.409483\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.6 DST=85.214.117.9 LEN=40 |
2019-12-22 17:17:00 |
| 103.1.209.245 | attackspam | Dec 22 07:27:48 ArkNodeAT sshd\[27963\]: Invalid user test from 103.1.209.245 Dec 22 07:27:48 ArkNodeAT sshd\[27963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.1.209.245 Dec 22 07:27:49 ArkNodeAT sshd\[27963\]: Failed password for invalid user test from 103.1.209.245 port 32276 ssh2 |
2019-12-22 17:27:46 |
| 189.213.12.177 | attackspambots | Automatic report - Port Scan Attack |
2019-12-22 17:22:18 |
| 67.199.254.216 | attackbots | Dec 21 23:29:28 web1 sshd\[25132\]: Invalid user traficant from 67.199.254.216 Dec 21 23:29:28 web1 sshd\[25132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.199.254.216 Dec 21 23:29:30 web1 sshd\[25132\]: Failed password for invalid user traficant from 67.199.254.216 port 65138 ssh2 Dec 21 23:34:47 web1 sshd\[25666\]: Invalid user narcisse from 67.199.254.216 Dec 21 23:34:47 web1 sshd\[25666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.199.254.216 |
2019-12-22 17:36:51 |
| 14.243.199.145 | attackspambots | Unauthorized IMAP connection attempt |
2019-12-22 17:10:43 |
| 54.39.97.17 | attackbots | Dec 22 10:48:12 hosting sshd[29523]: Invalid user science from 54.39.97.17 port 46484 ... |
2019-12-22 17:04:21 |
| 112.85.42.173 | attackspam | 2019-12-22T09:07:44.320868homeassistant sshd[4706]: Failed none for root from 112.85.42.173 port 64169 ssh2 2019-12-22T09:07:44.645521homeassistant sshd[4706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.173 user=root ... |
2019-12-22 17:09:03 |
| 185.203.244.232 | attackbotsspam | Unauthorized connection attempt detected from IP address 185.203.244.232 to port 445 |
2019-12-22 17:05:26 |
| 112.85.42.178 | attack | $f2bV_matches_ltvn |
2019-12-22 17:23:19 |
| 159.89.134.64 | attackspam | 2019-12-22T08:19:57.712046shield sshd\[14014\]: Invalid user QNX from 159.89.134.64 port 47872 2019-12-22T08:19:57.716287shield sshd\[14014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.134.64 2019-12-22T08:20:00.273251shield sshd\[14014\]: Failed password for invalid user QNX from 159.89.134.64 port 47872 ssh2 2019-12-22T08:24:54.954801shield sshd\[15956\]: Invalid user reklev from 159.89.134.64 port 52934 2019-12-22T08:24:54.959204shield sshd\[15956\]: Failed none for invalid user reklev from 159.89.134.64 port 52934 ssh2 |
2019-12-22 17:30:03 |
| 59.120.34.20 | attackspam | 2019-12-22 07:27:47,222 fail2ban.actions: WARNING [ssh] Ban 59.120.34.20 |
2019-12-22 17:32:40 |
| 118.217.181.116 | attack | 12/22/2019-07:28:08.889053 118.217.181.116 Protocol: 6 ET POLICY Cleartext WordPress Login |
2019-12-22 17:14:13 |
| 24.4.128.213 | attack | 2019-12-22T08:38:49.324137shield sshd\[20210\]: Invalid user gast from 24.4.128.213 port 56192 2019-12-22T08:38:49.328361shield sshd\[20210\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-24-4-128-213.hsd1.ca.comcast.net 2019-12-22T08:38:51.296314shield sshd\[20210\]: Failed password for invalid user gast from 24.4.128.213 port 56192 ssh2 2019-12-22T08:45:00.608009shield sshd\[21132\]: Invalid user y from 24.4.128.213 port 32836 2019-12-22T08:45:00.612487shield sshd\[21132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-24-4-128-213.hsd1.ca.comcast.net |
2019-12-22 16:56:48 |
| 34.215.122.24 | attackspambots | 12/22/2019-09:56:02.802440 34.215.122.24 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-12-22 17:06:32 |
| 51.255.51.127 | attackbotsspam | WordPress wp-login brute force :: 51.255.51.127 0.160 BYPASS [22/Dec/2019:06:28:03 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2287 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-12-22 17:19:58 |