City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 63.80.70.229
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4344
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;63.80.70.229. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 00:22:18 CST 2025
;; MSG SIZE rcvd: 105Host 229.70.80.63.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 229.70.80.63.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 81.22.45.11 | attack | Jul 20 09:18:40 h2177944 kernel: \[1931251.632711\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.11 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=23999 PROTO=TCP SPT=59106 DPT=1106 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 20 09:21:10 h2177944 kernel: \[1931401.775788\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.11 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=29483 PROTO=TCP SPT=59106 DPT=1366 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 20 09:22:32 h2177944 kernel: \[1931482.803968\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.11 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=17161 PROTO=TCP SPT=59106 DPT=1271 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 20 09:23:50 h2177944 kernel: \[1931561.643534\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.11 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=48874 PROTO=TCP SPT=59106 DPT=1449 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 20 09:29:03 h2177944 kernel: \[1931873.744059\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.11 DST=85.214.117.9 LEN=40 TO |
2019-07-20 16:52:54 |
| 196.52.43.130 | attackspambots | Splunk® : port scan detected: Jul 19 21:24:05 testbed kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=196.52.43.130 DST=104.248.11.191 LEN=45 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=UDP SPT=61660 DPT=47808 LEN=25 |
2019-07-20 17:15:39 |
| 191.99.110.76 | attackspam | "SMTPD" 4808 16439 "2019-07-20 x@x "SMTPD" 4808 16439 "2019-07-20 03:11:42.934" "191.99.110.76" "SENT: 550 Delivery is not allowed to this address." IP Address: 191.99.110.76 Email x@x No MX record resolves to this server for domain: opvakantievanafmaastricht.nl ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=191.99.110.76 |
2019-07-20 16:46:14 |
| 206.189.232.45 | attack | Jul 20 10:21:51 [host] sshd[13247]: Invalid user web from 206.189.232.45 Jul 20 10:21:51 [host] sshd[13247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.232.45 Jul 20 10:21:53 [host] sshd[13247]: Failed password for invalid user web from 206.189.232.45 port 49496 ssh2 |
2019-07-20 16:51:19 |
| 179.189.190.69 | attackbots | Telnet Server BruteForce Attack |
2019-07-20 17:12:40 |
| 51.254.34.87 | attackbots | Jul 20 04:26:06 localhost sshd\[22444\]: Invalid user ki from 51.254.34.87 port 39842 Jul 20 04:26:06 localhost sshd\[22444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.34.87 ... |
2019-07-20 17:11:04 |
| 202.169.248.142 | attack | email spam |
2019-07-20 16:42:18 |
| 14.207.202.228 | attackspam | SMB Server BruteForce Attack |
2019-07-20 16:56:33 |
| 203.160.91.226 | attackbotsspam | Jul 20 14:03:02 areeb-Workstation sshd\[15011\]: Invalid user marketing from 203.160.91.226 Jul 20 14:03:02 areeb-Workstation sshd\[15011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.160.91.226 Jul 20 14:03:04 areeb-Workstation sshd\[15011\]: Failed password for invalid user marketing from 203.160.91.226 port 51262 ssh2 ... |
2019-07-20 16:46:45 |
| 139.199.48.216 | attackbotsspam | Jul 20 04:32:07 TORMINT sshd\[6157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.48.216 user=root Jul 20 04:32:09 TORMINT sshd\[6157\]: Failed password for root from 139.199.48.216 port 57228 ssh2 Jul 20 04:38:04 TORMINT sshd\[6364\]: Invalid user lt from 139.199.48.216 Jul 20 04:38:04 TORMINT sshd\[6364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.48.216 ... |
2019-07-20 17:01:00 |
| 185.176.26.100 | attackspambots | Splunk® : port scan detected: Jul 20 05:01:00 testbed kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=185.176.26.100 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=6400 PROTO=TCP SPT=41515 DPT=6329 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-07-20 17:02:56 |
| 211.23.160.131 | attackspam | Scanning random ports - tries to find possible vulnerable services |
2019-07-20 17:13:05 |
| 118.67.219.101 | attackspam | 2019-07-20T15:51:28.485006enmeeting.mahidol.ac.th sshd\[24458\]: Invalid user eddy from 118.67.219.101 port 38276 2019-07-20T15:51:28.504865enmeeting.mahidol.ac.th sshd\[24458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.67.219.101 2019-07-20T15:51:30.309423enmeeting.mahidol.ac.th sshd\[24458\]: Failed password for invalid user eddy from 118.67.219.101 port 38276 ssh2 ... |
2019-07-20 17:15:15 |
| 185.143.221.57 | attackspam | Jul 20 11:07:56 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=185.143.221.57 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=65097 PROTO=TCP SPT=59253 DPT=6613 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-07-20 17:12:12 |
| 167.71.15.247 | attack | attacker |
2019-07-20 16:38:59 |