City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 63.89.1.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55534
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;63.89.1.70. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 17:06:46 CST 2025
;; MSG SIZE rcvd: 103
Host 70.1.89.63.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 70.1.89.63.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.122.85.244 | attack | *Port Scan* detected from 134.122.85.244 (US/United States/-). 3 hits in the last 60 seconds; Ports: *; Direction: in; Trigger: PS_LIMIT; Logs: Apr 23 06:49:23 robby kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=12:02:c8:b9:10:34:00:0f:f8:73:88:c0:08:00 SRC=134.122.85.244 DST=69.195.129.246 LEN=445 TOS=0x00 PREC=0x00 TTL=53 ID=29979 DF PROTO=UDP SPT=5072 DPT=5060 LEN=425 Apr 23 06:49:23 robby kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=12:02:c8:b9:10:34:00:0f:f8:73:88:c0:08:00 SRC=134.122.85.244 DST=69.195.129.246 LEN=442 TOS=0x00 PREC=0x00 TTL=52 ID=29980 DF PROTO=UDP SPT=5072 DPT=5061 LEN=422 Apr 23 06:49:23 robby kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=12:02:c8:b9:10:34:00:0f:f8:73:88:c0:08:00 SRC=134.122.85.244 DST=69.195.129.246 LEN=445 TOS=0x00 PREC=0x00 TTL=53 ID=29982 DF PROTO=UDP SPT=5072 DPT=5070 LEN=425 |
2020-04-23 19:13:47 |
| 92.118.37.53 | attackspambots | 04/23/2020-06:31:49.020590 92.118.37.53 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-04-23 19:18:44 |
| 64.225.14.108 | attackbotsspam | Apr 23 12:38:29 host sshd[44513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.14.108 user=root Apr 23 12:38:31 host sshd[44513]: Failed password for root from 64.225.14.108 port 51296 ssh2 ... |
2020-04-23 19:31:13 |
| 34.67.254.99 | attackspambots | firewall-block, port(s): 17191/tcp |
2020-04-23 19:38:32 |
| 45.70.216.74 | attack | firewall-block, port(s): 6201/tcp |
2020-04-23 19:34:54 |
| 80.82.77.189 | attack | 04/23/2020-06:08:50.806501 80.82.77.189 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-04-23 19:23:29 |
| 185.202.1.159 | attackbotsspam | ET DROP Dshield Block Listed Source group 1 - port: 10000 proto: TCP cat: Misc Attack |
2020-04-23 19:43:59 |
| 5.135.253.172 | attack | Unauthorized connection attempt detected from IP address 5.135.253.172 to port 7751 [T] |
2020-04-23 19:40:26 |
| 216.218.206.91 | attackspambots | GPL RPC portmap listing UDP 111 - port: 111 proto: UDP cat: Decode of an RPC Query |
2020-04-23 19:42:22 |
| 51.91.56.130 | attackspambots | 04/23/2020-05:07:08.969412 51.91.56.130 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-04-23 19:32:47 |
| 78.22.61.76 | attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 63 - port: 23 proto: TCP cat: Misc Attack |
2020-04-23 19:26:52 |
| 31.134.209.80 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 12 - port: 26291 proto: TCP cat: Misc Attack |
2020-04-23 19:39:05 |
| 185.202.1.155 | attackspam | ET DROP Dshield Block Listed Source group 1 - port: 10000 proto: TCP cat: Misc Attack |
2020-04-23 19:45:49 |
| 185.202.1.151 | attack | ET DROP Dshield Block Listed Source group 1 - port: 10000 proto: TCP cat: Misc Attack |
2020-04-23 19:47:45 |
| 103.145.12.25 | attackbots | MultiHost/MultiPort Probe, Scan, Hack - |
2020-04-23 19:15:31 |