City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 64.136.229.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56469
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;64.136.229.31. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012102 1800 900 604800 86400
;; Query time: 152 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 09:02:47 CST 2025
;; MSG SIZE rcvd: 10631.229.136.64.in-addr.arpa domain name pointer 64-136-229-31.static.ctstelecom.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
31.229.136.64.in-addr.arpa name = 64-136-229-31.static.ctstelecom.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 159.203.197.172 | attackspam | Scanning random ports - tries to find possible vulnerable services |
2019-11-16 17:27:52 |
| 123.16.254.102 | attack | B: Magento admin pass test (wrong country) |
2019-11-16 16:59:53 |
| 118.24.121.240 | attackbotsspam | Nov 15 22:38:46 web1 sshd\[3762\]: Invalid user harrah from 118.24.121.240 Nov 15 22:38:46 web1 sshd\[3762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.121.240 Nov 15 22:38:48 web1 sshd\[3762\]: Failed password for invalid user harrah from 118.24.121.240 port 34359 ssh2 Nov 15 22:43:29 web1 sshd\[4303\]: Invalid user ftpuser from 118.24.121.240 Nov 15 22:43:29 web1 sshd\[4303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.121.240 |
2019-11-16 17:02:59 |
| 109.136.242.203 | attackspam | Nov 16 03:56:55 mailserver dovecot: auth-worker(49491): sql([hidden],109.136.242.203, |
2019-11-16 17:00:27 |
| 201.158.136.208 | attack | Automatic report - Port Scan Attack |
2019-11-16 17:17:09 |
| 213.39.53.241 | attackbotsspam | Nov 16 06:22:41 124388 sshd[18649]: Failed password for root from 213.39.53.241 port 38440 ssh2 Nov 16 06:25:57 124388 sshd[18831]: Invalid user akkermans from 213.39.53.241 port 47410 Nov 16 06:25:57 124388 sshd[18831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.39.53.241 Nov 16 06:25:57 124388 sshd[18831]: Invalid user akkermans from 213.39.53.241 port 47410 Nov 16 06:26:00 124388 sshd[18831]: Failed password for invalid user akkermans from 213.39.53.241 port 47410 ssh2 |
2019-11-16 17:11:37 |
| 207.46.13.24 | attack | Automatic report - Banned IP Access |
2019-11-16 17:16:10 |
| 185.143.223.131 | attackbotsspam | 11/16/2019-03:45:35.495562 185.143.223.131 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-16 17:12:10 |
| 3.121.201.148 | attackbotsspam | 2152/udp 2123/udp 2123/udp [2019-11-14/15]3pkt |
2019-11-16 17:31:29 |
| 116.203.203.73 | attackspambots | Nov 16 09:08:01 server sshd\[13305\]: Invalid user gdm from 116.203.203.73 Nov 16 09:08:01 server sshd\[13305\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.73.203.203.116.clients.your-server.de Nov 16 09:08:04 server sshd\[13305\]: Failed password for invalid user gdm from 116.203.203.73 port 44320 ssh2 Nov 16 09:26:01 server sshd\[18200\]: Invalid user leisa from 116.203.203.73 Nov 16 09:26:01 server sshd\[18200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.73.203.203.116.clients.your-server.de ... |
2019-11-16 17:09:23 |
| 103.53.27.1 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/103.53.27.1/ AF - 1H : (1) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : AF NAME ASN : ASN134134 IP : 103.53.27.1 CIDR : 103.53.27.0/24 PREFIX COUNT : 7 UNIQUE IP COUNT : 2048 ATTACKS DETECTED ASN134134 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-16 07:25:39 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery |
2019-11-16 17:24:42 |
| 23.94.43.107 | attack | /index.php |
2019-11-16 17:20:46 |
| 45.82.153.76 | attackspambots | Nov 16 09:26:16 relay postfix/smtpd\[4672\]: warning: unknown\[45.82.153.76\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 16 09:26:34 relay postfix/smtpd\[1114\]: warning: unknown\[45.82.153.76\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 16 09:27:31 relay postfix/smtpd\[4680\]: warning: unknown\[45.82.153.76\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 16 09:27:50 relay postfix/smtpd\[4672\]: warning: unknown\[45.82.153.76\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 16 09:30:21 relay postfix/smtpd\[6286\]: warning: unknown\[45.82.153.76\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-11-16 16:56:21 |
| 129.28.184.205 | attackspambots | Nov 16 09:10:44 mail sshd[28782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.184.205 Nov 16 09:10:46 mail sshd[28782]: Failed password for invalid user kernel from 129.28.184.205 port 57828 ssh2 Nov 16 09:16:35 mail sshd[29599]: Failed password for root from 129.28.184.205 port 37806 ssh2 |
2019-11-16 16:55:13 |
| 52.82.54.171 | attack | Lines containing failures of 52.82.54.171 Nov 16 08:21:46 shared02 sshd[16542]: Invalid user sock from 52.82.54.171 port 48260 Nov 16 08:21:46 shared02 sshd[16542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.82.54.171 Nov 16 08:21:48 shared02 sshd[16542]: Failed password for invalid user sock from 52.82.54.171 port 48260 ssh2 Nov 16 08:21:48 shared02 sshd[16542]: Received disconnect from 52.82.54.171 port 48260:11: Bye Bye [preauth] Nov 16 08:21:48 shared02 sshd[16542]: Disconnected from invalid user sock 52.82.54.171 port 48260 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=52.82.54.171 |
2019-11-16 16:57:09 |