City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 74.114.220.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27274
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;74.114.220.52. IN A
;; AUTHORITY SECTION:
. 114 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2021122600 1800 900 604800 86400
;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 26 17:09:58 CST 2021
;; MSG SIZE rcvd: 106Host 52.220.114.74.in-addr.arpa not found: 2(SERVFAIL)
server can't find 74.114.220.52.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 87.3.124.107 | attack | SSH Scan |
2019-10-22 00:38:38 |
| 185.211.245.170 | attackbotsspam | Oct 21 19:14:30 andromeda postfix/smtpd\[5845\]: warning: unknown\[185.211.245.170\]: SASL PLAIN authentication failed: authentication failure Oct 21 19:14:31 andromeda postfix/smtpd\[5960\]: warning: unknown\[185.211.245.170\]: SASL PLAIN authentication failed: authentication failure Oct 21 19:14:33 andromeda postfix/smtpd\[1711\]: warning: unknown\[185.211.245.170\]: SASL PLAIN authentication failed: authentication failure Oct 21 19:14:34 andromeda postfix/smtpd\[5845\]: warning: unknown\[185.211.245.170\]: SASL PLAIN authentication failed: authentication failure Oct 21 19:14:34 andromeda postfix/smtpd\[1711\]: warning: unknown\[185.211.245.170\]: SASL PLAIN authentication failed: authentication failure |
2019-10-22 01:19:24 |
| 151.84.222.52 | attackbots | 2019-10-21T16:34:55.143296abusebot-5.cloudsearch.cf sshd\[6875\]: Invalid user user from 151.84.222.52 port 33208 |
2019-10-22 00:52:04 |
| 45.136.109.250 | attack | Oct 21 17:14:09 h2177944 kernel: \[4546732.167276\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.250 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=33602 PROTO=TCP SPT=53778 DPT=7218 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 17:35:04 h2177944 kernel: \[4547987.132544\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.250 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=16985 PROTO=TCP SPT=53778 DPT=6123 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 17:52:38 h2177944 kernel: \[4549040.824621\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.250 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=36382 PROTO=TCP SPT=53778 DPT=6867 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 18:07:13 h2177944 kernel: \[4549915.763973\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.250 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=16685 PROTO=TCP SPT=53778 DPT=6821 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 18:09:28 h2177944 kernel: \[4550050.369535\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.250 DST=85.214. |
2019-10-22 00:51:36 |
| 195.206.105.217 | attackspam | Oct 21 18:06:05 rotator sshd\[7915\]: Failed password for root from 195.206.105.217 port 34420 ssh2Oct 21 18:06:07 rotator sshd\[7915\]: Failed password for root from 195.206.105.217 port 34420 ssh2Oct 21 18:06:10 rotator sshd\[7915\]: Failed password for root from 195.206.105.217 port 34420 ssh2Oct 21 18:06:12 rotator sshd\[7915\]: Failed password for root from 195.206.105.217 port 34420 ssh2Oct 21 18:06:15 rotator sshd\[7915\]: Failed password for root from 195.206.105.217 port 34420 ssh2Oct 21 18:06:17 rotator sshd\[7915\]: Failed password for root from 195.206.105.217 port 34420 ssh2 ... |
2019-10-22 01:04:12 |
| 93.174.89.53 | attackbots | IP: 93.174.89.53 ASN: AS202425 IP Volume inc Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 21/10/2019 11:40:09 AM UTC |
2019-10-22 00:56:42 |
| 34.77.252.169 | attack | firewall-block, port(s): 27017/tcp |
2019-10-22 01:04:40 |
| 31.204.0.181 | attackspam | 52869/tcp 60001/tcp 23/tcp... [2019-08-20/10-21]15pkt,3pt.(tcp) |
2019-10-22 01:06:43 |
| 114.237.188.87 | attack | Email spam message |
2019-10-22 01:06:26 |
| 45.174.11.33 | attackbots | firewall-block, port(s): 23/tcp |
2019-10-22 00:49:14 |
| 45.136.109.237 | attack | Oct 21 15:09:32 mc1 kernel: \[2949726.486053\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.237 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=50419 PROTO=TCP SPT=53705 DPT=9651 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 15:10:51 mc1 kernel: \[2949804.708547\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.237 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=18010 PROTO=TCP SPT=53705 DPT=8970 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 15:10:55 mc1 kernel: \[2949808.984009\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.237 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=60593 PROTO=TCP SPT=53705 DPT=9783 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-22 00:58:46 |
| 42.236.220.141 | attack | Time: Mon Oct 21 08:58:14 2019 -0300 IP: 42.236.220.141 (CN/China/hn.kd.ny.adsl) Failures: 5 (smtpauth) Interval: 3600 seconds Blocked: Permanent Block |
2019-10-22 01:03:22 |
| 112.85.42.186 | attack | Oct 21 22:05:32 areeb-Workstation sshd[22253]: Failed password for root from 112.85.42.186 port 34477 ssh2 ... |
2019-10-22 00:46:43 |
| 185.184.24.80 | attack | IP: 185.184.24.80 ASN: AS43260 Dgn Teknoloji A.s. Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 21/10/2019 11:40:00 AM UTC |
2019-10-22 01:07:17 |
| 134.175.103.139 | attack | SSH invalid-user multiple login attempts |
2019-10-22 01:18:40 |