City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 75.149.29.205
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20983
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;75.149.29.205. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012400 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 25 01:06:34 CST 2025
;; MSG SIZE rcvd: 106
205.29.149.75.in-addr.arpa domain name pointer 75-149-29-205-Pennsylvania.hfc.comcastbusiness.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
205.29.149.75.in-addr.arpa name = 75-149-29-205-Pennsylvania.hfc.comcastbusiness.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 188.17.152.30 | attack | Brute force attempt |
2020-02-05 04:25:45 |
| 106.13.11.238 | attack | Unauthorized connection attempt detected from IP address 106.13.11.238 to port 2220 [J] |
2020-02-05 03:47:57 |
| 172.69.70.131 | attack | SQL injection:/newsites/free/pierre/search/searchSVI.php?continentName=EU+%27-6863+union+all+select+CONCAT(0x3a6f79753a,0x4244764877697569706b,0x3a70687a3a)1,1,1,1,1,1,1,1%23&country=276+&prj_typ=all&startdate=&enddate=&from=&page=1&searchSubmission=Recherche |
2020-02-05 04:09:03 |
| 172.69.68.36 | attackspam | SQL injection:/newsites/free/pierre/search/searchSVI.php?continentName=EU+-6863+union+all+select+CONCAT(0x3a6f79753a,0x4244764877697569706b,0x3a70687a3a)1,1,1,1,1,1,1,1,1%23&country=276+&prj_typ=all&startdate=&enddate=&from=&page=1&searchSubmission=Recherche |
2020-02-05 03:57:40 |
| 42.116.163.199 | attackspambots | Feb 4 14:47:57 grey postfix/smtpd\[17116\]: NOQUEUE: reject: RCPT from unknown\[42.116.163.199\]: 554 5.7.1 Service unavailable\; Client host \[42.116.163.199\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?42.116.163.199\; from=\ |
2020-02-05 04:05:49 |
| 213.148.198.36 | attackbotsspam | Unauthorized connection attempt detected from IP address 213.148.198.36 to port 2220 [J] |
2020-02-05 04:20:29 |
| 39.40.53.60 | attack | Feb 4 14:47:59 grey postfix/smtpd\[26474\]: NOQUEUE: reject: RCPT from unknown\[39.40.53.60\]: 554 5.7.1 Service unavailable\; Client host \[39.40.53.60\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=39.40.53.60\; from=\ |
2020-02-05 03:59:43 |
| 134.209.122.236 | attack | 2019-03-20 12:13:40 1h6ZAC-000077-4o SMTP connection from eggs.coldcaseforums.com \(wakeful.rashidminhaj.icu\) \[134.209.122.236\]:35062 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-20 12:13:57 1h6ZAT-00007W-G3 SMTP connection from eggs.coldcaseforums.com \(dare.rashidminhaj.icu\) \[134.209.122.236\]:38388 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-20 12:16:26 1h6ZCs-0000Du-K7 SMTP connection from eggs.coldcaseforums.com \(meaty.rashidminhaj.icu\) \[134.209.122.236\]:45380 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-20 12:43:48 1h6ZdM-0001Ho-Hg SMTP connection from eggs.coldcaseforums.com \(wakeful.rashidminhaj.icu\) \[134.209.122.236\]:38467 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-20 12:44:44 1h6ZeF-0001Jl-VX SMTP connection from eggs.coldcaseforums.com \(dare.rashidminhaj.icu\) \[134.209.122.236\]:38148 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-20 12:47:24 1h6Zgq-0001Ql-Ph SMTP connection from eggs.coldcaseforums.com \(meaty.ras ... |
2020-02-05 03:56:45 |
| 185.6.172.152 | attackspambots | SSH Brute-Force reported by Fail2Ban |
2020-02-05 04:03:42 |
| 34.251.241.226 | attackspambots | WordPress login Brute force / Web App Attack on client site. |
2020-02-05 04:20:00 |
| 119.252.143.68 | attack | Unauthorized connection attempt detected from IP address 119.252.143.68 to port 2220 [J] |
2020-02-05 04:22:17 |
| 171.34.173.17 | attackbots | Feb 4 21:18:48 sd-53420 sshd\[20790\]: User root from 171.34.173.17 not allowed because none of user's groups are listed in AllowGroups Feb 4 21:18:48 sd-53420 sshd\[20790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.34.173.17 user=root Feb 4 21:18:50 sd-53420 sshd\[20790\]: Failed password for invalid user root from 171.34.173.17 port 39806 ssh2 Feb 4 21:21:05 sd-53420 sshd\[21019\]: User root from 171.34.173.17 not allowed because none of user's groups are listed in AllowGroups Feb 4 21:21:05 sd-53420 sshd\[21019\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.34.173.17 user=root ... |
2020-02-05 04:25:29 |
| 222.186.15.158 | attack | Unauthorized connection attempt detected from IP address 222.186.15.158 to port 22 [J] |
2020-02-05 04:17:19 |
| 185.143.223.97 | attackbots | Feb 4 20:07:46 relay postfix/smtpd\[11631\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.97\]: 554 5.7.1 \ |
2020-02-05 03:52:09 |
| 111.221.54.113 | attack | Unauthorized connection attempt from IP address 111.221.54.113 on Port 445(SMB) |
2020-02-05 04:23:25 |