City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.42.29.24
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47846
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;85.42.29.24. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021901 1800 900 604800 86400
;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 02:00:32 CST 2025
;; MSG SIZE rcvd: 104
24.29.42.85.in-addr.arpa domain name pointer host-85-42-29-24.business.telecomitalia.it.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
24.29.42.85.in-addr.arpa name = host-85-42-29-24.business.telecomitalia.it.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 195.33.240.222 | attack | Sep 16 02:25:23 mail postfix/postscreen[53196]: PREGREET 17 after 0.39 from [195.33.240.222]:42648: EHLO looneys.it ... |
2019-09-16 20:16:28 |
| 143.215.172.72 | attack | Port scan on 1 port(s): 53 |
2019-09-16 20:22:21 |
| 46.185.229.83 | attackspam | Honeypot attack, port: 23, PTR: 46.185.x.83.go.com.jo. |
2019-09-16 19:49:10 |
| 218.92.226.154 | attackbots | MultiHost/MultiPort Probe, Scan, Hack - |
2019-09-16 19:59:07 |
| 131.1.253.6 | attackspambots | Invalid user proxy from 131.1.253.6 port 46778 |
2019-09-16 20:14:05 |
| 41.33.119.67 | attack | 2019-09-16T11:10:47.087249abusebot-5.cloudsearch.cf sshd\[28169\]: Invalid user news123 from 41.33.119.67 port 30648 |
2019-09-16 20:14:34 |
| 213.183.101.89 | attackbots | 2019-09-16T11:41:20.231979abusebot-8.cloudsearch.cf sshd\[29493\]: Invalid user admin from 213.183.101.89 port 40718 |
2019-09-16 19:57:10 |
| 142.44.139.90 | attackspambots | 3389BruteforceFW21 |
2019-09-16 20:04:24 |
| 190.197.75.190 | attackspam | Sep 16 10:25:43 dev sshd\[20858\]: Invalid user admin from 190.197.75.190 port 51775 Sep 16 10:25:43 dev sshd\[20858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.197.75.190 Sep 16 10:25:46 dev sshd\[20858\]: Failed password for invalid user admin from 190.197.75.190 port 51775 ssh2 |
2019-09-16 20:13:12 |
| 140.143.15.169 | attackspam | Sep 16 04:25:38 Tower sshd[45005]: Connection from 140.143.15.169 port 36886 on 192.168.10.220 port 22 Sep 16 04:25:39 Tower sshd[45005]: Invalid user oracle from 140.143.15.169 port 36886 Sep 16 04:25:39 Tower sshd[45005]: error: Could not get shadow information for NOUSER Sep 16 04:25:39 Tower sshd[45005]: Failed password for invalid user oracle from 140.143.15.169 port 36886 ssh2 Sep 16 04:25:40 Tower sshd[45005]: Received disconnect from 140.143.15.169 port 36886:11: Bye Bye [preauth] Sep 16 04:25:40 Tower sshd[45005]: Disconnected from invalid user oracle 140.143.15.169 port 36886 [preauth] |
2019-09-16 20:08:57 |
| 201.223.154.201 | attackspambots | Automatic report - Port Scan Attack |
2019-09-16 19:58:15 |
| 23.238.115.114 | attackbots | 20 attempts against mh_ha-misbehave-ban on oak.magehost.pro |
2019-09-16 20:27:00 |
| 202.29.57.103 | attackbots | Sep 16 10:32:46 lenivpn01 kernel: \[855554.676089\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=202.29.57.103 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54832 PROTO=TCP SPT=32767 DPT=8545 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 16 11:25:43 lenivpn01 kernel: \[858731.856319\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=202.29.57.103 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54832 PROTO=TCP SPT=32767 DPT=8545 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 16 13:33:04 lenivpn01 kernel: \[866372.884603\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=202.29.57.103 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54832 PROTO=TCP SPT=32767 DPT=8545 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-16 20:12:34 |
| 164.132.110.223 | attackbots | Sep 16 01:53:09 friendsofhawaii sshd\[7465\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.ip-164-132-110.eu user=root Sep 16 01:53:11 friendsofhawaii sshd\[7465\]: Failed password for root from 164.132.110.223 port 60256 ssh2 Sep 16 01:57:20 friendsofhawaii sshd\[7824\]: Invalid user vh from 164.132.110.223 Sep 16 01:57:20 friendsofhawaii sshd\[7824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.ip-164-132-110.eu Sep 16 01:57:22 friendsofhawaii sshd\[7824\]: Failed password for invalid user vh from 164.132.110.223 port 55991 ssh2 |
2019-09-16 20:29:14 |
| 46.229.168.153 | attackspam | Malicious Traffic/Form Submission |
2019-09-16 19:58:48 |