City: unknown
Region: unknown
Country: Norway
Internet Service Provider: Telia
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.9.210.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35537
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;89.9.210.142. IN A
;; AUTHORITY SECTION:
. 103 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023010501 1800 900 604800 86400
;; Query time: 78 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 06 05:42:59 CST 2023
;; MSG SIZE rcvd: 105Host 142.210.9.89.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 142.210.9.89.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 164.132.42.32 | attackspambots | 2019-11-14T16:56:59.184740scmdmz1 sshd\[14455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=32.ip-164-132-42.eu user=root 2019-11-14T16:57:01.170904scmdmz1 sshd\[14455\]: Failed password for root from 164.132.42.32 port 53268 ssh2 2019-11-14T17:00:12.126354scmdmz1 sshd\[14703\]: Invalid user stravinsky from 164.132.42.32 port 33540 ... |
2019-11-15 00:11:42 |
| 185.176.27.250 | attackbots | Nov 14 16:26:12 mc1 kernel: \[5031444.435850\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.250 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=23586 PROTO=TCP SPT=44060 DPT=3661 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 14 16:31:41 mc1 kernel: \[5031772.603963\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.250 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=2760 PROTO=TCP SPT=44060 DPT=33897 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 14 16:35:01 mc1 kernel: \[5031972.862643\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.250 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=65531 PROTO=TCP SPT=44060 DPT=3200 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-14 23:42:36 |
| 81.22.45.115 | attackspam | 11/14/2019-16:41:41.031320 81.22.45.115 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-14 23:48:50 |
| 95.58.194.148 | attackbots | Nov 14 16:41:49 dedicated sshd[9707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.58.194.148 user=root Nov 14 16:41:51 dedicated sshd[9707]: Failed password for root from 95.58.194.148 port 55086 ssh2 |
2019-11-14 23:54:06 |
| 134.175.26.137 | attackbots | Port scan detected on ports: 6380[TCP], 6380[TCP], 7001[TCP] |
2019-11-15 00:00:41 |
| 49.116.97.243 | attackbotsspam | firewall-block, port(s): 23/tcp |
2019-11-15 00:07:21 |
| 103.192.76.228 | attack | Unauthorized IMAP connection attempt |
2019-11-14 23:56:16 |
| 124.102.18.24 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/124.102.18.24/ JP - 1H : (32) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : JP NAME ASN : ASN4713 IP : 124.102.18.24 CIDR : 124.96.0.0/13 PREFIX COUNT : 301 UNIQUE IP COUNT : 28900096 ATTACKS DETECTED ASN4713 : 1H - 2 3H - 2 6H - 2 12H - 5 24H - 11 DateTime : 2019-11-14 15:40:40 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-14 23:41:58 |
| 134.56.36.152 | attack | Nov 14 16:01:22 web8 sshd\[10543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.56.36.152 user=root Nov 14 16:01:25 web8 sshd\[10543\]: Failed password for root from 134.56.36.152 port 42868 ssh2 Nov 14 16:05:58 web8 sshd\[12632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.56.36.152 user=root Nov 14 16:06:00 web8 sshd\[12632\]: Failed password for root from 134.56.36.152 port 51914 ssh2 Nov 14 16:10:34 web8 sshd\[14727\]: Invalid user cloud-user from 134.56.36.152 |
2019-11-15 00:14:57 |
| 164.52.24.178 | attack | firewall-block, port(s): 444/tcp |
2019-11-14 23:56:51 |
| 2.136.56.83 | attackbotsspam | blocked for 12h |
2019-11-15 00:13:43 |
| 198.199.73.177 | attackspam | Nov 14 05:35:53 sachi sshd\[25952\]: Invalid user remmen from 198.199.73.177 Nov 14 05:35:53 sachi sshd\[25952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.73.177 Nov 14 05:35:55 sachi sshd\[25952\]: Failed password for invalid user remmen from 198.199.73.177 port 48170 ssh2 Nov 14 05:39:47 sachi sshd\[26348\]: Invalid user server from 198.199.73.177 Nov 14 05:39:47 sachi sshd\[26348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.73.177 |
2019-11-14 23:55:52 |
| 80.211.237.20 | attack | Nov 14 16:04:19 game-panel sshd[23778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.237.20 Nov 14 16:04:20 game-panel sshd[23778]: Failed password for invalid user meab from 80.211.237.20 port 39862 ssh2 Nov 14 16:08:05 game-panel sshd[23877]: Failed password for backup from 80.211.237.20 port 48430 ssh2 |
2019-11-15 00:16:45 |
| 185.209.0.89 | attack | firewall-block, port(s): 9935/tcp, 9957/tcp, 9959/tcp |
2019-11-14 23:39:07 |
| 79.245.166.34 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/79.245.166.34/ DE - 1H : (77) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : DE NAME ASN : ASN3320 IP : 79.245.166.34 CIDR : 79.192.0.0/10 PREFIX COUNT : 481 UNIQUE IP COUNT : 29022208 ATTACKS DETECTED ASN3320 : 1H - 2 3H - 4 6H - 7 12H - 10 24H - 16 DateTime : 2019-11-14 15:40:01 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-15 00:11:20 |