City: unknown
Region: unknown
Country: Thailand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.0.142.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13750
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;1.0.142.20. IN A
;; AUTHORITY SECTION:
. 360 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022302 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 05:57:56 CST 2022
;; MSG SIZE rcvd: 10320.142.0.1.in-addr.arpa domain name pointer node-2s4.pool-1-0.dynamic.totinternet.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
20.142.0.1.in-addr.arpa name = node-2s4.pool-1-0.dynamic.totinternet.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 210.187.87.185 | attackspam | Aug 25 01:46:24 mail sshd\[3206\]: Failed password for invalid user arma from 210.187.87.185 port 52586 ssh2 Aug 25 01:51:03 mail sshd\[3715\]: Invalid user maxim from 210.187.87.185 port 37612 Aug 25 01:51:03 mail sshd\[3715\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.187.87.185 Aug 25 01:51:05 mail sshd\[3715\]: Failed password for invalid user maxim from 210.187.87.185 port 37612 ssh2 Aug 25 01:55:46 mail sshd\[4391\]: Invalid user hadoop from 210.187.87.185 port 50866 Aug 25 01:55:46 mail sshd\[4391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.187.87.185 |
2019-08-25 08:48:20 |
| 159.148.4.235 | attack | Aug 25 00:18:41 MK-Soft-VM6 sshd\[6617\]: Invalid user test1 from 159.148.4.235 port 50434 Aug 25 00:18:41 MK-Soft-VM6 sshd\[6617\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.235 Aug 25 00:18:42 MK-Soft-VM6 sshd\[6617\]: Failed password for invalid user test1 from 159.148.4.235 port 50434 ssh2 ... |
2019-08-25 08:30:52 |
| 49.151.163.48 | attack | Unauthorised access (Aug 25) SRC=49.151.163.48 LEN=52 TTL=117 ID=12916 DF TCP DPT=445 WINDOW=63443 SYN |
2019-08-25 08:31:41 |
| 54.36.149.42 | attackspambots | Automatic report - Banned IP Access |
2019-08-25 08:41:54 |
| 94.23.149.25 | attackspam | $f2bV_matches |
2019-08-25 08:51:08 |
| 178.62.244.194 | attackspam | Aug 24 14:03:42 lcdev sshd\[4747\]: Invalid user gentoo from 178.62.244.194 Aug 24 14:03:42 lcdev sshd\[4747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.244.194 Aug 24 14:03:44 lcdev sshd\[4747\]: Failed password for invalid user gentoo from 178.62.244.194 port 60400 ssh2 Aug 24 14:08:44 lcdev sshd\[5154\]: Invalid user content from 178.62.244.194 Aug 24 14:08:44 lcdev sshd\[5154\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.244.194 |
2019-08-25 08:18:40 |
| 75.109.200.227 | attackspambots | Aug 24 14:00:24 sachi sshd\[7127\]: Invalid user 111 from 75.109.200.227 Aug 24 14:00:24 sachi sshd\[7127\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=75-109-200-227.tyrmcmta02.com.dyn.suddenlink.net Aug 24 14:00:26 sachi sshd\[7127\]: Failed password for invalid user 111 from 75.109.200.227 port 43386 ssh2 Aug 24 14:05:08 sachi sshd\[7519\]: Invalid user ftpdata from 75.109.200.227 Aug 24 14:05:08 sachi sshd\[7519\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=75-109-200-227.tyrmcmta02.com.dyn.suddenlink.net |
2019-08-25 08:23:40 |
| 61.171.198.206 | attack | Aug 24 12:12:00 web9 sshd\[16605\]: Invalid user admin from 61.171.198.206 Aug 24 12:12:00 web9 sshd\[16605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.171.198.206 Aug 24 12:12:02 web9 sshd\[16605\]: Failed password for invalid user admin from 61.171.198.206 port 38920 ssh2 Aug 24 12:12:04 web9 sshd\[16605\]: Failed password for invalid user admin from 61.171.198.206 port 38920 ssh2 Aug 24 12:12:06 web9 sshd\[16605\]: Failed password for invalid user admin from 61.171.198.206 port 38920 ssh2 |
2019-08-25 08:20:23 |
| 201.55.199.143 | attack | Aug 24 14:09:11 tdfoods sshd\[14017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.55.199.143 user=root Aug 24 14:09:13 tdfoods sshd\[14017\]: Failed password for root from 201.55.199.143 port 32780 ssh2 Aug 24 14:15:37 tdfoods sshd\[14488\]: Invalid user teamspeak4 from 201.55.199.143 Aug 24 14:15:37 tdfoods sshd\[14488\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.55.199.143 Aug 24 14:15:39 tdfoods sshd\[14488\]: Failed password for invalid user teamspeak4 from 201.55.199.143 port 49756 ssh2 |
2019-08-25 08:21:04 |
| 2.50.4.183 | attack | Unauthorized connection attempt from IP address 2.50.4.183 on Port 445(SMB) |
2019-08-25 08:54:49 |
| 89.216.23.40 | attackbotsspam | Unauthorized connection attempt from IP address 89.216.23.40 on Port 25(SMTP) |
2019-08-25 08:52:45 |
| 94.191.28.11 | attack | Aug 24 16:47:24 cumulus sshd[18692]: Invalid user jefferson from 94.191.28.11 port 48692 Aug 24 16:47:24 cumulus sshd[18692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.28.11 Aug 24 16:47:26 cumulus sshd[18692]: Failed password for invalid user jefferson from 94.191.28.11 port 48692 ssh2 Aug 24 16:47:26 cumulus sshd[18692]: Received disconnect from 94.191.28.11 port 48692:11: Bye Bye [preauth] Aug 24 16:47:26 cumulus sshd[18692]: Disconnected from 94.191.28.11 port 48692 [preauth] Aug 24 17:18:31 cumulus sshd[19820]: Connection closed by 94.191.28.11 port 58078 [preauth] Aug 24 17:19:42 cumulus sshd[19888]: Invalid user vermont from 94.191.28.11 port 51130 Aug 24 17:19:42 cumulus sshd[19888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.28.11 Aug 24 17:19:44 cumulus sshd[19888]: Failed password for invalid user vermont from 94.191.28.11 port 51130 ssh2 Aug 24 17:19:45 c........ ------------------------------- |
2019-08-25 08:33:15 |
| 45.115.99.38 | attackspambots | Aug 25 03:35:01 srv-4 sshd\[9852\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.115.99.38 user=root Aug 25 03:35:03 srv-4 sshd\[9852\]: Failed password for root from 45.115.99.38 port 59393 ssh2 Aug 25 03:39:54 srv-4 sshd\[9972\]: Invalid user factorio from 45.115.99.38 Aug 25 03:39:54 srv-4 sshd\[9972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.115.99.38 ... |
2019-08-25 08:49:37 |
| 104.254.247.239 | attack | Aug 24 23:41:03 root sshd[1796]: Failed password for root from 104.254.247.239 port 54620 ssh2 Aug 24 23:44:55 root sshd[1879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.254.247.239 Aug 24 23:44:56 root sshd[1879]: Failed password for invalid user don from 104.254.247.239 port 42174 ssh2 ... |
2019-08-25 08:13:37 |
| 81.40.150.167 | attackbotsspam | HTTP /etc/passwd Access Attempt, PTR: 167.red-81-40-150.staticip.rima-tde.net. |
2019-08-25 08:22:41 |