City: unknown
Region: unknown
Country: Australia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.139.242.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61600
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;1.139.242.73. IN A
;; AUTHORITY SECTION:
. 413 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022092501 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 26 05:33:50 CST 2022
;; MSG SIZE rcvd: 105
Host 73.242.139.1.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 73.242.139.1.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 165.22.103.237 | attackspambots | Dec 3 10:57:58 host sshd[56086]: Invalid user postgres from 165.22.103.237 port 36640 ... |
2019-12-03 18:09:35 |
| 51.38.126.92 | attackbots | SSH Brute-Forcing (ownc) |
2019-12-03 18:16:39 |
| 192.144.161.40 | attack | Dec 3 10:36:15 srv01 sshd[18425]: Invalid user takiyanagi from 192.144.161.40 port 46908 Dec 3 10:36:15 srv01 sshd[18425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.161.40 Dec 3 10:36:15 srv01 sshd[18425]: Invalid user takiyanagi from 192.144.161.40 port 46908 Dec 3 10:36:17 srv01 sshd[18425]: Failed password for invalid user takiyanagi from 192.144.161.40 port 46908 ssh2 Dec 3 10:41:54 srv01 sshd[19062]: Invalid user naughton from 192.144.161.40 port 45252 ... |
2019-12-03 17:54:29 |
| 152.32.187.177 | attackbots | 2019-12-03T07:16:48.4886891240 sshd\[21350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.187.177 user=root 2019-12-03T07:16:50.2438421240 sshd\[21350\]: Failed password for root from 152.32.187.177 port 39128 ssh2 2019-12-03T07:26:47.6873711240 sshd\[21824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.187.177 user=root ... |
2019-12-03 18:00:12 |
| 152.249.245.68 | attackspam | Dec 3 10:31:09 icinga sshd[21181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.249.245.68 Dec 3 10:31:12 icinga sshd[21181]: Failed password for invalid user asterisk from 152.249.245.68 port 51926 ssh2 ... |
2019-12-03 17:45:00 |
| 51.89.164.224 | attack | Dec 3 09:29:48 lnxweb61 sshd[2069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.164.224 |
2019-12-03 17:57:42 |
| 219.140.20.137 | attackspam | firewall-block, port(s): 23/tcp |
2019-12-03 17:41:19 |
| 207.154.239.128 | attackspam | Dec 3 10:56:53 localhost sshd\[22413\]: Invalid user yhhy from 207.154.239.128 port 45602 Dec 3 10:56:53 localhost sshd\[22413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.239.128 Dec 3 10:56:54 localhost sshd\[22413\]: Failed password for invalid user yhhy from 207.154.239.128 port 45602 ssh2 |
2019-12-03 18:07:38 |
| 89.189.153.97 | attack | slow and persistent scanner |
2019-12-03 18:13:38 |
| 95.213.129.162 | attackbots | RDP Brute Force attempt, PTR: None |
2019-12-03 17:53:40 |
| 221.162.255.66 | attackbots | 2019-12-03T09:41:51.428806abusebot-5.cloudsearch.cf sshd\[9216\]: Invalid user hp from 221.162.255.66 port 60100 |
2019-12-03 17:56:39 |
| 1.71.129.49 | attackspam | Dec 3 01:55:48 ny01 sshd[3663]: Failed password for root from 1.71.129.49 port 41119 ssh2 Dec 3 02:02:52 ny01 sshd[4631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.71.129.49 Dec 3 02:02:53 ny01 sshd[4631]: Failed password for invalid user mclarrey from 1.71.129.49 port 41142 ssh2 |
2019-12-03 17:46:46 |
| 81.22.45.253 | attack | Dec 3 10:49:59 mc1 kernel: \[6652807.436441\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.253 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=51213 PROTO=TCP SPT=51645 DPT=1862 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 3 10:51:23 mc1 kernel: \[6652890.668243\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.253 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=30183 PROTO=TCP SPT=51645 DPT=46388 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 3 10:54:26 mc1 kernel: \[6653073.715686\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.253 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=49736 PROTO=TCP SPT=51645 DPT=30120 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-12-03 18:10:55 |
| 218.92.0.154 | attack | Dec 3 10:44:35 vs01 sshd[545]: Failed password for root from 218.92.0.154 port 47746 ssh2 Dec 3 10:44:40 vs01 sshd[545]: Failed password for root from 218.92.0.154 port 47746 ssh2 Dec 3 10:44:43 vs01 sshd[545]: Failed password for root from 218.92.0.154 port 47746 ssh2 Dec 3 10:44:47 vs01 sshd[545]: Failed password for root from 218.92.0.154 port 47746 ssh2 |
2019-12-03 17:49:43 |
| 218.92.0.135 | attackspambots | Dec 3 11:00:11 ns381471 sshd[18365]: Failed password for root from 218.92.0.135 port 61638 ssh2 Dec 3 11:00:24 ns381471 sshd[18365]: error: maximum authentication attempts exceeded for root from 218.92.0.135 port 61638 ssh2 [preauth] |
2019-12-03 18:00:59 |