City: unknown
Region: unknown
Country: Zambia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.149.155.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7924
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.149.155.242. IN A
;; AUTHORITY SECTION:
. 117 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023102100 1800 900 604800 86400
;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 22 02:05:11 CST 2023
;; MSG SIZE rcvd: 108Host 242.155.149.102.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 242.155.149.102.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 200.2.146.126 | attackspam | Nov 21 10:16:18 * sshd[8938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.2.146.126 Nov 21 10:16:20 * sshd[8938]: Failed password for invalid user petty from 200.2.146.126 port 55658 ssh2 |
2019-11-21 17:29:05 |
| 51.79.60.147 | attackspam | Nov 19 11:42:00 new sshd[5117]: Failed password for invalid user hornung from 51.79.60.147 port 56940 ssh2 Nov 19 11:42:00 new sshd[5117]: Received disconnect from 51.79.60.147: 11: Bye Bye [preauth] Nov 19 11:57:37 new sshd[9174]: Failed password for r.r from 51.79.60.147 port 44680 ssh2 Nov 19 11:57:37 new sshd[9174]: Received disconnect from 51.79.60.147: 11: Bye Bye [preauth] Nov 19 12:01:02 new sshd[10130]: Failed password for r.r from 51.79.60.147 port 54466 ssh2 Nov 19 12:01:02 new sshd[10130]: Received disconnect from 51.79.60.147: 11: Bye Bye [preauth] Nov 19 12:04:33 new sshd[11207]: Failed password for invalid user feroci from 51.79.60.147 port 36024 ssh2 Nov 19 12:04:33 new sshd[11207]: Received disconnect from 51.79.60.147: 11: Bye Bye [preauth] Nov 19 12:08:05 new sshd[11773]: Failed password for invalid user emons from 51.79.60.147 port 45800 ssh2 Nov 19 12:08:05 new sshd[11773]: Received disconnect from 51.79.60.147: 11: Bye Bye [preauth] Nov 19 12:11:38........ ------------------------------- |
2019-11-21 17:16:28 |
| 61.0.254.9 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2019-11-21 17:28:25 |
| 14.49.38.114 | attackspambots | Nov 20 23:09:08 web9 sshd\[27609\]: Invalid user vollen from 14.49.38.114 Nov 20 23:09:08 web9 sshd\[27609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.49.38.114 Nov 20 23:09:10 web9 sshd\[27609\]: Failed password for invalid user vollen from 14.49.38.114 port 56636 ssh2 Nov 20 23:13:20 web9 sshd\[28366\]: Invalid user nothing from 14.49.38.114 Nov 20 23:13:20 web9 sshd\[28366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.49.38.114 |
2019-11-21 17:17:42 |
| 87.116.176.144 | attackbots | TCP Port Scanning |
2019-11-21 16:57:34 |
| 103.207.80.95 | attack | TCP Port Scanning |
2019-11-21 17:18:34 |
| 80.211.43.205 | attackbotsspam | 2019-11-21T01:23:22.153433ns547587 sshd\[30906\]: Invalid user com from 80.211.43.205 port 53020 2019-11-21T01:23:22.160399ns547587 sshd\[30906\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.43.205 2019-11-21T01:23:24.087977ns547587 sshd\[30906\]: Failed password for invalid user com from 80.211.43.205 port 53020 ssh2 2019-11-21T01:26:58.124528ns547587 sshd\[31156\]: Invalid user octavious from 80.211.43.205 port 33184 ... |
2019-11-21 17:14:33 |
| 170.84.59.247 | attackbotsspam | port scan and connect, tcp 23 (telnet) |
2019-11-21 17:20:08 |
| 24.69.139.91 | attackbots | TCP Port Scanning |
2019-11-21 16:53:44 |
| 192.198.9.253 | attack | Automatic report - Port Scan Attack |
2019-11-21 16:53:13 |
| 182.61.32.8 | attackspam | 2019-11-21T06:26:52.756935abusebot.cloudsearch.cf sshd\[27498\]: Invalid user murry from 182.61.32.8 port 47770 |
2019-11-21 17:18:14 |
| 176.166.113.233 | attackspam | SSH-bruteforce attempts |
2019-11-21 17:03:05 |
| 129.146.101.83 | attackbots | Honeypot attack, port: 81, PTR: PTR record not found |
2019-11-21 16:59:39 |
| 37.14.184.22 | attack | Lines containing failures of 37.14.184.22 Nov 19 12:20:45 server01 postfix/smtpd[21966]: connect from 22.184.14.37.dynamic.jazztel.es[37.14.184.22] Nov x@x Nov x@x Nov 19 12:20:46 server01 postfix/policy-spf[21970]: : Policy action=550 Please see hxxp://www.openspf.org/Why?s=mfrom;id=938%40iberhardware.com;ip=37.14.184.22;r=server01.2800km.de Nov x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=37.14.184.22 |
2019-11-21 16:58:00 |
| 41.93.48.73 | attackbots | Nov 21 11:26:59 gw1 sshd[580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.93.48.73 Nov 21 11:27:01 gw1 sshd[580]: Failed password for invalid user tarant from 41.93.48.73 port 47258 ssh2 ... |
2019-11-21 17:11:31 |