City: unknown
Region: unknown
Country: Indonesia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.12.31.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58613
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.12.31.74. IN A
;; AUTHORITY SECTION:
. 479 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400
;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 16:26:49 CST 2022
;; MSG SIZE rcvd: 10574.31.12.103.in-addr.arpa domain name pointer host-31-74.universal.net.id.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
74.31.12.103.in-addr.arpa name = host-31-74.universal.net.id.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 212.237.30.205 | attackspam | Dec 17 02:54:24 cumulus sshd[28983]: Invalid user diplomac from 212.237.30.205 port 52016 Dec 17 02:54:24 cumulus sshd[28983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.30.205 Dec 17 02:54:26 cumulus sshd[28983]: Failed password for invalid user diplomac from 212.237.30.205 port 52016 ssh2 Dec 17 02:54:26 cumulus sshd[28983]: Received disconnect from 212.237.30.205 port 52016:11: Bye Bye [preauth] Dec 17 02:54:26 cumulus sshd[28983]: Disconnected from 212.237.30.205 port 52016 [preauth] Dec 17 03:06:10 cumulus sshd[29545]: Invalid user r.rme from 212.237.30.205 port 53034 Dec 17 03:06:10 cumulus sshd[29545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.30.205 Dec 17 03:06:11 cumulus sshd[29545]: Failed password for invalid user r.rme from 212.237.30.205 port 53034 ssh2 Dec 17 03:06:12 cumulus sshd[29545]: Received disconnect from 212.237.30.205 port 53034:11: Bye Bye........ ------------------------------- |
2019-12-21 05:48:16 |
| 185.56.153.236 | attack | Dec 20 22:30:24 MK-Soft-VM7 sshd[25953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.56.153.236 Dec 20 22:30:26 MK-Soft-VM7 sshd[25953]: Failed password for invalid user test from 185.56.153.236 port 47820 ssh2 ... |
2019-12-21 05:34:51 |
| 88.120.146.208 | attack | Dec 20 15:47:59 debian-2gb-nbg1-2 kernel: \[506040.892088\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=88.120.146.208 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=32505 PROTO=TCP SPT=49152 DPT=23 WINDOW=38406 RES=0x00 SYN URGP=0 |
2019-12-21 05:47:23 |
| 119.202.54.240 | attackspambots | Telnet/23 MH Probe, BF, Hack - |
2019-12-21 05:45:46 |
| 145.239.73.103 | attackspambots | Dec 20 14:41:36 server sshd\[21677\]: Failed password for invalid user fantobo from 145.239.73.103 port 42070 ssh2 Dec 20 23:29:29 server sshd\[28783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.ip-145-239-73.eu user=root Dec 20 23:29:31 server sshd\[28783\]: Failed password for root from 145.239.73.103 port 37910 ssh2 Dec 20 23:37:46 server sshd\[31129\]: Invalid user www-data from 145.239.73.103 Dec 20 23:37:46 server sshd\[31129\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.ip-145-239-73.eu ... |
2019-12-21 05:27:11 |
| 142.93.214.20 | attackspam | SSH brute-force: detected 10 distinct usernames within a 24-hour window. |
2019-12-21 05:15:01 |
| 202.73.9.76 | attack | Dec 20 22:34:42 markkoudstaal sshd[1316]: Failed password for news from 202.73.9.76 port 39584 ssh2 Dec 20 22:40:46 markkoudstaal sshd[2146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.73.9.76 Dec 20 22:40:47 markkoudstaal sshd[2146]: Failed password for invalid user harders from 202.73.9.76 port 45381 ssh2 |
2019-12-21 05:44:58 |
| 210.126.1.36 | attack | Dec 20 21:52:42 MainVPS sshd[20655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.126.1.36 user=root Dec 20 21:52:44 MainVPS sshd[20655]: Failed password for root from 210.126.1.36 port 39540 ssh2 Dec 20 21:59:09 MainVPS sshd[395]: Invalid user luuk from 210.126.1.36 port 47264 Dec 20 21:59:09 MainVPS sshd[395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.126.1.36 Dec 20 21:59:09 MainVPS sshd[395]: Invalid user luuk from 210.126.1.36 port 47264 Dec 20 21:59:11 MainVPS sshd[395]: Failed password for invalid user luuk from 210.126.1.36 port 47264 ssh2 ... |
2019-12-21 05:49:04 |
| 77.20.107.79 | attack | Dec 20 10:53:37 auw2 sshd\[9186\]: Invalid user chen123 from 77.20.107.79 Dec 20 10:53:37 auw2 sshd\[9186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip4d146b4f.dynamic.kabel-deutschland.de Dec 20 10:53:38 auw2 sshd\[9186\]: Failed password for invalid user chen123 from 77.20.107.79 port 56394 ssh2 Dec 20 10:59:57 auw2 sshd\[9779\]: Invalid user 2w3e4r from 77.20.107.79 Dec 20 10:59:57 auw2 sshd\[9779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip4d146b4f.dynamic.kabel-deutschland.de |
2019-12-21 05:22:51 |
| 190.111.249.133 | attackbots | 2019-12-20T21:35:21.346502vps751288.ovh.net sshd\[11525\]: Invalid user hcat from 190.111.249.133 port 53870 2019-12-20T21:35:21.359072vps751288.ovh.net sshd\[11525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.111.249.133 2019-12-20T21:35:23.274729vps751288.ovh.net sshd\[11525\]: Failed password for invalid user hcat from 190.111.249.133 port 53870 ssh2 2019-12-20T21:42:12.307364vps751288.ovh.net sshd\[11581\]: Invalid user admin from 190.111.249.133 port 60070 2019-12-20T21:42:12.318722vps751288.ovh.net sshd\[11581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.111.249.133 |
2019-12-21 05:15:32 |
| 145.239.8.229 | attackbotsspam | $f2bV_matches |
2019-12-21 05:41:34 |
| 195.8.51.139 | attackbots | Unauthorized connection attempt detected from IP address 195.8.51.139 to port 445 |
2019-12-21 05:26:46 |
| 46.38.144.57 | attack | Dec 20 22:38:17 webserver postfix/smtpd\[6397\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 20 22:39:46 webserver postfix/smtpd\[6397\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 20 22:41:14 webserver postfix/smtpd\[6397\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 20 22:42:42 webserver postfix/smtpd\[6397\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 20 22:44:09 webserver postfix/smtpd\[6397\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-12-21 05:43:59 |
| 52.156.48.67 | attack | I've discovered this unresolved address in the wireshark capture of my network's activity i've just made ! I'm located in St Etienne, France, I suspect people with a powerline kit Atheros to hack my connexion and PC. I've captured their MAC Address as well and I've tried to signal this intrusion to the authorities in my town but I wonder if they really know anything about computers. I don't know a lot of things but I'm sure these intruders are at proximity since I detect them with Wireless Network Watcher even without any Internet access. |
2019-12-21 05:24:10 |
| 189.15.64.39 | attackspambots | Dec 20 18:53:50 localhost sshd[15277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.15.64.39 user=root Dec 20 18:53:52 localhost sshd[15277]: Failed password for root from 189.15.64.39 port 56559 ssh2 ... |
2019-12-21 05:51:04 |