City: Singapore
Region: unknown
Country: Singapore
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.142.140.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20471
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.142.140.204. IN A
;; AUTHORITY SECTION:
. 590 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022040702 1800 900 604800 86400
;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 08 01:47:16 CST 2022
;; MSG SIZE rcvd: 108Host 204.140.142.103.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 204.140.142.103.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 137.74.44.162 | attackbots | Aug 28 07:11:46 vps691689 sshd[19385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162 Aug 28 07:11:48 vps691689 sshd[19385]: Failed password for invalid user rufus from 137.74.44.162 port 37546 ssh2 Aug 28 07:15:52 vps691689 sshd[19449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162 ... |
2019-08-28 14:00:01 |
| 94.176.5.253 | attack | (Aug 28) LEN=44 TTL=244 ID=54579 DF TCP DPT=23 WINDOW=14600 SYN (Aug 28) LEN=44 TTL=244 ID=45531 DF TCP DPT=23 WINDOW=14600 SYN (Aug 28) LEN=44 TTL=244 ID=17942 DF TCP DPT=23 WINDOW=14600 SYN (Aug 28) LEN=44 TTL=244 ID=13535 DF TCP DPT=23 WINDOW=14600 SYN (Aug 28) LEN=44 TTL=244 ID=6748 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=44 TTL=244 ID=37986 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=44 TTL=244 ID=53030 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=44 TTL=244 ID=34415 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=44 TTL=244 ID=60881 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=44 TTL=244 ID=62188 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=44 TTL=244 ID=61565 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=44 TTL=244 ID=24872 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=44 TTL=244 ID=36510 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=44 TTL=244 ID=46496 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=44 TTL=244 ID=25037 DF TCP DPT=23 WINDOW=14600 S... |
2019-08-28 13:29:31 |
| 49.88.112.76 | attack | Aug 28 05:46:58 ip-172-31-1-72 sshd\[18661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.76 user=root Aug 28 05:47:00 ip-172-31-1-72 sshd\[18661\]: Failed password for root from 49.88.112.76 port 13926 ssh2 Aug 28 05:47:02 ip-172-31-1-72 sshd\[18661\]: Failed password for root from 49.88.112.76 port 13926 ssh2 Aug 28 05:47:05 ip-172-31-1-72 sshd\[18661\]: Failed password for root from 49.88.112.76 port 13926 ssh2 Aug 28 05:49:53 ip-172-31-1-72 sshd\[18720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.76 user=root |
2019-08-28 13:58:37 |
| 112.85.42.185 | attack | Aug 28 07:06:13 dcd-gentoo sshd[21485]: User root from 112.85.42.185 not allowed because none of user's groups are listed in AllowGroups Aug 28 07:06:15 dcd-gentoo sshd[21485]: error: PAM: Authentication failure for illegal user root from 112.85.42.185 Aug 28 07:06:13 dcd-gentoo sshd[21485]: User root from 112.85.42.185 not allowed because none of user's groups are listed in AllowGroups Aug 28 07:06:15 dcd-gentoo sshd[21485]: error: PAM: Authentication failure for illegal user root from 112.85.42.185 Aug 28 07:06:13 dcd-gentoo sshd[21485]: User root from 112.85.42.185 not allowed because none of user's groups are listed in AllowGroups Aug 28 07:06:15 dcd-gentoo sshd[21485]: error: PAM: Authentication failure for illegal user root from 112.85.42.185 Aug 28 07:06:15 dcd-gentoo sshd[21485]: Failed keyboard-interactive/pam for invalid user root from 112.85.42.185 port 16764 ssh2 ... |
2019-08-28 13:19:53 |
| 157.230.123.18 | attackspambots | SSH Brute Force, server-1 sshd[29796]: Failed password for invalid user delgado from 157.230.123.18 port 48210 ssh2 |
2019-08-28 13:41:31 |
| 221.229.160.224 | attackspam | Unauthorised access (Aug 28) SRC=221.229.160.224 LEN=40 TTL=102 ID=256 TCP DPT=3389 WINDOW=16384 SYN |
2019-08-28 13:15:38 |
| 170.0.125.58 | attackbots | Lines containing failures of 170.0.125.58 Aug 26 00:23:06 hwd03 postfix/smtpd[28851]: connect from 58-125-0-170.castelecom.com.br[170.0.125.58] Aug x@x Aug x@x Aug x@x Aug 26 00:23:12 hwd03 postfix/smtpd[28851]: lost connection after RCPT from 58-125-0-170.castelecom.com.br[170.0.125.58] Aug 26 00:23:12 hwd03 postfix/smtpd[28851]: disconnect from 58-125-0-170.castelecom.com.br[170.0.125.58] ehlo=1 mail=1 rcpt=0/3 commands=2/5 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=170.0.125.58 |
2019-08-28 13:55:36 |
| 77.243.116.88 | attackspam | Aug 27 19:54:19 friendsofhawaii sshd\[23524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.243.116.88 user=daemon Aug 27 19:54:20 friendsofhawaii sshd\[23524\]: Failed password for daemon from 77.243.116.88 port 56884 ssh2 Aug 27 19:58:52 friendsofhawaii sshd\[23950\]: Invalid user esteban from 77.243.116.88 Aug 27 19:58:52 friendsofhawaii sshd\[23950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.243.116.88 Aug 27 19:58:54 friendsofhawaii sshd\[23950\]: Failed password for invalid user esteban from 77.243.116.88 port 44516 ssh2 |
2019-08-28 14:00:41 |
| 51.38.224.75 | attack | Aug 28 07:32:20 ArkNodeAT sshd\[30665\]: Invalid user lily from 51.38.224.75 Aug 28 07:32:20 ArkNodeAT sshd\[30665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.224.75 Aug 28 07:32:22 ArkNodeAT sshd\[30665\]: Failed password for invalid user lily from 51.38.224.75 port 50438 ssh2 |
2019-08-28 13:58:13 |
| 185.38.3.138 | attack | Aug 27 19:28:03 eddieflores sshd\[30775\]: Invalid user csgoserver from 185.38.3.138 Aug 27 19:28:03 eddieflores sshd\[30775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=pan0138.panoulu.net Aug 27 19:28:05 eddieflores sshd\[30775\]: Failed password for invalid user csgoserver from 185.38.3.138 port 45264 ssh2 Aug 27 19:32:09 eddieflores sshd\[31150\]: Invalid user admins from 185.38.3.138 Aug 27 19:32:09 eddieflores sshd\[31150\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=pan0138.panoulu.net |
2019-08-28 14:01:41 |
| 79.161.218.122 | attackbots | Aug 27 19:13:48 hiderm sshd\[31449\]: Invalid user lyb from 79.161.218.122 Aug 27 19:13:48 hiderm sshd\[31449\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.adsign.no Aug 27 19:13:50 hiderm sshd\[31449\]: Failed password for invalid user lyb from 79.161.218.122 port 57798 ssh2 Aug 27 19:17:58 hiderm sshd\[31789\]: Invalid user cisco from 79.161.218.122 Aug 27 19:17:58 hiderm sshd\[31789\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.adsign.no |
2019-08-28 13:18:33 |
| 80.211.242.211 | attack | Aug 27 19:12:12 web1 sshd\[15075\]: Invalid user admin from 80.211.242.211 Aug 27 19:12:12 web1 sshd\[15075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.242.211 Aug 27 19:12:14 web1 sshd\[15075\]: Failed password for invalid user admin from 80.211.242.211 port 52286 ssh2 Aug 27 19:16:20 web1 sshd\[15635\]: Invalid user ubuntu from 80.211.242.211 Aug 27 19:16:20 web1 sshd\[15635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.242.211 |
2019-08-28 13:47:21 |
| 43.226.36.182 | attackspam | Aug 28 04:28:39 MK-Soft-VM6 sshd\[4868\]: Invalid user jude from 43.226.36.182 port 37678 Aug 28 04:28:39 MK-Soft-VM6 sshd\[4868\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.36.182 Aug 28 04:28:41 MK-Soft-VM6 sshd\[4868\]: Failed password for invalid user jude from 43.226.36.182 port 37678 ssh2 ... |
2019-08-28 13:46:22 |
| 180.76.162.66 | attack | Aug 28 07:33:34 SilenceServices sshd[31697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.66 Aug 28 07:33:36 SilenceServices sshd[31697]: Failed password for invalid user marcos from 180.76.162.66 port 55971 ssh2 Aug 28 07:39:35 SilenceServices sshd[1462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.66 |
2019-08-28 13:55:05 |
| 133.130.89.210 | attackspam | Aug 27 19:00:29 lcdev sshd\[16131\]: Invalid user lbw from 133.130.89.210 Aug 27 19:00:29 lcdev sshd\[16131\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v133-130-89-210.a01e.g.tyo1.static.cnode.io Aug 27 19:00:31 lcdev sshd\[16131\]: Failed password for invalid user lbw from 133.130.89.210 port 41022 ssh2 Aug 27 19:05:06 lcdev sshd\[16615\]: Invalid user jenni from 133.130.89.210 Aug 27 19:05:06 lcdev sshd\[16615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v133-130-89-210.a01e.g.tyo1.static.cnode.io |
2019-08-28 13:19:24 |