City: Los Angeles
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.149.42.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42013
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.149.42.199. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022040702 1800 900 604800 86400
;; Query time: 85 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 08 02:15:47 CST 2022
;; MSG SIZE rcvd: 107Host 199.42.149.104.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 199.42.149.104.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 129.28.78.8 | attackbots | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-10-12T19:30:19Z and 2020-10-12T19:36:12Z |
2020-10-13 04:10:21 |
| 183.105.99.30 | attackbotsspam | (sshd) Failed SSH login from 183.105.99.30 (KR/South Korea/-): 10 in the last 3600 secs |
2020-10-13 04:02:49 |
| 103.28.38.166 | attackspambots | [munged]::443 103.28.38.166 - - [12/Oct/2020:05:52:18 +0200] "POST /[munged]: HTTP/1.1" 200 10925 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 103.28.38.166 - - [12/Oct/2020:05:52:19 +0200] "POST /[munged]: HTTP/1.1" 200 7071 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 103.28.38.166 - - [12/Oct/2020:05:52:19 +0200] "POST /[munged]: HTTP/1.1" 200 7071 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 103.28.38.166 - - [12/Oct/2020:05:52:21 +0200] "POST /[munged]: HTTP/1.1" 200 7071 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 103.28.38.166 - - [12/Oct/2020:05:52:21 +0200] "POST /[munged]: HTTP/1.1" 200 7071 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 103.28.38.166 - - [12/Oct/2020:05:52:22 |
2020-10-13 03:55:39 |
| 180.76.234.185 | attackbots | Oct 12 21:57:31 vpn01 sshd[16561]: Failed password for root from 180.76.234.185 port 50502 ssh2 Oct 12 22:00:45 vpn01 sshd[16581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.234.185 ... |
2020-10-13 04:01:01 |
| 111.229.13.242 | attackspambots | 2020-10-13T02:28:48.403366hostname sshd[24127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.13.242 user=root 2020-10-13T02:28:50.402996hostname sshd[24127]: Failed password for root from 111.229.13.242 port 51740 ssh2 2020-10-13T02:33:10.580472hostname sshd[25948]: Invalid user belzer from 111.229.13.242 port 44864 ... |
2020-10-13 04:17:49 |
| 45.254.25.62 | attackbots | fail2ban: brute force SSH detected |
2020-10-13 04:15:05 |
| 218.92.0.168 | attackbotsspam | " " |
2020-10-13 03:48:21 |
| 51.77.212.179 | attackspam | Oct 12 22:13:01 pve1 sshd[15143]: Failed password for root from 51.77.212.179 port 52522 ssh2 ... |
2020-10-13 04:14:47 |
| 101.109.70.70 | attackbots | Automatic report - Port Scan Attack |
2020-10-13 04:18:22 |
| 123.4.65.228 | attack | Port Scan: TCP/23 |
2020-10-13 04:23:50 |
| 182.61.25.229 | attack | Invalid user aris from 182.61.25.229 port 48454 |
2020-10-13 04:13:57 |
| 111.231.77.115 | attackbots | $lgm |
2020-10-13 04:22:20 |
| 185.191.126.243 | attackspam | Trolling for resource vulnerabilities |
2020-10-13 03:48:44 |
| 45.154.197.102 | attackspambots | SSH bruteforce |
2020-10-13 04:18:53 |
| 136.232.30.174 | attackbotsspam | SSH auth scanning - multiple failed logins |
2020-10-13 04:16:28 |