City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.217.252.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33666
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.217.252.139. IN A
;; AUTHORITY SECTION:
. 240 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:21:48 CST 2022
;; MSG SIZE rcvd: 108
Host 139.252.217.104.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 139.252.217.104.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 188.95.231.105 | attack | Mar 30 11:39:45 foo sshd[30487]: Did not receive identification string from 188.95.231.105 Mar 30 11:41:41 foo sshd[30512]: Invalid user test from 188.95.231.105 Mar 30 11:41:41 foo sshd[30512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.95.231.105 Mar 30 11:41:43 foo sshd[30512]: Failed password for invalid user test from 188.95.231.105 port 55236 ssh2 Mar 30 11:41:43 foo sshd[30512]: Received disconnect from 188.95.231.105: 11: Bye Bye [preauth] Mar 30 11:42:37 foo sshd[30520]: Invalid user kafka from 188.95.231.105 Mar 30 11:42:37 foo sshd[30520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.95.231.105 Mar 30 11:42:39 foo sshd[30520]: Failed password for invalid user kafka from 188.95.231.105 port 60178 ssh2 Mar 30 11:42:39 foo sshd[30520]: Received disconnect from 188.95.231.105: 11: Bye Bye [preauth] Mar 30 11:43:33 foo sshd[30534]: Invalid user test1 from 188.95.231.1........ ------------------------------- |
2020-04-01 00:26:53 |
| 49.236.192.194 | attack | $f2bV_matches |
2020-04-01 00:56:47 |
| 85.238.106.223 | attack | Unauthorized connection attempt from IP address 85.238.106.223 on Port 445(SMB) |
2020-04-01 01:09:12 |
| 74.82.47.37 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2020-04-01 00:44:28 |
| 27.227.204.7 | attack | Unauthorized connection attempt from IP address 27.227.204.7 on Port 445(SMB) |
2020-04-01 00:41:02 |
| 124.41.217.33 | attack | Mar 31 18:05:37 markkoudstaal sshd[15232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.41.217.33 Mar 31 18:05:39 markkoudstaal sshd[15232]: Failed password for invalid user gw from 124.41.217.33 port 33970 ssh2 Mar 31 18:11:13 markkoudstaal sshd[16004]: Failed password for root from 124.41.217.33 port 42064 ssh2 |
2020-04-01 00:37:36 |
| 159.65.132.170 | attackspambots | Mar 31 15:04:22 srv01 sshd[4391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.132.170 user=root Mar 31 15:04:24 srv01 sshd[4391]: Failed password for root from 159.65.132.170 port 32842 ssh2 Mar 31 15:09:13 srv01 sshd[4879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.132.170 user=root Mar 31 15:09:15 srv01 sshd[4879]: Failed password for root from 159.65.132.170 port 50966 ssh2 Mar 31 15:14:04 srv01 sshd[5171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.132.170 user=root Mar 31 15:14:05 srv01 sshd[5171]: Failed password for root from 159.65.132.170 port 40858 ssh2 ... |
2020-04-01 01:14:07 |
| 178.206.25.50 | attackspambots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-04-01 00:34:16 |
| 88.212.1.6 | attack | port scan and connect, tcp 23 (telnet) |
2020-04-01 00:42:35 |
| 104.236.175.127 | attackspam | Mar 31 18:51:20 meumeu sshd[3318]: Failed password for root from 104.236.175.127 port 33406 ssh2 Mar 31 18:52:24 meumeu sshd[3508]: Failed password for root from 104.236.175.127 port 47438 ssh2 ... |
2020-04-01 00:59:17 |
| 180.244.145.166 | attack | Mar 31 15:48:03 site2 sshd\[36276\]: Failed password for root from 180.244.145.166 port 46360 ssh2Mar 31 15:50:48 site2 sshd\[36314\]: Failed password for root from 180.244.145.166 port 50812 ssh2Mar 31 15:53:39 site2 sshd\[36388\]: Failed password for root from 180.244.145.166 port 55260 ssh2Mar 31 15:56:23 site2 sshd\[36434\]: Invalid user wanghui from 180.244.145.166Mar 31 15:56:24 site2 sshd\[36434\]: Failed password for invalid user wanghui from 180.244.145.166 port 59722 ssh2 ... |
2020-04-01 00:59:58 |
| 103.138.68.74 | attackbotsspam | Unauthorized connection attempt from IP address 103.138.68.74 on Port 445(SMB) |
2020-04-01 01:01:44 |
| 194.67.178.238 | attack | Unauthorized connection attempt from IP address 194.67.178.238 on Port 445(SMB) |
2020-04-01 01:13:34 |
| 190.217.68.204 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-04-01 00:51:25 |
| 113.163.216.202 | attackspambots | Unauthorized connection attempt from IP address 113.163.216.202 on Port 445(SMB) |
2020-04-01 00:53:37 |