City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.148.135.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20121
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;107.148.135.42. IN A
;; AUTHORITY SECTION:
. 351 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022110701 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 08 17:45:13 CST 2022
;; MSG SIZE rcvd: 107Host 42.135.148.107.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.135.148.107.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 190.113.157.155 | attack | Jul 4 03:33:41 ns382633 sshd\[13036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.113.157.155 user=root Jul 4 03:33:43 ns382633 sshd\[13036\]: Failed password for root from 190.113.157.155 port 57902 ssh2 Jul 4 03:55:14 ns382633 sshd\[17029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.113.157.155 user=root Jul 4 03:55:15 ns382633 sshd\[17029\]: Failed password for root from 190.113.157.155 port 46182 ssh2 Jul 4 03:56:29 ns382633 sshd\[17112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.113.157.155 user=root |
2020-07-04 10:59:08 |
| 162.243.116.41 | attack | Jul 4 03:34:43 hosting sshd[17469]: Invalid user babu from 162.243.116.41 port 41914 ... |
2020-07-04 10:44:48 |
| 89.250.148.154 | attackbots | Jul 4 04:26:28 hosting sshd[22040]: Invalid user hduser from 89.250.148.154 port 50486 ... |
2020-07-04 10:28:17 |
| 35.233.73.146 | attack | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-07-04 10:56:17 |
| 67.205.158.241 | attackspambots | Jul 4 09:34:48 webhost01 sshd[20357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.158.241 Jul 4 09:34:50 webhost01 sshd[20357]: Failed password for invalid user weblogic from 67.205.158.241 port 60344 ssh2 ... |
2020-07-04 10:35:49 |
| 140.227.187.144 | attackspambots | Unauthorized connection attempt from IP address 140.227.187.144 on Port 445(SMB) |
2020-07-04 10:21:21 |
| 14.165.134.126 | attackspam | 1593822217 - 07/04/2020 02:23:37 Host: 14.165.134.126/14.165.134.126 Port: 445 TCP Blocked |
2020-07-04 10:24:42 |
| 109.94.119.128 | attackspambots | port scan and connect, tcp 23 (telnet) |
2020-07-04 10:50:11 |
| 222.186.31.127 | attack | Jul 4 04:33:20 dbanaszewski sshd[12272]: Unable to negotiate with 222.186.31.127 port 24637: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jul 4 04:38:46 dbanaszewski sshd[12319]: Unable to negotiate with 222.186.31.127 port 45642: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jul 4 04:40:25 dbanaszewski sshd[12374]: Unable to negotiate with 222.186.31.127 port 27075: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] |
2020-07-04 10:51:48 |
| 46.32.45.207 | attackbots | Jul 4 04:26:36 vm0 sshd[582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.32.45.207 Jul 4 04:26:38 vm0 sshd[582]: Failed password for invalid user ubuntu from 46.32.45.207 port 57352 ssh2 ... |
2020-07-04 10:57:42 |
| 51.38.32.230 | attackbots | 2020-07-04T05:01:45.221944mail.standpoint.com.ua sshd[15327]: Invalid user web3 from 51.38.32.230 port 57736 2020-07-04T05:01:45.224698mail.standpoint.com.ua sshd[15327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=server.ikadocteur.com 2020-07-04T05:01:45.221944mail.standpoint.com.ua sshd[15327]: Invalid user web3 from 51.38.32.230 port 57736 2020-07-04T05:01:46.907940mail.standpoint.com.ua sshd[15327]: Failed password for invalid user web3 from 51.38.32.230 port 57736 ssh2 2020-07-04T05:05:23.426074mail.standpoint.com.ua sshd[15936]: Invalid user livia from 51.38.32.230 port 52130 ... |
2020-07-04 10:19:52 |
| 185.10.62.51 | attackspam | Unauthorized connection attempt from IP address 185.10.62.51 on Port 445(SMB) |
2020-07-04 10:19:38 |
| 160.238.227.153 | attackspambots | VNC brute force attack detected by fail2ban |
2020-07-04 10:45:08 |
| 111.72.195.213 | attackspambots | Jul 4 04:16:48 srv01 postfix/smtpd\[27591\]: warning: unknown\[111.72.195.213\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 4 04:17:02 srv01 postfix/smtpd\[27591\]: warning: unknown\[111.72.195.213\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 4 04:17:19 srv01 postfix/smtpd\[27591\]: warning: unknown\[111.72.195.213\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 4 04:17:39 srv01 postfix/smtpd\[27591\]: warning: unknown\[111.72.195.213\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 4 04:17:55 srv01 postfix/smtpd\[27591\]: warning: unknown\[111.72.195.213\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-04 10:39:08 |
| 51.145.0.150 | attackspambots | Jul 3 22:47:16 server sshd[6030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.145.0.150 user=r.r Jul 3 22:47:18 server sshd[6030]: Failed password for r.r from 51.145.0.150 port 57348 ssh2 Jul 3 22:47:18 server sshd[6030]: Received disconnect from 51.145.0.150: 11: Bye Bye [preauth] Jul 3 23:04:01 server sshd[6866]: Failed password for invalid user sa from 51.145.0.150 port 48882 ssh2 Jul 3 23:04:02 server sshd[6866]: Received disconnect from 51.145.0.150: 11: Bye Bye [preauth] Jul 3 23:07:00 server sshd[7020]: Failed password for invalid user alarm from 51.145.0.150 port 53474 ssh2 Jul 3 23:07:00 server sshd[7020]: Received disconnect from 51.145.0.150: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=51.145.0.150 |
2020-07-04 10:34:57 |