City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 11.142.48.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64057
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;11.142.48.195. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024010601 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 07 04:25:04 CST 2024
;; MSG SIZE rcvd: 106
Host 195.48.142.11.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 195.48.142.11.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.125.190.127 | attackspam | Aug 12 17:44:05 HPCompaq6200-Xubuntu sshd[553729]: Unable to negotiate with 103.125.190.127 port 47914: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] Aug 12 17:44:11 HPCompaq6200-Xubuntu sshd[553756]: Unable to negotiate with 103.125.190.127 port 49931: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] Aug 12 17:44:13 HPCompaq6200-Xubuntu sshd[553774]: Unable to negotiate with 103.125.190.127 port 50933: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] ... |
2020-08-13 06:45:28 |
| 43.255.172.51 | attack | Automatic report - Port Scan Attack |
2020-08-13 07:21:33 |
| 150.109.151.206 | attack |
|
2020-08-13 07:02:09 |
| 62.212.169.193 | attackspam | 2020-08-13 06:45:58 | |
| 111.229.118.227 | attackbotsspam | bruteforce detected |
2020-08-13 07:14:32 |
| 189.211.183.151 | attack | Aug 12 17:01:56 Tower sshd[9775]: Connection from 189.211.183.151 port 59312 on 192.168.10.220 port 22 rdomain "" Aug 12 17:01:56 Tower sshd[9775]: Failed password for root from 189.211.183.151 port 59312 ssh2 Aug 12 17:01:56 Tower sshd[9775]: Received disconnect from 189.211.183.151 port 59312:11: Bye Bye [preauth] Aug 12 17:01:56 Tower sshd[9775]: Disconnected from authenticating user root 189.211.183.151 port 59312 [preauth] |
2020-08-13 06:49:24 |
| 192.210.192.165 | attackspam | [ssh] SSH attack |
2020-08-13 06:54:51 |
| 168.121.51.85 | attackspambots | Unauthorized connection attempt from IP address 168.121.51.85 on Port 445(SMB) |
2020-08-13 06:47:13 |
| 84.255.249.179 | attackspambots | bruteforce detected |
2020-08-13 06:55:26 |
| 60.167.191.86 | attackbots | Aug 13 05:47:26 webhost01 sshd[27683]: Failed password for root from 60.167.191.86 port 40960 ssh2 ... |
2020-08-13 06:58:03 |
| 202.89.73.89 | attackbotsspam | Unauthorized connection attempt from IP address 202.89.73.89 on Port 445(SMB) |
2020-08-13 06:53:21 |
| 109.252.48.62 | attack | Unauthorized connection attempt from IP address 109.252.48.62 on Port 445(SMB) |
2020-08-13 07:08:52 |
| 164.163.147.231 | attackspam | Unauthorized connection attempt from IP address 164.163.147.231 on Port 445(SMB) |
2020-08-13 07:13:52 |
| 108.162.219.9 | attackbotsspam | Aug 12 23:02:17 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=108.162.219.9 DST=79.143.186.54 LEN=52 TOS=0x00 PREC=0x00 TTL=58 ID=17646 DF PROTO=TCP SPT=21428 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 12 23:02:18 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=108.162.219.9 DST=79.143.186.54 LEN=52 TOS=0x00 PREC=0x00 TTL=58 ID=17647 DF PROTO=TCP SPT=21428 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 12 23:02:20 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=108.162.219.9 DST=79.143.186.54 LEN=52 TOS=0x00 PREC=0x00 TTL=58 ID=17648 DF PROTO=TCP SPT=21428 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-08-13 06:46:43 |
| 212.156.136.114 | attackbots | bruteforce detected |
2020-08-13 07:11:28 |