City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 11.42.150.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50035
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;11.42.150.45. IN A
;; AUTHORITY SECTION:
. 504 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024010601 1800 900 604800 86400
;; Query time: 92 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 07 04:32:57 CST 2024
;; MSG SIZE rcvd: 105Host 45.150.42.11.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 45.150.42.11.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.0.207.57 | attackbots | Sep 16 04:14:24 MK-Soft-Root2 sshd\[10136\]: Invalid user test from 138.0.207.57 port 54044 Sep 16 04:14:24 MK-Soft-Root2 sshd\[10136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.207.57 Sep 16 04:14:27 MK-Soft-Root2 sshd\[10136\]: Failed password for invalid user test from 138.0.207.57 port 54044 ssh2 ... |
2019-09-16 12:45:02 |
| 163.172.39.160 | attack | Sep 16 01:15:24 vtv3 sshd\[20990\]: Invalid user labor from 163.172.39.160 port 51380 Sep 16 01:15:24 vtv3 sshd\[20990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.39.160 Sep 16 01:15:26 vtv3 sshd\[20990\]: Failed password for invalid user labor from 163.172.39.160 port 51380 ssh2 Sep 16 01:23:45 vtv3 sshd\[24787\]: Invalid user changeme from 163.172.39.160 port 40096 Sep 16 01:23:45 vtv3 sshd\[24787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.39.160 Sep 16 01:36:52 vtv3 sshd\[31699\]: Invalid user warlock from 163.172.39.160 port 52370 Sep 16 01:36:52 vtv3 sshd\[31699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.39.160 Sep 16 01:36:54 vtv3 sshd\[31699\]: Failed password for invalid user warlock from 163.172.39.160 port 52370 ssh2 Sep 16 01:41:16 vtv3 sshd\[1480\]: Invalid user debian from 163.172.39.160 port 37638 Sep 16 01:41:16 vtv3 sshd |
2019-09-16 12:48:23 |
| 180.126.218.70 | attackspam | 2019-09-14T03:26:12.724900ts3.arvenenaske.de sshd[8376]: Invalid user mother from 180.126.218.70 port 49963 2019-09-14T03:26:12.731120ts3.arvenenaske.de sshd[8376]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.126.218.70 user=mother 2019-09-14T03:26:12.732004ts3.arvenenaske.de sshd[8376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.126.218.70 2019-09-14T03:26:12.724900ts3.arvenenaske.de sshd[8376]: Invalid user mother from 180.126.218.70 port 49963 2019-09-14T03:26:14.377336ts3.arvenenaske.de sshd[8376]: Failed password for invalid user mother from 180.126.218.70 port 49963 ssh2 2019-09-14T03:26:16.149388ts3.arvenenaske.de sshd[8376]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.126.218.70 user=mother 2019-09-14T03:26:12.731120ts3.arvenenaske.de sshd[8376]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh rus........ ------------------------------ |
2019-09-16 12:52:57 |
| 164.132.197.108 | attackspam | 2019-09-16T04:20:39.360456abusebot-3.cloudsearch.cf sshd\[24458\]: Invalid user mine from 164.132.197.108 port 50074 |
2019-09-16 12:43:12 |
| 177.194.88.113 | attackbots | Sep 16 01:14:58 mintao sshd\[18629\]: Invalid user pi from 177.194.88.113\ Sep 16 01:15:00 mintao sshd\[18630\]: Invalid user pi from 177.194.88.113\ |
2019-09-16 12:37:54 |
| 164.132.44.25 | attackspam | Sep 16 06:27:48 MK-Soft-Root2 sshd\[28707\]: Invalid user service from 164.132.44.25 port 41794 Sep 16 06:27:48 MK-Soft-Root2 sshd\[28707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.44.25 Sep 16 06:27:51 MK-Soft-Root2 sshd\[28707\]: Failed password for invalid user service from 164.132.44.25 port 41794 ssh2 ... |
2019-09-16 12:55:39 |
| 220.94.205.226 | attack | vps1:pam-generic |
2019-09-16 13:15:44 |
| 192.99.32.86 | attackspambots | Sep 15 17:05:11 lcprod sshd\[4195\]: Invalid user charcoal from 192.99.32.86 Sep 15 17:05:11 lcprod sshd\[4195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns517943.ip-192-99-32.net Sep 15 17:05:14 lcprod sshd\[4195\]: Failed password for invalid user charcoal from 192.99.32.86 port 59438 ssh2 Sep 15 17:08:54 lcprod sshd\[4518\]: Invalid user puja from 192.99.32.86 Sep 15 17:08:54 lcprod sshd\[4518\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns517943.ip-192-99-32.net |
2019-09-16 13:09:48 |
| 178.151.177.243 | attackspambots | proto=tcp . spt=42595 . dpt=25 . (listed on Blocklist de Sep 15) (20) |
2019-09-16 13:40:33 |
| 37.187.178.245 | attackspam | Brute force attempt |
2019-09-16 12:40:34 |
| 220.85.233.145 | attack | Sep 16 06:50:00 vps647732 sshd[8995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.85.233.145 Sep 16 06:50:02 vps647732 sshd[8995]: Failed password for invalid user carrie from 220.85.233.145 port 38220 ssh2 ... |
2019-09-16 13:07:00 |
| 141.98.10.62 | attackspambots | Rude login attack (6 tries in 1d) |
2019-09-16 13:20:25 |
| 211.150.122.20 | attackbotsspam | CN - 1H : (343) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN9803 IP : 211.150.122.20 CIDR : 211.150.122.0/24 PREFIX COUNT : 36 UNIQUE IP COUNT : 57856 WYKRYTE ATAKI Z ASN9803 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-09-16 13:16:17 |
| 198.108.67.89 | attack | Sep 15 17:49:27 lenivpn01 kernel: \[795358.339132\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=198.108.67.89 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=37 ID=41450 PROTO=TCP SPT=58409 DPT=5494 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 16 03:59:46 lenivpn01 kernel: \[831975.839960\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=198.108.67.89 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=37 ID=27818 PROTO=TCP SPT=35744 DPT=3521 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 16 06:41:51 lenivpn01 kernel: \[841700.837148\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=198.108.67.89 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=37 ID=48106 PROTO=TCP SPT=4846 DPT=9097 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-16 13:08:52 |
| 190.152.221.70 | attack | proto=tcp . spt=52271 . dpt=25 . (listed on Dark List de Sep 15) (28) |
2019-09-16 13:18:00 |