City: unknown
Region: unknown
Country: unknown
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.168.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31870
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;119.42.168.14. IN A
;; AUTHORITY SECTION:
. 593 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030900 1800 900 604800 86400
;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 14:42:22 CST 2022
;; MSG SIZE rcvd: 106Host 14.168.42.119.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 14.168.42.119.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.95.147.104 | attackspam | DATE:2019-08-31 23:44:45, IP:45.95.147.104, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-09-01 12:55:49 |
| 49.231.166.197 | attackbots | Sep 1 05:29:46 MainVPS sshd[13230]: Invalid user charles from 49.231.166.197 port 53244 Sep 1 05:29:46 MainVPS sshd[13230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.231.166.197 Sep 1 05:29:46 MainVPS sshd[13230]: Invalid user charles from 49.231.166.197 port 53244 Sep 1 05:29:48 MainVPS sshd[13230]: Failed password for invalid user charles from 49.231.166.197 port 53244 ssh2 Sep 1 05:34:35 MainVPS sshd[13655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.231.166.197 user=root Sep 1 05:34:36 MainVPS sshd[13655]: Failed password for root from 49.231.166.197 port 41012 ssh2 ... |
2019-09-01 13:03:30 |
| 122.141.141.64 | attackspambots | Unauthorised access (Sep 1) SRC=122.141.141.64 LEN=40 TTL=49 ID=34858 TCP DPT=8080 WINDOW=24416 SYN Unauthorised access (Sep 1) SRC=122.141.141.64 LEN=40 TTL=49 ID=28121 TCP DPT=8080 WINDOW=18710 SYN Unauthorised access (Aug 31) SRC=122.141.141.64 LEN=40 TTL=49 ID=52277 TCP DPT=8080 WINDOW=24416 SYN |
2019-09-01 13:08:53 |
| 94.177.242.77 | attack | Sep 1 04:41:40 localhost sshd\[112500\]: Invalid user qa from 94.177.242.77 port 46744 Sep 1 04:41:40 localhost sshd\[112500\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.242.77 Sep 1 04:41:42 localhost sshd\[112500\]: Failed password for invalid user qa from 94.177.242.77 port 46744 ssh2 Sep 1 04:45:47 localhost sshd\[112642\]: Invalid user abc123 from 94.177.242.77 port 33090 Sep 1 04:45:47 localhost sshd\[112642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.242.77 ... |
2019-09-01 12:46:45 |
| 182.61.19.216 | attack | Sep 1 06:03:43 root sshd[26315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.19.216 Sep 1 06:03:46 root sshd[26315]: Failed password for invalid user enzo from 182.61.19.216 port 40842 ssh2 Sep 1 06:25:22 root sshd[26873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.19.216 ... |
2019-09-01 12:52:16 |
| 109.188.134.174 | attack | Chat Spam |
2019-09-01 13:17:48 |
| 45.237.140.120 | attackspam | Sep 1 02:05:30 lnxmail61 sshd[14537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.237.140.120 |
2019-09-01 12:33:58 |
| 129.226.76.114 | attackspam | Invalid user sly from 129.226.76.114 port 45114 |
2019-09-01 13:04:16 |
| 42.51.156.6 | attackbots | Invalid user ltgit from 42.51.156.6 port 37589 |
2019-09-01 13:16:00 |
| 173.239.37.163 | attackbots | Sep 1 00:12:12 legacy sshd[11005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.239.37.163 Sep 1 00:12:14 legacy sshd[11005]: Failed password for invalid user creative from 173.239.37.163 port 38742 ssh2 Sep 1 00:16:16 legacy sshd[11079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.239.37.163 ... |
2019-09-01 13:05:21 |
| 149.202.56.194 | attackbotsspam | Sep 1 07:15:25 localhost sshd\[14445\]: Invalid user sqoop from 149.202.56.194 port 60046 Sep 1 07:15:25 localhost sshd\[14445\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.56.194 Sep 1 07:15:27 localhost sshd\[14445\]: Failed password for invalid user sqoop from 149.202.56.194 port 60046 ssh2 |
2019-09-01 13:19:18 |
| 149.202.57.244 | attackspam | Sep 1 01:01:22 TORMINT sshd\[17796\]: Invalid user mr from 149.202.57.244 Sep 1 01:01:22 TORMINT sshd\[17796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.57.244 Sep 1 01:01:24 TORMINT sshd\[17796\]: Failed password for invalid user mr from 149.202.57.244 port 33782 ssh2 ... |
2019-09-01 13:08:15 |
| 220.171.52.74 | attackspambots | Brute forcing RDP port 3389 |
2019-09-01 12:48:58 |
| 41.210.128.37 | attackbots | Aug 31 18:49:15 friendsofhawaii sshd\[17553\]: Invalid user 123456 from 41.210.128.37 Aug 31 18:49:15 friendsofhawaii sshd\[17553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=h25.n1.ips.mtn.co.ug Aug 31 18:49:17 friendsofhawaii sshd\[17553\]: Failed password for invalid user 123456 from 41.210.128.37 port 53671 ssh2 Aug 31 18:54:51 friendsofhawaii sshd\[18030\]: Invalid user grigor from 41.210.128.37 Aug 31 18:54:51 friendsofhawaii sshd\[18030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=h25.n1.ips.mtn.co.ug |
2019-09-01 12:57:52 |
| 103.121.26.150 | attackbots | Aug 31 18:23:04 auw2 sshd\[3201\]: Invalid user gere from 103.121.26.150 Aug 31 18:23:04 auw2 sshd\[3201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.121.26.150 Aug 31 18:23:06 auw2 sshd\[3201\]: Failed password for invalid user gere from 103.121.26.150 port 28822 ssh2 Aug 31 18:28:01 auw2 sshd\[3617\]: Invalid user gerrit2 from 103.121.26.150 Aug 31 18:28:01 auw2 sshd\[3617\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.121.26.150 |
2019-09-01 13:09:45 |