City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.158.42.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2304
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;12.158.42.71. IN A
;; AUTHORITY SECTION:
. 442 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011000 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 10 16:15:24 CST 2022
;; MSG SIZE rcvd: 105Host 71.42.158.12.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 71.42.158.12.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 88.132.2.155 | attackbotsspam | Port probing on unauthorized port 23 |
2020-08-06 02:10:13 |
| 80.211.59.57 | attackspam | Aug 5 06:14:05 Host-KLAX-C sshd[7007]: User root from 80.211.59.57 not allowed because not listed in AllowUsers ... |
2020-08-06 02:11:27 |
| 112.85.42.187 | attack | 2020-08-05T14:06:31.117993uwu-server sshd[3602275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.187 user=root 2020-08-05T14:06:33.049855uwu-server sshd[3602275]: Failed password for root from 112.85.42.187 port 26560 ssh2 2020-08-05T14:06:31.117993uwu-server sshd[3602275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.187 user=root 2020-08-05T14:06:33.049855uwu-server sshd[3602275]: Failed password for root from 112.85.42.187 port 26560 ssh2 2020-08-05T14:06:37.346599uwu-server sshd[3602275]: Failed password for root from 112.85.42.187 port 26560 ssh2 ... |
2020-08-06 02:21:29 |
| 49.235.87.213 | attackspambots | 2020-08-05T11:20:43.400026morrigan.ad5gb.com sshd[3405544]: Failed password for root from 49.235.87.213 port 60122 ssh2 2020-08-05T11:20:44.692697morrigan.ad5gb.com sshd[3405544]: Disconnected from authenticating user root 49.235.87.213 port 60122 [preauth] |
2020-08-06 02:19:54 |
| 120.70.97.233 | attack | Aug 5 10:15:28 ny01 sshd[15744]: Failed password for root from 120.70.97.233 port 35454 ssh2 Aug 5 10:19:59 ny01 sshd[16395]: Failed password for root from 120.70.97.233 port 46348 ssh2 |
2020-08-06 02:14:59 |
| 161.35.61.129 | attack | Port scan: Attack repeated for 24 hours |
2020-08-06 02:30:03 |
| 110.8.67.146 | attack | 2020-08-05T13:13:25.720994shield sshd\[22340\]: Invalid user !QAZXCFGHJKOP from 110.8.67.146 port 39162 2020-08-05T13:13:25.731395shield sshd\[22340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.8.67.146 2020-08-05T13:13:27.075839shield sshd\[22340\]: Failed password for invalid user !QAZXCFGHJKOP from 110.8.67.146 port 39162 ssh2 2020-08-05T13:14:44.663585shield sshd\[22480\]: Invalid user qweasd!@\# from 110.8.67.146 port 55134 2020-08-05T13:14:44.670435shield sshd\[22480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.8.67.146 |
2020-08-06 02:12:54 |
| 14.140.19.35 | attackspam | Port Scan ... |
2020-08-06 02:37:47 |
| 186.234.249.196 | attack | 2020-08-05T18:55:42.084401snf-827550 sshd[9922]: Failed password for root from 186.234.249.196 port 17329 ssh2 2020-08-05T19:00:25.557456snf-827550 sshd[9981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.234.249.196 user=root 2020-08-05T19:00:27.474885snf-827550 sshd[9981]: Failed password for root from 186.234.249.196 port 50995 ssh2 ... |
2020-08-06 02:13:44 |
| 13.94.56.225 | attackspambots | 2020-08-05T14:38:38.801295vps773228.ovh.net sshd[24227]: Failed password for root from 13.94.56.225 port 39602 ssh2 2020-08-05T14:52:45.942800vps773228.ovh.net sshd[24317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.56.225 user=root 2020-08-05T14:52:47.724948vps773228.ovh.net sshd[24317]: Failed password for root from 13.94.56.225 port 54104 ssh2 2020-08-05T15:06:45.191522vps773228.ovh.net sshd[24424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.56.225 user=root 2020-08-05T15:06:46.958484vps773228.ovh.net sshd[24424]: Failed password for root from 13.94.56.225 port 40364 ssh2 ... |
2020-08-06 02:32:40 |
| 103.95.122.215 | attackbots | Port Scan ... |
2020-08-06 02:02:44 |
| 165.22.104.247 | attackbotsspam | Aug 5 03:13:40 web9 sshd\[30626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.104.247 user=root Aug 5 03:13:42 web9 sshd\[30626\]: Failed password for root from 165.22.104.247 port 37946 ssh2 Aug 5 03:18:28 web9 sshd\[31289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.104.247 user=root Aug 5 03:18:30 web9 sshd\[31289\]: Failed password for root from 165.22.104.247 port 50216 ssh2 Aug 5 03:23:09 web9 sshd\[32032\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.104.247 user=root |
2020-08-06 02:18:02 |
| 81.171.19.24 | attack | 81.171.19.24 - - [05/Aug/2020:15:05:44 +0100] "POST /wp-login.php HTTP/1.1" 200 2178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 81.171.19.24 - - [05/Aug/2020:15:05:46 +0100] "POST /wp-login.php HTTP/1.1" 200 2132 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 81.171.19.24 - - [05/Aug/2020:15:05:46 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-06 02:38:14 |
| 118.24.108.205 | attackbots | Aug 5 15:07:12 ws24vmsma01 sshd[119696]: Failed password for root from 118.24.108.205 port 38018 ssh2 ... |
2020-08-06 02:19:28 |
| 91.83.163.189 | attackbotsspam | (smtpauth) Failed SMTP AUTH login from 91.83.163.189 (HU/Hungary/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-08-05 16:44:07 plain authenticator failed for ([91.83.163.189]) [91.83.163.189]: 535 Incorrect authentication data (set_id=info@vertix.co) |
2020-08-06 02:06:58 |