City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.97.4.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1222
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;12.97.4.142. IN A
;; AUTHORITY SECTION:
. 117 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023052400 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 24 15:44:33 CST 2023
;; MSG SIZE rcvd: 104
Host 142.4.97.12.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 142.4.97.12.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 192.144.230.221 | attackbotsspam | 2020-07-06T03:49:46.527662abusebot-6.cloudsearch.cf sshd[6413]: Invalid user dennis from 192.144.230.221 port 44560 2020-07-06T03:49:46.533477abusebot-6.cloudsearch.cf sshd[6413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.230.221 2020-07-06T03:49:46.527662abusebot-6.cloudsearch.cf sshd[6413]: Invalid user dennis from 192.144.230.221 port 44560 2020-07-06T03:49:48.662554abusebot-6.cloudsearch.cf sshd[6413]: Failed password for invalid user dennis from 192.144.230.221 port 44560 ssh2 2020-07-06T03:52:53.293414abusebot-6.cloudsearch.cf sshd[6434]: Invalid user jader from 192.144.230.221 port 46412 2020-07-06T03:52:53.298774abusebot-6.cloudsearch.cf sshd[6434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.230.221 2020-07-06T03:52:53.293414abusebot-6.cloudsearch.cf sshd[6434]: Invalid user jader from 192.144.230.221 port 46412 2020-07-06T03:52:55.432862abusebot-6.cloudsearch.cf sshd[6434 ... |
2020-07-06 14:22:49 |
| 162.243.132.128 | attack | trying to access non-authorized port |
2020-07-06 14:48:05 |
| 45.125.65.52 | attackbots | Autoban 45.125.65.52 AUTH FAILED |
2020-07-06 14:27:27 |
| 62.57.227.12 | attackbotsspam | Jul 6 05:53:09 zulu412 sshd\[1246\]: Invalid user sam from 62.57.227.12 port 53782 Jul 6 05:53:09 zulu412 sshd\[1246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.57.227.12 Jul 6 05:53:11 zulu412 sshd\[1246\]: Failed password for invalid user sam from 62.57.227.12 port 53782 ssh2 ... |
2020-07-06 14:16:32 |
| 138.94.148.27 | attackbots | (smtpauth) Failed SMTP AUTH login from 138.94.148.27 (BR/Brazil/138-94-148-27.netfacil.center): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-06 08:23:01 plain authenticator failed for ([138.94.148.27]) [138.94.148.27]: 535 Incorrect authentication data (set_id=h.sabet@iwnt.ir) |
2020-07-06 14:23:08 |
| 218.92.0.253 | attack | Jul 6 08:44:03 eventyay sshd[19862]: Failed password for root from 218.92.0.253 port 24663 ssh2 Jul 6 08:44:15 eventyay sshd[19862]: error: maximum authentication attempts exceeded for root from 218.92.0.253 port 24663 ssh2 [preauth] Jul 6 08:44:23 eventyay sshd[19867]: Failed password for root from 218.92.0.253 port 50910 ssh2 ... |
2020-07-06 14:48:49 |
| 2.226.157.66 | attackspambots | Jul 6 05:52:55 tor-proxy-08 sshd\[32566\]: Invalid user pi from 2.226.157.66 port 33680 Jul 6 05:52:55 tor-proxy-08 sshd\[32566\]: Connection closed by 2.226.157.66 port 33680 \[preauth\] Jul 6 05:52:55 tor-proxy-08 sshd\[32568\]: Invalid user pi from 2.226.157.66 port 33686 Jul 6 05:52:55 tor-proxy-08 sshd\[32568\]: Connection closed by 2.226.157.66 port 33686 \[preauth\] ... |
2020-07-06 14:28:24 |
| 159.65.158.172 | attackbots | Jul 6 08:48:06 pkdns2 sshd\[57345\]: Invalid user milling from 159.65.158.172Jul 6 08:48:08 pkdns2 sshd\[57345\]: Failed password for invalid user milling from 159.65.158.172 port 57012 ssh2Jul 6 08:51:54 pkdns2 sshd\[57528\]: Invalid user diana from 159.65.158.172Jul 6 08:51:55 pkdns2 sshd\[57528\]: Failed password for invalid user diana from 159.65.158.172 port 54874 ssh2Jul 6 08:55:32 pkdns2 sshd\[57736\]: Invalid user quake from 159.65.158.172Jul 6 08:55:35 pkdns2 sshd\[57736\]: Failed password for invalid user quake from 159.65.158.172 port 52734 ssh2 ... |
2020-07-06 14:40:25 |
| 185.175.93.14 | attackspam |
|
2020-07-06 14:39:52 |
| 222.186.180.142 | attack | Jul 6 07:18:24 rocket sshd[20227]: Failed password for root from 222.186.180.142 port 20868 ssh2 Jul 6 07:18:42 rocket sshd[20252]: Failed password for root from 222.186.180.142 port 58900 ssh2 ... |
2020-07-06 14:19:34 |
| 222.85.139.140 | attackbots | Lines containing failures of 222.85.139.140 Jul 6 05:42:47 shared01 sshd[9501]: Invalid user vicente from 222.85.139.140 port 28023 Jul 6 05:42:47 shared01 sshd[9501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140 Jul 6 05:42:49 shared01 sshd[9501]: Failed password for invalid user vicente from 222.85.139.140 port 28023 ssh2 Jul 6 05:42:49 shared01 sshd[9501]: Received disconnect from 222.85.139.140 port 28023:11: Bye Bye [preauth] Jul 6 05:42:49 shared01 sshd[9501]: Disconnected from invalid user vicente 222.85.139.140 port 28023 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=222.85.139.140 |
2020-07-06 14:17:01 |
| 222.186.31.83 | attackbotsspam | Jul 6 02:41:52 NPSTNNYC01T sshd[7494]: Failed password for root from 222.186.31.83 port 36035 ssh2 Jul 6 02:42:02 NPSTNNYC01T sshd[7505]: Failed password for root from 222.186.31.83 port 55338 ssh2 ... |
2020-07-06 14:48:27 |
| 151.80.176.191 | attack | Jul 6 07:57:10 nextcloud sshd\[6585\]: Invalid user joomla from 151.80.176.191 Jul 6 07:57:10 nextcloud sshd\[6585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.176.191 Jul 6 07:57:12 nextcloud sshd\[6585\]: Failed password for invalid user joomla from 151.80.176.191 port 47106 ssh2 |
2020-07-06 14:29:20 |
| 51.77.147.5 | attackspambots | 2020-07-06T07:58:18.811619vps751288.ovh.net sshd\[7755\]: Invalid user kafka from 51.77.147.5 port 48152 2020-07-06T07:58:18.820989vps751288.ovh.net sshd\[7755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.ip-51-77-147.eu 2020-07-06T07:58:20.676616vps751288.ovh.net sshd\[7755\]: Failed password for invalid user kafka from 51.77.147.5 port 48152 ssh2 2020-07-06T08:01:40.198940vps751288.ovh.net sshd\[7839\]: Invalid user nvm from 51.77.147.5 port 46616 2020-07-06T08:01:40.206835vps751288.ovh.net sshd\[7839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.ip-51-77-147.eu |
2020-07-06 14:38:07 |
| 80.82.77.33 | attackspam |
|
2020-07-06 14:53:52 |