City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 127.132.242.172
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24037
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;127.132.242.172. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 01:14:16 CST 2025
;; MSG SIZE rcvd: 108Host 172.242.132.127.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 172.242.132.127.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 182.61.161.121 | attack | Aug 5 17:13:28 root sshd[10163]: Failed password for root from 182.61.161.121 port 29030 ssh2 Aug 5 17:28:54 root sshd[12023]: Failed password for root from 182.61.161.121 port 58095 ssh2 ... |
2020-08-06 00:46:20 |
| 34.84.21.82 | attackbotsspam | Aug 5 04:36:31 host sshd[18770]: User r.r from 34.84.21.82 not allowed because none of user's groups are listed in AllowGroups Aug 5 04:36:31 host sshd[18770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.84.21.82 user=r.r Aug 5 04:36:33 host sshd[18770]: Failed password for invalid user r.r from 34.84.21.82 port 48800 ssh2 Aug 5 04:36:33 host sshd[18770]: Received disconnect from 34.84.21.82 port 48800:11: Bye Bye [preauth] Aug 5 04:36:33 host sshd[18770]: Disconnected from invalid user r.r 34.84.21.82 port 48800 [preauth] Aug 5 04:51:07 host sshd[20596]: User r.r from 34.84.21.82 not allowed because none of user's groups are listed in AllowGroups Aug 5 04:51:07 host sshd[20596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.84.21.82 user=r.r Aug 5 04:51:09 host sshd[20596]: Failed password for invalid user r.r from 34.84.21.82 port 48186 ssh2 Aug 5 04:51:09 host sshd[........ ------------------------------- |
2020-08-06 01:02:04 |
| 218.92.0.185 | attackspambots | Aug 5 13:09:09 NPSTNNYC01T sshd[3394]: Failed password for root from 218.92.0.185 port 52938 ssh2 Aug 5 13:09:24 NPSTNNYC01T sshd[3394]: error: maximum authentication attempts exceeded for root from 218.92.0.185 port 52938 ssh2 [preauth] Aug 5 13:09:30 NPSTNNYC01T sshd[3424]: Failed password for root from 218.92.0.185 port 18301 ssh2 ... |
2020-08-06 01:10:59 |
| 106.13.113.91 | attackbotsspam | Aug 5 16:42:52 rush sshd[30951]: Failed password for root from 106.13.113.91 port 40260 ssh2 Aug 5 16:45:16 rush sshd[31061]: Failed password for root from 106.13.113.91 port 36552 ssh2 ... |
2020-08-06 00:54:58 |
| 175.6.40.19 | attackbotsspam | Aug 5 13:28:46 rocket sshd[23146]: Failed password for root from 175.6.40.19 port 39830 ssh2 Aug 5 13:32:04 rocket sshd[23650]: Failed password for root from 175.6.40.19 port 45738 ssh2 ... |
2020-08-06 01:03:07 |
| 197.37.216.63 | attack | Unauthorized connection attempt from IP address 197.37.216.63 on Port 445(SMB) |
2020-08-06 00:44:56 |
| 103.110.236.46 | attackbots | Unauthorized connection attempt from IP address 103.110.236.46 on Port 445(SMB) |
2020-08-06 00:41:56 |
| 152.67.12.90 | attack | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-05T14:42:35Z and 2020-08-05T14:48:33Z |
2020-08-06 00:58:55 |
| 120.53.20.111 | attack | Aug 5 14:47:51 rocket sshd[1553]: Failed password for root from 120.53.20.111 port 42836 ssh2 Aug 5 14:52:02 rocket sshd[2186]: Failed password for root from 120.53.20.111 port 57952 ssh2 ... |
2020-08-06 01:05:20 |
| 143.137.144.82 | attackbotsspam | Unauthorized connection attempt from IP address 143.137.144.82 on Port 445(SMB) |
2020-08-06 00:31:11 |
| 103.83.147.143 | attackspam | 20/8/5@08:15:59: FAIL: Alarm-Network address from=103.83.147.143 ... |
2020-08-06 00:37:27 |
| 67.205.162.223 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 69 - port: 22593 proto: tcp cat: Misc Attackbytes: 60 |
2020-08-06 00:46:02 |
| 109.123.117.244 | attackspam | Port scan: Attack repeated for 24 hours |
2020-08-06 00:41:34 |
| 95.188.95.214 | attackbotsspam | Unauthorized connection attempt from IP address 95.188.95.214 on Port 445(SMB) |
2020-08-06 01:01:00 |
| 123.206.95.243 | attackbotsspam | 2020-08-05T12:16:54.485553shield sshd\[17225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.95.243 user=root 2020-08-05T12:16:56.978574shield sshd\[17225\]: Failed password for root from 123.206.95.243 port 39854 ssh2 2020-08-05T12:20:48.127189shield sshd\[17536\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.95.243 user=root 2020-08-05T12:20:50.406423shield sshd\[17536\]: Failed password for root from 123.206.95.243 port 52768 ssh2 2020-08-05T12:24:43.916351shield sshd\[17961\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.95.243 user=root |
2020-08-06 01:08:54 |