City: New York
Region: New York
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: Yeshiva University
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.98.19.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49456
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;129.98.19.12. IN A
;; AUTHORITY SECTION:
. 625 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019051700 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri May 17 22:56:29 CST 2019
;; MSG SIZE rcvd: 116
Host 12.19.98.129.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 12.19.98.129.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 46.98.121.39 | attack | port scan and connect, tcp 8080 (http-proxy) |
2020-02-12 02:22:56 |
| 212.79.122.1 | attackbotsspam | Feb 11 07:35:08 hpm sshd\[19236\]: Invalid user ubi from 212.79.122.1 Feb 11 07:35:08 hpm sshd\[19236\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.79.122.1 Feb 11 07:35:11 hpm sshd\[19236\]: Failed password for invalid user ubi from 212.79.122.1 port 58048 ssh2 Feb 11 07:38:41 hpm sshd\[19613\]: Invalid user bu from 212.79.122.1 Feb 11 07:38:41 hpm sshd\[19613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.79.122.1 |
2020-02-12 02:28:29 |
| 159.65.66.57 | attackspambots | Feb 10 08:24:52 archiv sshd[15098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.66.57 user=r.r Feb 10 08:24:53 archiv sshd[15098]: Failed password for r.r from 159.65.66.57 port 54998 ssh2 Feb 10 08:24:54 archiv sshd[15098]: Received disconnect from 159.65.66.57 port 54998:11: Bye Bye [preauth] Feb 10 08:24:54 archiv sshd[15098]: Disconnected from 159.65.66.57 port 54998 [preauth] Feb 10 08:24:55 archiv sshd[15101]: Invalid user admin from 159.65.66.57 port 58866 Feb 10 08:24:55 archiv sshd[15101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.66.57 Feb 10 08:24:57 archiv sshd[15101]: Failed password for invalid user admin from 159.65.66.57 port 58866 ssh2 Feb 10 08:24:57 archiv sshd[15101]: Received disconnect from 159.65.66.57 port 58866:11: Bye Bye [preauth] Feb 10 08:24:57 archiv sshd[15101]: Disconnected from 159.65.66.57 port 58866 [preauth] ........ ----------------------------------------------- http |
2020-02-12 02:39:37 |
| 103.101.104.223 | attackspam | Automatic report - XMLRPC Attack |
2020-02-12 02:52:55 |
| 95.28.53.27 | attack | 1581428603 - 02/11/2020 14:43:23 Host: 95.28.53.27/95.28.53.27 Port: 445 TCP Blocked |
2020-02-12 02:58:15 |
| 51.68.123.192 | attack | Feb 11 10:56:34 ws22vmsma01 sshd[234877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.123.192 Feb 11 10:56:37 ws22vmsma01 sshd[234877]: Failed password for invalid user qjz from 51.68.123.192 port 35940 ssh2 ... |
2020-02-12 02:35:14 |
| 51.68.89.100 | attackspam | SSH Brute Force |
2020-02-12 02:59:17 |
| 111.10.43.201 | attackbotsspam | Invalid user yis from 111.10.43.201 port 40972 |
2020-02-12 03:00:09 |
| 144.131.134.105 | attackbotsspam | 2020-02-11T16:52:26.554976scmdmz1 sshd[14990]: Invalid user kcz from 144.131.134.105 port 53235 2020-02-11T16:52:26.558765scmdmz1 sshd[14990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-144-131-134-105.static.nsw.bigpond.net.au 2020-02-11T16:52:26.554976scmdmz1 sshd[14990]: Invalid user kcz from 144.131.134.105 port 53235 2020-02-11T16:52:28.866953scmdmz1 sshd[14990]: Failed password for invalid user kcz from 144.131.134.105 port 53235 ssh2 2020-02-11T16:56:56.384820scmdmz1 sshd[15449]: Invalid user ucr from 144.131.134.105 port 35056 ... |
2020-02-12 02:20:39 |
| 186.148.57.101 | attack | Unauthorized connection attempt from IP address 186.148.57.101 on Port 445(SMB) |
2020-02-12 02:16:29 |
| 5.249.131.161 | attackspam | $f2bV_matches |
2020-02-12 02:40:07 |
| 41.110.24.21 | attackspambots | firewall-block, port(s): 445/tcp |
2020-02-12 02:31:51 |
| 167.71.223.191 | attackbotsspam | ... |
2020-02-12 02:30:32 |
| 14.160.236.218 | attack | " " |
2020-02-12 02:51:58 |
| 77.40.7.214 | attack | Feb 11 14:08:37 nirvana postfix/smtpd[4540]: warning: hostname 214.7.dialup.mari-el.ru does not resolve to address 77.40.7.214: Name or service not known Feb 11 14:08:37 nirvana postfix/smtpd[4540]: warning: hostname 214.7.dialup.mari-el.ru does not resolve to address 77.40.7.214: Name or service not known Feb 11 14:08:37 nirvana postfix/smtpd[4540]: connect from unknown[77.40.7.214] Feb 11 14:08:37 nirvana postfix/smtpd[4540]: connect from unknown[77.40.7.214] Feb 11 14:08:38 nirvana postfix/smtpd[4540]: warning: unknown[77.40.7.214]: SASL CRAM-MD5 authentication failed: authentication failure Feb 11 14:08:38 nirvana postfix/smtpd[4540]: warning: unknown[77.40.7.214]: SASL CRAM-MD5 authentication failed: authentication failure Feb 11 14:08:38 nirvana postfix/smtpd[4540]: warning: unknown[77.40.7.214]: SASL PLAIN authentication failed: authentication failure Feb 11 14:08:38 nirvana postfix/smtpd[4540]: warning: unknown[77.40.7.214]: SASL PLAIN authentication failed: aut........ ------------------------------- |
2020-02-12 02:14:15 |