City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.152.43.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57907
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.152.43.242. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022110801 1800 900 604800 86400
;; Query time: 121 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 09 04:01:47 CST 2022
;; MSG SIZE rcvd: 107Host 242.43.152.134.in-addr.arpa not found: 2(SERVFAIL)
b'242.43.152.134.in-addr.arpa name = host-134-152-43-242.rtp.osd.mil.
Authoritative answers can be found from:
'| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.215.172.212 | attackbotsspam | 1583384092 - 03/05/2020 05:54:52 Host: 112.215.172.212/112.215.172.212 Port: 445 TCP Blocked |
2020-03-05 13:23:50 |
| 120.29.81.99 | attack | Mar 5 04:54:17 system,error,critical: login failure for user admin from 120.29.81.99 via telnet Mar 5 04:54:19 system,error,critical: login failure for user administrator from 120.29.81.99 via telnet Mar 5 04:54:20 system,error,critical: login failure for user root from 120.29.81.99 via telnet Mar 5 04:54:26 system,error,critical: login failure for user admin from 120.29.81.99 via telnet Mar 5 04:54:27 system,error,critical: login failure for user Administrator from 120.29.81.99 via telnet Mar 5 04:54:29 system,error,critical: login failure for user root from 120.29.81.99 via telnet Mar 5 04:54:42 system,error,critical: login failure for user root from 120.29.81.99 via telnet Mar 5 04:54:43 system,error,critical: login failure for user root from 120.29.81.99 via telnet Mar 5 04:54:45 system,error,critical: login failure for user admin from 120.29.81.99 via telnet Mar 5 04:54:48 system,error,critical: login failure for user root from 120.29.81.99 via telnet |
2020-03-05 13:29:11 |
| 73.253.70.51 | attack | Mar 5 07:43:30 server sshd\[9113\]: Invalid user renjiawei from 73.253.70.51 Mar 5 07:43:30 server sshd\[9113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-253-70-51.hsd1.ma.comcast.net Mar 5 07:43:32 server sshd\[9113\]: Failed password for invalid user renjiawei from 73.253.70.51 port 35336 ssh2 Mar 5 07:55:04 server sshd\[11198\]: Invalid user renjiawei from 73.253.70.51 Mar 5 07:55:04 server sshd\[11198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-253-70-51.hsd1.ma.comcast.net ... |
2020-03-05 13:14:42 |
| 206.189.73.164 | attackbotsspam | Mar 5 05:49:22 sd-53420 sshd\[23514\]: Invalid user test from 206.189.73.164 Mar 5 05:49:22 sd-53420 sshd\[23514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.73.164 Mar 5 05:49:25 sd-53420 sshd\[23514\]: Failed password for invalid user test from 206.189.73.164 port 57674 ssh2 Mar 5 05:55:22 sd-53420 sshd\[24040\]: Invalid user remote from 206.189.73.164 Mar 5 05:55:22 sd-53420 sshd\[24040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.73.164 ... |
2020-03-05 13:05:44 |
| 110.78.168.209 | attackbots | 1583384091 - 03/05/2020 05:54:51 Host: 110.78.168.209/110.78.168.209 Port: 445 TCP Blocked |
2020-03-05 13:25:05 |
| 77.158.71.118 | attackbotsspam | (sshd) Failed SSH login from 77.158.71.118 (FR/France/118.71.158.77.rev.sfr.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 5 05:39:02 amsweb01 sshd[11148]: Invalid user xautomation from 77.158.71.118 port 52970 Mar 5 05:39:05 amsweb01 sshd[11148]: Failed password for invalid user xautomation from 77.158.71.118 port 52970 ssh2 Mar 5 05:47:10 amsweb01 sshd[12102]: Invalid user activiti from 77.158.71.118 port 34862 Mar 5 05:47:12 amsweb01 sshd[12102]: Failed password for invalid user activiti from 77.158.71.118 port 34862 ssh2 Mar 5 05:55:29 amsweb01 sshd[12908]: Failed password for invalid user ftp from 77.158.71.118 port 44974 ssh2 |
2020-03-05 13:01:40 |
| 36.228.197.36 | attack | 20/3/4@23:54:47: FAIL: Alarm-Network address from=36.228.197.36 20/3/4@23:54:47: FAIL: Alarm-Network address from=36.228.197.36 ... |
2020-03-05 13:28:43 |
| 222.186.173.154 | attackspam | Mar 5 06:23:01 vps691689 sshd[27326]: Failed password for root from 222.186.173.154 port 35086 ssh2 Mar 5 06:23:15 vps691689 sshd[27326]: Failed password for root from 222.186.173.154 port 35086 ssh2 Mar 5 06:23:15 vps691689 sshd[27326]: error: maximum authentication attempts exceeded for root from 222.186.173.154 port 35086 ssh2 [preauth] ... |
2020-03-05 13:26:11 |
| 79.166.136.15 | attackbots | Telnet Server BruteForce Attack |
2020-03-05 13:29:50 |
| 119.28.41.219 | attackspambots | Brute forcing RDP port 3389 |
2020-03-05 13:34:12 |
| 103.68.9.118 | attackbotsspam | Automatic report - XMLRPC Attack |
2020-03-05 13:07:11 |
| 222.186.175.169 | attackbotsspam | Mar 5 06:10:16 sd-53420 sshd\[25445\]: User root from 222.186.175.169 not allowed because none of user's groups are listed in AllowGroups Mar 5 06:10:16 sd-53420 sshd\[25445\]: Failed none for invalid user root from 222.186.175.169 port 12174 ssh2 Mar 5 06:10:16 sd-53420 sshd\[25445\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169 user=root Mar 5 06:10:18 sd-53420 sshd\[25445\]: Failed password for invalid user root from 222.186.175.169 port 12174 ssh2 Mar 5 06:10:36 sd-53420 sshd\[25470\]: User root from 222.186.175.169 not allowed because none of user's groups are listed in AllowGroups ... |
2020-03-05 13:11:55 |
| 79.124.62.34 | attackspam | 03/04/2020-23:55:02.051839 79.124.62.34 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-03-05 13:18:15 |
| 31.163.128.118 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2020-03-05 13:28:07 |
| 77.247.110.63 | attack | 20/3/4@23:54:33: FAIL: Alarm-Webmin address from=77.247.110.63 ... |
2020-03-05 13:36:33 |