City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 137.42.103.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17800
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;137.42.103.245. IN A
;; AUTHORITY SECTION:
. 222 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022010600 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 06 16:13:21 CST 2022
;; MSG SIZE rcvd: 107
Host 245.103.42.137.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 245.103.42.137.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 66.240.205.34 | attackbotsspam | 400 BAD REQUEST |
2019-09-06 07:07:13 |
| 181.49.219.114 | attackspambots | Sep 6 00:30:44 nextcloud sshd\[9239\]: Invalid user postgres from 181.49.219.114 Sep 6 00:30:44 nextcloud sshd\[9239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.219.114 Sep 6 00:30:46 nextcloud sshd\[9239\]: Failed password for invalid user postgres from 181.49.219.114 port 39630 ssh2 ... |
2019-09-06 07:10:01 |
| 172.96.95.37 | attackspam | Looking for resource vulnerabilities |
2019-09-06 06:41:40 |
| 81.22.45.17 | attackspam | Sep 6 00:15:28 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.17 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=33490 PROTO=TCP SPT=40703 DPT=33891 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-06 07:16:34 |
| 192.166.219.125 | attackspambots | Sep 5 23:58:09 localhost sshd\[15017\]: Invalid user 123456 from 192.166.219.125 port 34086 Sep 5 23:58:09 localhost sshd\[15017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.166.219.125 Sep 5 23:58:10 localhost sshd\[15017\]: Failed password for invalid user 123456 from 192.166.219.125 port 34086 ssh2 |
2019-09-06 06:54:18 |
| 115.226.139.233 | attack | Fail2Ban - FTP Abuse Attempt |
2019-09-06 06:49:42 |
| 183.250.160.58 | attack | Sep 5 11:47:52 kapalua sshd\[20532\]: Invalid user 145 from 183.250.160.58 Sep 5 11:47:52 kapalua sshd\[20532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.250.160.58 Sep 5 11:47:54 kapalua sshd\[20532\]: Failed password for invalid user 145 from 183.250.160.58 port 43722 ssh2 Sep 5 11:51:26 kapalua sshd\[21026\]: Invalid user admin from 183.250.160.58 Sep 5 11:51:26 kapalua sshd\[21026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.250.160.58 |
2019-09-06 07:02:07 |
| 187.112.122.90 | attackspam | Lines containing failures of 187.112.122.90 Sep 5 18:12:20 install sshd[14004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.112.122.90 user=www-data Sep 5 18:12:22 install sshd[14004]: Failed password for www-data from 187.112.122.90 port 40446 ssh2 Sep 5 18:12:22 install sshd[14004]: Received disconnect from 187.112.122.90 port 40446:11: Bye Bye [preauth] Sep 5 18:12:22 install sshd[14004]: Disconnected from authenticating user www-data 187.112.122.90 port 40446 [preauth] Sep 5 18:17:36 install sshd[14980]: Invalid user ubuntu from 187.112.122.90 port 26143 Sep 5 18:17:36 install sshd[14980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.112.122.90 Sep 5 18:17:38 install sshd[14980]: Failed password for invalid user ubuntu from 187.112.122.90 port 26143 ssh2 Sep 5 18:17:38 install sshd[14980]: Received disconnect from 187.112.122.90 port 26143:11: Bye Bye [preauth] Sep........ ------------------------------ |
2019-09-06 06:37:26 |
| 104.248.7.24 | attackbotsspam | Sep 5 22:16:04 web8 sshd\[24311\]: Invalid user gituser from 104.248.7.24 Sep 5 22:16:04 web8 sshd\[24311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.7.24 Sep 5 22:16:06 web8 sshd\[24311\]: Failed password for invalid user gituser from 104.248.7.24 port 55690 ssh2 Sep 5 22:20:31 web8 sshd\[26565\]: Invalid user tf2server from 104.248.7.24 Sep 5 22:20:31 web8 sshd\[26565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.7.24 |
2019-09-06 06:38:48 |
| 37.119.230.22 | attackspambots | Sep 5 18:17:30 ny01 sshd[31441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.119.230.22 Sep 5 18:17:32 ny01 sshd[31441]: Failed password for invalid user 1 from 37.119.230.22 port 38837 ssh2 Sep 5 18:24:09 ny01 sshd[32610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.119.230.22 |
2019-09-06 06:52:20 |
| 159.89.125.55 | attack | fire |
2019-09-06 07:03:38 |
| 223.243.29.102 | attackspam | Sep 5 23:20:58 amit sshd\[13972\]: Invalid user debian from 223.243.29.102 Sep 5 23:20:58 amit sshd\[13972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.243.29.102 Sep 5 23:21:00 amit sshd\[13972\]: Failed password for invalid user debian from 223.243.29.102 port 40364 ssh2 ... |
2019-09-06 06:49:18 |
| 104.236.142.89 | attackbots | Sep 5 23:03:33 web8 sshd\[15672\]: Invalid user vbox from 104.236.142.89 Sep 5 23:03:33 web8 sshd\[15672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.142.89 Sep 5 23:03:34 web8 sshd\[15672\]: Failed password for invalid user vbox from 104.236.142.89 port 57242 ssh2 Sep 5 23:07:58 web8 sshd\[17898\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.142.89 user=mysql Sep 5 23:07:59 web8 sshd\[17898\]: Failed password for mysql from 104.236.142.89 port 44370 ssh2 |
2019-09-06 07:09:05 |
| 51.38.126.92 | attackspam | Sep 5 22:18:22 MK-Soft-VM6 sshd\[7391\]: Invalid user gpadmin from 51.38.126.92 port 47580 Sep 5 22:18:22 MK-Soft-VM6 sshd\[7391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.126.92 Sep 5 22:18:24 MK-Soft-VM6 sshd\[7391\]: Failed password for invalid user gpadmin from 51.38.126.92 port 47580 ssh2 ... |
2019-09-06 06:54:42 |
| 193.194.89.146 | attackspam | Automatic report - Banned IP Access |
2019-09-06 07:02:57 |