City: Minneapolis
Region: Minnesota
Country: United States
Internet Service Provider: nep
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 137.70.3.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47254
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;137.70.3.64. IN A
;; AUTHORITY SECTION:
. 449 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019111301 1800 900 604800 86400
;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 14 04:35:36 CST 2019
;; MSG SIZE rcvd: 115Host 64.3.70.137.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 64.3.70.137.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 159.89.117.103 | attack | Apr 27 15:48:49 finn sshd[4771]: Invalid user cd from 159.89.117.103 port 49634 Apr 27 15:48:49 finn sshd[4771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.117.103 Apr 27 15:48:52 finn sshd[4771]: Failed password for invalid user cd from 159.89.117.103 port 49634 ssh2 Apr 27 15:48:52 finn sshd[4771]: Received disconnect from 159.89.117.103 port 49634:11: Bye Bye [preauth] Apr 27 15:48:52 finn sshd[4771]: Disconnected from 159.89.117.103 port 49634 [preauth] Apr 27 15:54:31 finn sshd[6022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.117.103 user=r.r Apr 27 15:54:34 finn sshd[6022]: Failed password for r.r from 159.89.117.103 port 33730 ssh2 Apr 27 15:54:34 finn sshd[6022]: Received disconnect from 159.89.117.103 port 33730:11: Bye Bye [preauth] Apr 27 15:54:34 finn sshd[6022]: Disconnected from 159.89.117.103 port 33730 [preauth] ........ ----------------------------------------------- https://www.blockli |
2020-04-29 05:38:16 |
| 187.109.21.245 | attack | SSH Invalid Login |
2020-04-29 06:05:42 |
| 27.71.227.197 | attackbotsspam | Apr 28 23:53:13 meumeu sshd[29232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.71.227.197 Apr 28 23:53:15 meumeu sshd[29232]: Failed password for invalid user cp from 27.71.227.197 port 48168 ssh2 Apr 28 23:57:39 meumeu sshd[29901]: Failed password for backup from 27.71.227.197 port 54914 ssh2 ... |
2020-04-29 06:01:29 |
| 45.142.195.5 | attackspam | Apr 28 23:13:11 mail postfix/smtpd\[8160\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 28 23:13:47 mail postfix/smtpd\[8172\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 28 23:44:26 mail postfix/smtpd\[8816\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 28 23:45:02 mail postfix/smtpd\[8816\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2020-04-29 05:45:06 |
| 2.226.205.174 | attack | IT_FASTWEB-MNT_<177>1588106790 [1:2403304:56948] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 3 [Classification: Misc Attack] [Priority: 2]: |
2020-04-29 06:10:08 |
| 103.123.65.35 | attack | Apr 29 02:36:04 gw1 sshd[4512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.123.65.35 Apr 29 02:36:06 gw1 sshd[4512]: Failed password for invalid user test from 103.123.65.35 port 48728 ssh2 ... |
2020-04-29 05:50:27 |
| 159.65.228.105 | attackspambots | xmlrpc attack |
2020-04-29 05:45:44 |
| 91.207.245.199 | attackspambots | 1588106807 - 04/28/2020 22:46:47 Host: 91.207.245.199/91.207.245.199 Port: 445 TCP Blocked |
2020-04-29 05:56:59 |
| 91.160.151.223 | attackspam | Invalid user ftpuser from 91.160.151.223 port 2159 |
2020-04-29 05:39:43 |
| 219.92.90.137 | attack | 1588106795 - 04/28/2020 22:46:35 Host: 219.92.90.137/219.92.90.137 Port: 23 TCP Blocked |
2020-04-29 06:06:25 |
| 188.138.57.105 | attackspambots | automated queries |
2020-04-29 06:08:16 |
| 27.128.173.120 | attackbots | [Aegis] @ 2019-06-01 22:30:17 0100 -> Attempted User Privilege Gain: SERVER-WEBAPP Joomla JDatabaseDriverMysqli unserialize code execution attempt |
2020-04-29 05:45:24 |
| 222.186.30.76 | attack | Apr 28 16:26:37 debian sshd[12871]: Unable to negotiate with 222.186.30.76 port 45347: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Apr 28 17:53:01 debian sshd[17063]: Unable to negotiate with 222.186.30.76 port 58492: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2020-04-29 05:54:35 |
| 194.26.29.114 | attackbots | srv02 Mass scanning activity detected Target: 4639 .. |
2020-04-29 05:37:46 |
| 103.137.98.213 | attackspambots | Icarus honeypot on github |
2020-04-29 05:30:27 |