City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.1.81.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47868
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;140.1.81.166. IN A
;; AUTHORITY SECTION:
. 592 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020051601 1800 900 604800 86400
;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 17 01:30:38 CST 2020
;; MSG SIZE rcvd: 116Host 166.81.1.140.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 166.81.1.140.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 154.8.232.112 | attackspambots | Invalid user info from 154.8.232.112 port 36908 |
2020-04-05 14:58:14 |
| 134.122.20.113 | attackbots | Apr 5 06:27:03 ns381471 sshd[27063]: Failed password for root from 134.122.20.113 port 39024 ssh2 |
2020-04-05 14:58:57 |
| 221.142.56.160 | attackspam | Invalid user bca from 221.142.56.160 port 33838 |
2020-04-05 15:07:01 |
| 62.171.142.153 | attackspam | (sshd) Failed SSH login from 62.171.142.153 (DE/Germany/vmd50216.contaboserver.net): 5 in the last 3600 secs |
2020-04-05 14:53:06 |
| 180.76.148.147 | attackbotsspam | SSH login attempts. |
2020-04-05 14:57:32 |
| 93.149.12.2 | attackspam | Apr 5 08:38:02 * sshd[11662]: Failed password for root from 93.149.12.2 port 37080 ssh2 |
2020-04-05 15:26:57 |
| 5.10.107.179 | attackspambots | Lines containing failures of 5.10.107.179 Apr 3 14:32:00 penfold sshd[11748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.10.107.179 user=r.r Apr 3 14:32:01 penfold sshd[11748]: Failed password for r.r from 5.10.107.179 port 20666 ssh2 Apr 3 14:32:02 penfold sshd[11748]: Received disconnect from 5.10.107.179 port 20666:11: Bye Bye [preauth] Apr 3 14:32:02 penfold sshd[11748]: Disconnected from authenticating user r.r 5.10.107.179 port 20666 [preauth] Apr 3 14:42:41 penfold sshd[13020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.10.107.179 user=r.r Apr 3 14:42:43 penfold sshd[13020]: Failed password for r.r from 5.10.107.179 port 51358 ssh2 Apr 3 14:42:45 penfold sshd[13020]: Received disconnect from 5.10.107.179 port 51358:11: Bye Bye [preauth] Apr 3 14:42:45 penfold sshd[13020]: Disconnected from authenticating user r.r 5.10.107.179 port 51358 [preauth] Apr 3 14:46:58........ ------------------------------ |
2020-04-05 15:22:14 |
| 167.71.255.56 | attack | Apr 5 08:11:14 legacy sshd[28441]: Failed password for root from 167.71.255.56 port 52500 ssh2 Apr 5 08:14:02 legacy sshd[28510]: Failed password for root from 167.71.255.56 port 45978 ssh2 ... |
2020-04-05 14:54:56 |
| 162.213.254.115 | attack | Apr 5 09:09:24 debian-2gb-nbg1-2 kernel: \[8329595.443259\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=162.213.254.115 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=32840 PROTO=TCP SPT=43235 DPT=6418 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-05 15:15:08 |
| 122.44.99.227 | attackspambots | ssh brute force |
2020-04-05 15:20:13 |
| 218.92.0.184 | attack | Apr 5 09:21:21 vpn01 sshd[4219]: Failed password for root from 218.92.0.184 port 19494 ssh2 Apr 5 09:21:30 vpn01 sshd[4219]: Failed password for root from 218.92.0.184 port 19494 ssh2 ... |
2020-04-05 15:24:46 |
| 195.231.3.208 | attackbots | Apr 5 06:48:47 web01.agentur-b-2.de postfix/smtpd[80666]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 5 06:48:47 web01.agentur-b-2.de postfix/smtpd[80666]: lost connection after AUTH from unknown[195.231.3.208] Apr 5 06:57:21 web01.agentur-b-2.de postfix/smtpd[83978]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 5 06:57:21 web01.agentur-b-2.de postfix/smtpd[83886]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 5 06:57:21 web01.agentur-b-2.de postfix/smtpd[83980]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 5 06:57:21 web01.agentur-b-2.de postfix/smtpd[83979]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 5 06:57:21 web01.agentur-b-2.de postfix/smtpd[80325]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 5 06:57:21 web01.agentur-b-2.de postfix/smtpd[83981]: warning: unknown |
2020-04-05 14:44:24 |
| 45.137.183.59 | attackspam | Apr 5 07:59:08 v22018086721571380 sshd[11216]: Failed password for invalid user 193.30.122.144 from 45.137.183.59 port 34560 ssh2 |
2020-04-05 14:59:25 |
| 106.12.122.138 | attackbots | $f2bV_matches |
2020-04-05 15:21:00 |
| 60.29.123.202 | attackbots | (sshd) Failed SSH login from 60.29.123.202 (CN/China/no-data): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 5 08:02:10 ubnt-55d23 sshd[18261]: Invalid user postgres from 60.29.123.202 port 52620 Apr 5 08:02:12 ubnt-55d23 sshd[18261]: Failed password for invalid user postgres from 60.29.123.202 port 52620 ssh2 |
2020-04-05 15:12:49 |