City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.4.30.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29158
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.4.30.145. IN A
;; AUTHORITY SECTION:
. 92 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 12:22:31 CST 2022
;; MSG SIZE rcvd: 105145.30.4.142.in-addr.arpa domain name pointer server.windfall.studio.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
145.30.4.142.in-addr.arpa name = server.windfall.studio.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.232.144.7 | attackspambots | Feb 25 21:39:06 toyboy sshd[29499]: Invalid user hdfs from 49.232.144.7 Feb 25 21:39:06 toyboy sshd[29499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.144.7 Feb 25 21:39:08 toyboy sshd[29499]: Failed password for invalid user hdfs from 49.232.144.7 port 38682 ssh2 Feb 25 21:39:08 toyboy sshd[29499]: Received disconnect from 49.232.144.7: 11: Bye Bye [preauth] Feb 25 21:43:08 toyboy sshd[29688]: Invalid user tmp from 49.232.144.7 Feb 25 21:43:08 toyboy sshd[29688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.144.7 Feb 25 21:43:10 toyboy sshd[29688]: Failed password for invalid user tmp from 49.232.144.7 port 35680 ssh2 Feb 25 21:43:11 toyboy sshd[29688]: Received disconnect from 49.232.144.7: 11: Bye Bye [preauth] Feb 25 21:44:45 toyboy sshd[29781]: Invalid user student from 49.232.144.7 Feb 25 21:44:45 toyboy sshd[29781]: pam_unix(sshd:auth): authentication failure; lo........ ------------------------------- |
2020-03-01 09:52:29 |
| 104.245.144.45 | attack | (From goold.lois@yahoo.com) Would you be interested in advertising that costs less than $40 every month and sends hundreds of people who are ready to buy directly to your website? For details visit: http://www.moreleadsandsales.xyz |
2020-03-01 09:23:14 |
| 174.238.25.139 | attack | Brute forcing email accounts |
2020-03-01 09:16:39 |
| 122.226.135.93 | attackbots | Mar 1 01:57:21 mout sshd[12765]: Invalid user wangtingzhang from 122.226.135.93 port 4085 |
2020-03-01 09:38:04 |
| 203.162.123.151 | attack | 2020-03-01T00:46:27.297078shield sshd\[30958\]: Invalid user qw from 203.162.123.151 port 56196 2020-03-01T00:46:27.301220shield sshd\[30958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.162.123.151 2020-03-01T00:46:28.794304shield sshd\[30958\]: Failed password for invalid user qw from 203.162.123.151 port 56196 ssh2 2020-03-01T00:51:59.813446shield sshd\[32073\]: Invalid user PlcmSpIp from 203.162.123.151 port 57892 2020-03-01T00:51:59.817513shield sshd\[32073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.162.123.151 |
2020-03-01 09:22:48 |
| 179.109.89.168 | attackbots | Automatic report - Port Scan Attack |
2020-03-01 09:16:24 |
| 94.131.243.73 | attackspam | Lines containing failures of 94.131.243.73 Feb 27 23:08:58 kopano sshd[28983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.131.243.73 user=r.r Feb 27 23:08:59 kopano sshd[28983]: Failed password for r.r from 94.131.243.73 port 41108 ssh2 Feb 27 23:09:00 kopano sshd[28983]: Received disconnect from 94.131.243.73 port 41108:11: Bye Bye [preauth] Feb 27 23:09:00 kopano sshd[28983]: Disconnected from authenticating user r.r 94.131.243.73 port 41108 [preauth] Feb 27 23:35:40 kopano sshd[30218]: Invalid user user1 from 94.131.243.73 port 57908 Feb 27 23:35:40 kopano sshd[30218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.131.243.73 Feb 27 23:35:41 kopano sshd[30218]: Failed password for invalid user user1 from 94.131.243.73 port 57908 ssh2 Feb 27 23:35:41 kopano sshd[30218]: Received disconnect from 94.131.243.73 port 57908:11: Bye Bye [preauth] Feb 27 23:35:41 kopano sshd[30218]: D........ ------------------------------ |
2020-03-01 09:26:04 |
| 66.175.238.223 | attack | Feb 29 15:46:10 wbs sshd\[12706\]: Invalid user ekp from 66.175.238.223 Feb 29 15:46:10 wbs sshd\[12706\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.175.238.223 Feb 29 15:46:12 wbs sshd\[12706\]: Failed password for invalid user ekp from 66.175.238.223 port 42694 ssh2 Feb 29 15:54:28 wbs sshd\[13363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.175.238.223 user=root Feb 29 15:54:30 wbs sshd\[13363\]: Failed password for root from 66.175.238.223 port 52626 ssh2 |
2020-03-01 09:55:39 |
| 87.110.181.30 | attack | 2020-03-01T01:05:44.867619shield sshd\[3576\]: Invalid user cpanelphppgadmin from 87.110.181.30 port 48992 2020-03-01T01:05:44.871821shield sshd\[3576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.110.181.30 2020-03-01T01:05:46.535254shield sshd\[3576\]: Failed password for invalid user cpanelphppgadmin from 87.110.181.30 port 48992 ssh2 2020-03-01T01:14:10.485660shield sshd\[5348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.110.181.30 user=root 2020-03-01T01:14:12.279764shield sshd\[5348\]: Failed password for root from 87.110.181.30 port 57920 ssh2 |
2020-03-01 09:36:12 |
| 218.92.0.148 | attack | Mar 1 08:37:45 bacztwo sshd[10152]: error: PAM: Authentication failure for root from 218.92.0.148 Mar 1 08:37:49 bacztwo sshd[10152]: error: PAM: Authentication failure for root from 218.92.0.148 Mar 1 08:37:52 bacztwo sshd[10152]: error: PAM: Authentication failure for root from 218.92.0.148 Mar 1 08:37:52 bacztwo sshd[10152]: Failed keyboard-interactive/pam for root from 218.92.0.148 port 23916 ssh2 Mar 1 08:37:42 bacztwo sshd[10152]: error: PAM: Authentication failure for root from 218.92.0.148 Mar 1 08:37:45 bacztwo sshd[10152]: error: PAM: Authentication failure for root from 218.92.0.148 Mar 1 08:37:49 bacztwo sshd[10152]: error: PAM: Authentication failure for root from 218.92.0.148 Mar 1 08:37:52 bacztwo sshd[10152]: error: PAM: Authentication failure for root from 218.92.0.148 Mar 1 08:37:52 bacztwo sshd[10152]: Failed keyboard-interactive/pam for root from 218.92.0.148 port 23916 ssh2 Mar 1 08:37:55 bacztwo sshd[10152]: error: PAM: Authentication failure for root fr ... |
2020-03-01 09:43:19 |
| 179.106.71.189 | attackspam | Unauthorized connection attempt detected from IP address 179.106.71.189 to port 23 [J] |
2020-03-01 09:21:52 |
| 222.186.180.9 | attack | Mar 1 03:05:00 ift sshd\[53326\]: Failed password for root from 222.186.180.9 port 22214 ssh2Mar 1 03:05:04 ift sshd\[53326\]: Failed password for root from 222.186.180.9 port 22214 ssh2Mar 1 03:05:07 ift sshd\[53326\]: Failed password for root from 222.186.180.9 port 22214 ssh2Mar 1 03:05:10 ift sshd\[53326\]: Failed password for root from 222.186.180.9 port 22214 ssh2Mar 1 03:05:13 ift sshd\[53326\]: Failed password for root from 222.186.180.9 port 22214 ssh2 ... |
2020-03-01 09:12:35 |
| 83.97.20.37 | attack | Mar 1 02:23:04 debian-2gb-nbg1-2 kernel: \[5284972.293604\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=83.97.20.37 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=53851 DPT=8060 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-03-01 09:48:42 |
| 142.44.151.237 | attack | Brute forcing email accounts |
2020-03-01 09:15:18 |
| 195.158.9.77 | attackspam | Mar 1 01:16:34 localhost sshd\[9300\]: Invalid user niiv from 195.158.9.77 port 35726 Mar 1 01:16:34 localhost sshd\[9300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.158.9.77 Mar 1 01:16:37 localhost sshd\[9300\]: Failed password for invalid user niiv from 195.158.9.77 port 35726 ssh2 |
2020-03-01 09:55:27 |