City: Springs
Region: Gauteng
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 143.160.104.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4790
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;143.160.104.213. IN A
;; AUTHORITY SECTION:
. 120 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023050601 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 07 09:19:41 CST 2023
;; MSG SIZE rcvd: 108Host 213.104.160.143.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 213.104.160.143.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 62.234.154.222 | attackbotsspam | Invalid user rivaherrera from 62.234.154.222 port 32828 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.154.222 Failed password for invalid user rivaherrera from 62.234.154.222 port 32828 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.154.222 user=root Failed password for root from 62.234.154.222 port 57055 ssh2 |
2019-12-20 14:46:37 |
| 159.203.201.183 | attack | Port probe and connect to SMTP:25. |
2019-12-20 15:03:20 |
| 222.186.175.148 | attackbotsspam | Dec 20 07:50:37 herz-der-gamer sshd[7368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.148 user=root Dec 20 07:50:40 herz-der-gamer sshd[7368]: Failed password for root from 222.186.175.148 port 62032 ssh2 ... |
2019-12-20 14:54:50 |
| 1.227.191.138 | attackbotsspam | Dec 19 20:24:03 tdfoods sshd\[22864\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.227.191.138 user=root Dec 19 20:24:04 tdfoods sshd\[22864\]: Failed password for root from 1.227.191.138 port 36460 ssh2 Dec 19 20:30:16 tdfoods sshd\[23483\]: Invalid user asterisk from 1.227.191.138 Dec 19 20:30:16 tdfoods sshd\[23483\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.227.191.138 Dec 19 20:30:18 tdfoods sshd\[23483\]: Failed password for invalid user asterisk from 1.227.191.138 port 55532 ssh2 |
2019-12-20 14:54:06 |
| 123.30.76.237 | attackspam | Automatic report - Port Scan |
2019-12-20 14:18:48 |
| 42.118.2.1 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 04:55:16. |
2019-12-20 14:27:31 |
| 90.189.113.55 | attackbots | Unauthorized connection attempt detected from IP address 90.189.113.55 to port 445 |
2019-12-20 15:01:41 |
| 216.238.174.92 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/216.238.174.92/ US - 1H : (25) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN13536 IP : 216.238.174.92 CIDR : 216.238.168.0/21 PREFIX COUNT : 73 UNIQUE IP COUNT : 187648 ATTACKS DETECTED ASN13536 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-12-20 07:30:14 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-12-20 14:56:30 |
| 14.236.207.99 | attackspam | Dec 20 07:30:15 sso sshd[24945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.236.207.99 Dec 20 07:30:17 sso sshd[24945]: Failed password for invalid user hacker from 14.236.207.99 port 33642 ssh2 ... |
2019-12-20 15:02:15 |
| 149.56.46.220 | attack | Dec 19 20:25:01 hanapaa sshd\[17159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.ip-149-56-46.net user=root Dec 19 20:25:03 hanapaa sshd\[17159\]: Failed password for root from 149.56.46.220 port 40800 ssh2 Dec 19 20:30:08 hanapaa sshd\[17604\]: Invalid user uc from 149.56.46.220 Dec 19 20:30:08 hanapaa sshd\[17604\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.ip-149-56-46.net Dec 19 20:30:10 hanapaa sshd\[17604\]: Failed password for invalid user uc from 149.56.46.220 port 49888 ssh2 |
2019-12-20 14:51:32 |
| 93.146.243.77 | attack | "SERVER-WEBAPP Shenzhen TVT Digital Technology API OS command injection attempt" |
2019-12-20 15:08:25 |
| 112.33.13.124 | attack | Dec 20 11:30:09 gw1 sshd[28117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.33.13.124 Dec 20 11:30:11 gw1 sshd[28117]: Failed password for invalid user deceased from 112.33.13.124 port 54756 ssh2 ... |
2019-12-20 14:52:20 |
| 35.160.48.160 | attack | 12/20/2019-07:59:10.543409 35.160.48.160 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-12-20 15:04:35 |
| 190.207.127.133 | attackspambots | Unauthorized connection attempt detected from IP address 190.207.127.133 to port 445 |
2019-12-20 14:57:44 |
| 51.255.162.65 | attackbotsspam | Dec 19 19:59:39 wbs sshd\[21754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.ip-51-255-162.eu user=root Dec 19 19:59:40 wbs sshd\[21754\]: Failed password for root from 51.255.162.65 port 59126 ssh2 Dec 19 20:04:43 wbs sshd\[22200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.ip-51-255-162.eu user=root Dec 19 20:04:45 wbs sshd\[22200\]: Failed password for root from 51.255.162.65 port 33962 ssh2 Dec 19 20:09:36 wbs sshd\[22833\]: Invalid user smmsp from 51.255.162.65 |
2019-12-20 14:20:52 |