City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.67.60.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52188
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.67.60.92. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024061001 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 11 03:59:34 CST 2024
;; MSG SIZE rcvd: 105Host 92.60.67.149.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 92.60.67.149.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 140.143.69.34 | attack | Jul 17 18:42:09 [munged] sshd[12648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.69.34 user=ftp Jul 17 18:42:11 [munged] sshd[12648]: Failed password for ftp from 140.143.69.34 port 34520 ssh2 |
2019-07-18 06:15:14 |
| 179.215.174.85 | attackspam | Jul 17 12:25:53 servernet sshd[1212]: Invalid user wordpress from 179.215.174.85 Jul 17 12:25:53 servernet sshd[1212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.215.174.85 Jul 17 12:25:56 servernet sshd[1212]: Failed password for invalid user wordpress from 179.215.174.85 port 59072 ssh2 Jul 17 12:39:26 servernet sshd[1631]: Invalid user velochostnamey from 179.215.174.85 Jul 17 12:39:26 servernet sshd[1631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.215.174.85 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=179.215.174.85 |
2019-07-18 05:51:57 |
| 54.37.254.57 | attackspambots | Jul 17 23:42:37 SilenceServices sshd[7051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.254.57 Jul 17 23:42:39 SilenceServices sshd[7051]: Failed password for invalid user hans from 54.37.254.57 port 40190 ssh2 Jul 17 23:46:57 SilenceServices sshd[9401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.254.57 |
2019-07-18 05:53:20 |
| 43.254.125.162 | attack | 2019-07-17T12:26:34.160781stt-1.[munged] kernel: [7412413.638541] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=43.254.125.162 DST=[mungedIP1] LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=14180 DF PROTO=TCP SPT=52620 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 2019-07-17T12:26:37.163766stt-1.[munged] kernel: [7412416.641519] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=43.254.125.162 DST=[mungedIP1] LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=14296 DF PROTO=TCP SPT=52620 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 2019-07-17T12:26:43.161277stt-1.[munged] kernel: [7412422.638984] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=43.254.125.162 DST=[mungedIP1] LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=14437 DF PROTO=TCP SPT=52620 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 |
2019-07-18 06:26:23 |
| 99.108.141.4 | attackbots | Jul 15 06:50:56 Aberdeen-m4-Access auth.info sshd[1113]: Invalid user mysql from 99.108.141.4 port 47606 Jul 15 06:50:56 Aberdeen-m4-Access auth.info sshd[1113]: Failed password for invalid user mysql from 99.108.141.4 port 47606 ssh2 Jul 15 06:50:56 Aberdeen-m4-Access auth.notice sshguard[22701]: Attack from "99.108.141.4" on service 100 whostnameh danger 10. Jul 15 06:50:56 Aberdeen-m4-Access auth.notice sshguard[22701]: Attack from "99.108.141.4" on service 100 whostnameh danger 10. Jul 15 06:50:56 Aberdeen-m4-Access auth.info sshd[1113]: Received disconnect from 99.108.141.4 port 47606:11: Bye Bye [preauth] Jul 15 06:50:56 Aberdeen-m4-Access auth.info sshd[1113]: Disconnected from 99.108.141.4 port 47606 [preauth] Jul 15 06:50:56 Aberdeen-m4-Access auth.notice sshguard[22701]: Attack from "99.108.141.4" on service 100 whostnameh danger 10. Jul 15 06:50:56 Aberdeen-m4-Access auth.warn sshguard[22701]: Blocking "99.108.141.4/32" forever (3 attacks in 0 secs, after 3 ab........ ------------------------------ |
2019-07-18 06:08:23 |
| 218.92.0.164 | attackspambots | Jul 17 23:35:05 vps691689 sshd[23291]: Failed password for root from 218.92.0.164 port 64101 ssh2 Jul 17 23:35:13 vps691689 sshd[23291]: Failed password for root from 218.92.0.164 port 64101 ssh2 Jul 17 23:35:16 vps691689 sshd[23291]: Failed password for root from 218.92.0.164 port 64101 ssh2 ... |
2019-07-18 06:13:13 |
| 122.195.200.14 | attack | Jul 17 23:56:40 arianus sshd\[23599\]: Unable to negotiate with 122.195.200.14 port 26369: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 \[preauth\] ... |
2019-07-18 06:18:29 |
| 221.204.11.179 | attackspambots | Jul 17 23:10:15 mail sshd\[22226\]: Invalid user uftp from 221.204.11.179 port 41166 Jul 17 23:10:15 mail sshd\[22226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.204.11.179 ... |
2019-07-18 06:11:07 |
| 41.216.213.58 | attack | Unauthorised access (Jul 17) SRC=41.216.213.58 LEN=40 TOS=0x08 PREC=0x20 TTL=46 ID=33519 TCP DPT=8080 WINDOW=25839 SYN |
2019-07-18 06:01:56 |
| 148.70.2.5 | attackspam | Jul 16 13:35:32 datentool sshd[3090]: Invalid user akhan from 148.70.2.5 Jul 16 13:35:32 datentool sshd[3090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.2.5 Jul 16 13:35:35 datentool sshd[3090]: Failed password for invalid user akhan from 148.70.2.5 port 50504 ssh2 Jul 16 13:45:26 datentool sshd[3159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.2.5 user=r.r Jul 16 13:45:28 datentool sshd[3159]: Failed password for r.r from 148.70.2.5 port 57436 ssh2 Jul 16 13:51:13 datentool sshd[3188]: Invalid user mini from 148.70.2.5 Jul 16 13:51:13 datentool sshd[3188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.2.5 Jul 16 13:51:16 datentool sshd[3188]: Failed password for invalid user mini from 148.70.2.5 port 52020 ssh2 Jul 16 13:56:35 datentool sshd[3207]: Invalid user eric from 148.70.2.5 Jul 16 13:56:35 datentool sshd[32........ ------------------------------- |
2019-07-18 06:16:53 |
| 111.230.211.183 | attack | Jul 17 22:58:49 dedicated sshd[4968]: Invalid user test from 111.230.211.183 port 57976 |
2019-07-18 06:20:16 |
| 112.85.42.180 | attack | Jul 17 18:42:36 arianus sshd\[22587\]: Unable to negotiate with 112.85.42.180 port 18203: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 \[preauth\] ... |
2019-07-18 05:52:27 |
| 112.27.39.226 | attackbots | Jul 16 14:00:57 vpxxxxxxx22308 sshd[19233]: Invalid user admin from 112.27.39.226 Jul 16 14:00:57 vpxxxxxxx22308 sshd[19233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.27.39.226 Jul 16 14:00:59 vpxxxxxxx22308 sshd[19233]: Failed password for invalid user admin from 112.27.39.226 port 33372 ssh2 Jul 16 14:01:01 vpxxxxxxx22308 sshd[19235]: Invalid user admin from 112.27.39.226 Jul 16 14:01:01 vpxxxxxxx22308 sshd[19235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.27.39.226 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=112.27.39.226 |
2019-07-18 06:25:56 |
| 80.237.79.94 | attack | [portscan] Port scan |
2019-07-18 06:04:14 |
| 178.170.254.175 | attackbotsspam | [portscan] Port scan |
2019-07-18 06:06:44 |