City: Minneapolis
Region: Minnesota
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 156.142.102.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54970
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;156.142.102.91. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021300 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 19:33:36 CST 2025
;; MSG SIZE rcvd: 107
Host 91.102.142.156.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 91.102.142.156.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 193.32.160.152 | attackspam | SASL Brute Force |
2019-11-06 08:06:50 |
| 164.132.38.167 | attackspambots | Nov 5 14:00:33 web1 sshd\[17880\]: Invalid user sy from 164.132.38.167 Nov 5 14:00:33 web1 sshd\[17880\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.38.167 Nov 5 14:00:35 web1 sshd\[17880\]: Failed password for invalid user sy from 164.132.38.167 port 58398 ssh2 Nov 5 14:04:12 web1 sshd\[18211\]: Invalid user stef from 164.132.38.167 Nov 5 14:04:12 web1 sshd\[18211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.38.167 |
2019-11-06 08:25:04 |
| 103.81.85.21 | attack | Automatic report - Banned IP Access |
2019-11-06 08:22:05 |
| 106.13.23.105 | attackspambots | 2019-11-05T23:43:10.341024shield sshd\[23021\]: Invalid user denilson from 106.13.23.105 port 42830 2019-11-05T23:43:10.345286shield sshd\[23021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.23.105 2019-11-05T23:43:12.283802shield sshd\[23021\]: Failed password for invalid user denilson from 106.13.23.105 port 42830 ssh2 2019-11-05T23:47:53.208894shield sshd\[23827\]: Invalid user logan from 106.13.23.105 port 52034 2019-11-05T23:47:53.213269shield sshd\[23827\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.23.105 |
2019-11-06 08:04:20 |
| 113.193.30.98 | attackspambots | Nov 5 14:12:13 hpm sshd\[1068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.193.30.98 user=root Nov 5 14:12:15 hpm sshd\[1068\]: Failed password for root from 113.193.30.98 port 29413 ssh2 Nov 5 14:16:03 hpm sshd\[1403\]: Invalid user mc2server from 113.193.30.98 Nov 5 14:16:03 hpm sshd\[1403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.193.30.98 Nov 5 14:16:05 hpm sshd\[1403\]: Failed password for invalid user mc2server from 113.193.30.98 port 37321 ssh2 |
2019-11-06 08:23:28 |
| 45.136.110.24 | attackbots | Nov 6 00:05:40 h2177944 kernel: \[5870782.767611\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.24 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=8035 PROTO=TCP SPT=47877 DPT=47289 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 00:18:02 h2177944 kernel: \[5871524.668095\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.24 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=50604 PROTO=TCP SPT=47877 DPT=58689 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 00:20:39 h2177944 kernel: \[5871682.443339\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.24 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=25753 PROTO=TCP SPT=47877 DPT=29689 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 00:30:37 h2177944 kernel: \[5872279.736712\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.24 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=63283 PROTO=TCP SPT=47877 DPT=35089 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 00:48:46 h2177944 kernel: \[5873368.569353\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.24 DST=85.214.11 |
2019-11-06 08:05:55 |
| 222.127.97.91 | attackbotsspam | Nov 5 17:35:52 srv3 sshd\[5296\]: Invalid user bandit from 222.127.97.91 Nov 5 17:35:52 srv3 sshd\[5296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.127.97.91 Nov 5 17:35:54 srv3 sshd\[5296\]: Failed password for invalid user bandit from 222.127.97.91 port 14520 ssh2 ... |
2019-11-06 08:36:07 |
| 106.52.166.242 | attack | Nov 5 23:57:39 localhost sshd\[7834\]: Invalid user qt from 106.52.166.242 port 50108 Nov 5 23:57:39 localhost sshd\[7834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.166.242 Nov 5 23:57:40 localhost sshd\[7834\]: Failed password for invalid user qt from 106.52.166.242 port 50108 ssh2 ... |
2019-11-06 08:31:29 |
| 218.92.0.199 | attack | Nov 6 00:02:24 venus sshd\[24661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.199 user=root Nov 6 00:02:26 venus sshd\[24661\]: Failed password for root from 218.92.0.199 port 28744 ssh2 Nov 6 00:02:27 venus sshd\[24661\]: Failed password for root from 218.92.0.199 port 28744 ssh2 ... |
2019-11-06 08:06:24 |
| 159.89.162.118 | attack | Nov 5 13:28:42 auw2 sshd\[16913\]: Invalid user gentry from 159.89.162.118 Nov 5 13:28:42 auw2 sshd\[16913\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.162.118 Nov 5 13:28:44 auw2 sshd\[16913\]: Failed password for invalid user gentry from 159.89.162.118 port 60324 ssh2 Nov 5 13:33:10 auw2 sshd\[17272\]: Invalid user roger from 159.89.162.118 Nov 5 13:33:10 auw2 sshd\[17272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.162.118 |
2019-11-06 08:22:41 |
| 60.222.233.208 | attackspambots | 2019-11-06T00:13:26.933011shield sshd\[27757\]: Invalid user jagger from 60.222.233.208 port 61162 2019-11-06T00:13:26.939139shield sshd\[27757\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.222.233.208 2019-11-06T00:13:29.179129shield sshd\[27757\]: Failed password for invalid user jagger from 60.222.233.208 port 61162 ssh2 2019-11-06T00:17:43.170856shield sshd\[28806\]: Invalid user krishna from 60.222.233.208 port 46648 2019-11-06T00:17:43.176327shield sshd\[28806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.222.233.208 |
2019-11-06 08:25:22 |
| 176.175.110.238 | attackbotsspam | Nov 6 00:02:43 hcbbdb sshd\[30685\]: Invalid user spider from 176.175.110.238 Nov 6 00:02:43 hcbbdb sshd\[30685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-176-175-110-238.ftth.abo.bbox.fr Nov 6 00:02:45 hcbbdb sshd\[30685\]: Failed password for invalid user spider from 176.175.110.238 port 34964 ssh2 Nov 6 00:07:57 hcbbdb sshd\[31213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-176-175-110-238.ftth.abo.bbox.fr user=root Nov 6 00:07:59 hcbbdb sshd\[31213\]: Failed password for root from 176.175.110.238 port 45476 ssh2 |
2019-11-06 08:18:13 |
| 119.10.115.36 | attackbotsspam | 2019-11-06T00:06:26.040056shield sshd\[26444\]: Invalid user cactiuser from 119.10.115.36 port 54715 2019-11-06T00:06:26.044147shield sshd\[26444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.10.115.36 2019-11-06T00:06:27.958076shield sshd\[26444\]: Failed password for invalid user cactiuser from 119.10.115.36 port 54715 ssh2 2019-11-06T00:11:50.624167shield sshd\[27407\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.10.115.36 user=root 2019-11-06T00:11:52.352252shield sshd\[27407\]: Failed password for root from 119.10.115.36 port 39963 ssh2 |
2019-11-06 08:33:57 |
| 149.56.96.78 | attackspambots | Nov 6 00:37:16 jane sshd[21350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.96.78 Nov 6 00:37:19 jane sshd[21350]: Failed password for invalid user Pass123!@# from 149.56.96.78 port 16882 ssh2 ... |
2019-11-06 08:27:22 |
| 191.205.197.243 | attackspam | From CCTV User Interface Log ...::ffff:191.205.197.243 - - [05/Nov/2019:17:36:00 +0000] "GET / HTTP/1.1" 200 960 ::ffff:191.205.197.243 - - [05/Nov/2019:17:36:00 +0000] "GET / HTTP/1.1" 200 960 ... |
2019-11-06 08:32:17 |