City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 16.42.167.163
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35186
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;16.42.167.163. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022500 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 25 18:22:25 CST 2025
;; MSG SIZE rcvd: 106Host 163.167.42.16.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 163.167.42.16.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.178.50.20 | attack | Oct 4 15:56:21 itv-usvr-02 sshd[14105]: Invalid user postgres from 51.178.50.20 port 53792 Oct 4 15:56:21 itv-usvr-02 sshd[14105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.50.20 Oct 4 15:56:21 itv-usvr-02 sshd[14105]: Invalid user postgres from 51.178.50.20 port 53792 Oct 4 15:56:23 itv-usvr-02 sshd[14105]: Failed password for invalid user postgres from 51.178.50.20 port 53792 ssh2 Oct 4 16:01:21 itv-usvr-02 sshd[14316]: Invalid user uftp from 51.178.50.20 port 48980 |
2020-10-04 20:50:45 |
| 2a02:c207:3003:4903::1 | attack | [munged]::443 2a02:c207:3003:4903::1 - - [04/Oct/2020:01:17:46 +0200] "POST /[munged]: HTTP/1.1" 200 7958 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 2a02:c207:3003:4903::1 - - [04/Oct/2020:01:17:49 +0200] "POST /[munged]: HTTP/1.1" 200 7945 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 2a02:c207:3003:4903::1 - - [04/Oct/2020:01:17:50 +0200] "POST /[munged]: HTTP/1.1" 200 7943 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 2a02:c207:3003:4903::1 - - [04/Oct/2020:01:17:52 +0200] "POST /[munged]: HTTP/1.1" 200 7939 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 2a02:c207:3003:4903::1 - - [04/Oct/2020:01:17:53 +0200] "POST /[munged]: HTTP/1.1" 200 7938 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 2a02:c207:3003:4903::1 - - [04/Oct/2020:01:17:55 +0200] "POST /[m |
2020-10-04 21:11:02 |
| 49.88.223.137 | attackbotsspam | MAIL: User Login Brute Force Attempt |
2020-10-04 21:09:25 |
| 103.79.154.82 | attackspam | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-10-04 20:58:39 |
| 112.85.42.119 | attackbots | DATE:2020-10-04 15:00:45,IP:112.85.42.119,MATCHES:10,PORT:ssh |
2020-10-04 21:04:46 |
| 192.241.231.242 | attackspambots | UDP port : 161 |
2020-10-04 21:02:53 |
| 62.99.90.10 | attackspam | IP blocked |
2020-10-04 20:54:26 |
| 89.232.192.40 | attackbots | 89.232.192.40 (RU/Russia/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 4 08:52:24 server5 sshd[18398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.10.42 user=root Oct 4 08:52:26 server5 sshd[18398]: Failed password for root from 139.59.10.42 port 33024 ssh2 Oct 4 08:53:33 server5 sshd[18879]: Failed password for root from 89.232.192.40 port 38844 ssh2 Oct 4 08:53:56 server5 sshd[19221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.67.226 user=root Oct 4 08:53:15 server5 sshd[18857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.22.236 user=root Oct 4 08:53:17 server5 sshd[18857]: Failed password for root from 154.221.22.236 port 51516 ssh2 IP Addresses Blocked: 139.59.10.42 (IN/India/-) |
2020-10-04 21:00:13 |
| 106.54.253.9 | attackspambots | 5x Failed Password |
2020-10-04 20:40:05 |
| 218.92.0.158 | attackspam | Oct 4 08:22:06 ny01 sshd[19965]: Failed password for root from 218.92.0.158 port 58967 ssh2 Oct 4 08:22:19 ny01 sshd[19965]: error: maximum authentication attempts exceeded for root from 218.92.0.158 port 58967 ssh2 [preauth] Oct 4 08:22:33 ny01 sshd[20003]: Failed password for root from 218.92.0.158 port 23691 ssh2 |
2020-10-04 20:44:57 |
| 218.18.161.186 | attackspam | Oct 4 08:22:28 srv-ubuntu-dev3 sshd[81420]: Invalid user deployop from 218.18.161.186 Oct 4 08:22:28 srv-ubuntu-dev3 sshd[81420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.18.161.186 Oct 4 08:22:28 srv-ubuntu-dev3 sshd[81420]: Invalid user deployop from 218.18.161.186 Oct 4 08:22:30 srv-ubuntu-dev3 sshd[81420]: Failed password for invalid user deployop from 218.18.161.186 port 48557 ssh2 Oct 4 08:24:43 srv-ubuntu-dev3 sshd[81731]: Invalid user demo from 218.18.161.186 Oct 4 08:24:43 srv-ubuntu-dev3 sshd[81731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.18.161.186 Oct 4 08:24:43 srv-ubuntu-dev3 sshd[81731]: Invalid user demo from 218.18.161.186 Oct 4 08:24:45 srv-ubuntu-dev3 sshd[81731]: Failed password for invalid user demo from 218.18.161.186 port 38162 ssh2 Oct 4 08:26:50 srv-ubuntu-dev3 sshd[81947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ru ... |
2020-10-04 20:36:28 |
| 36.73.47.71 | attackspambots | Lines containing failures of 36.73.47.71 (max 1000) Oct 3 22:28:14 srv sshd[115999]: Connection closed by 36.73.47.71 port 65376 Oct 3 22:28:18 srv sshd[116000]: Invalid user user1 from 36.73.47.71 port 49262 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=36.73.47.71 |
2020-10-04 20:46:13 |
| 61.177.172.54 | attack | Oct 4 08:37:51 NPSTNNYC01T sshd[13845]: Failed password for root from 61.177.172.54 port 37820 ssh2 Oct 4 08:38:03 NPSTNNYC01T sshd[13845]: error: maximum authentication attempts exceeded for root from 61.177.172.54 port 37820 ssh2 [preauth] Oct 4 08:38:10 NPSTNNYC01T sshd[13854]: Failed password for root from 61.177.172.54 port 2695 ssh2 ... |
2020-10-04 20:38:36 |
| 114.231.82.172 | attack | Oct 4 10:16:50 mout sshd[960]: Invalid user sshtunnel from 114.231.82.172 port 38855 |
2020-10-04 20:37:46 |
| 165.232.110.231 | attackspambots | 20 attempts against mh-ssh on river |
2020-10-04 21:05:07 |