City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 161.149.69.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18973
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;161.149.69.242. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021600 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 01:35:54 CST 2025
;; MSG SIZE rcvd: 107Host 242.69.149.161.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 242.69.149.161.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 180.242.134.253 | attack | 34567/tcp [2019-09-23]1pkt |
2019-09-24 09:17:10 |
| 64.190.202.227 | attack | Sep 23 17:40:08 plusreed sshd[21604]: Invalid user password from 64.190.202.227 ... |
2019-09-24 08:57:04 |
| 84.254.28.47 | attack | SSH Brute-Force reported by Fail2Ban |
2019-09-24 09:14:35 |
| 84.53.210.45 | attackbots | Sep 24 01:04:37 web8 sshd\[9441\]: Invalid user test from 84.53.210.45 Sep 24 01:04:37 web8 sshd\[9441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.53.210.45 Sep 24 01:04:39 web8 sshd\[9441\]: Failed password for invalid user test from 84.53.210.45 port 37956 ssh2 Sep 24 01:09:03 web8 sshd\[12627\]: Invalid user postgres from 84.53.210.45 Sep 24 01:09:03 web8 sshd\[12627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.53.210.45 |
2019-09-24 09:15:21 |
| 49.234.86.229 | attackspambots | Sep 23 13:13:25 php1 sshd\[13639\]: Invalid user no from 49.234.86.229 Sep 23 13:13:25 php1 sshd\[13639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.86.229 Sep 23 13:13:27 php1 sshd\[13639\]: Failed password for invalid user no from 49.234.86.229 port 34138 ssh2 Sep 23 13:17:24 php1 sshd\[14515\]: Invalid user polycom from 49.234.86.229 Sep 23 13:17:24 php1 sshd\[14515\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.86.229 |
2019-09-24 08:57:21 |
| 157.157.77.168 | attack | Sep 24 02:56:04 eventyay sshd[4061]: Failed password for lp from 157.157.77.168 port 64881 ssh2 Sep 24 03:00:01 eventyay sshd[4123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.157.77.168 Sep 24 03:00:02 eventyay sshd[4123]: Failed password for invalid user mbot24 from 157.157.77.168 port 49605 ssh2 ... |
2019-09-24 09:20:17 |
| 202.83.121.35 | attack | Unauthorised access (Sep 24) SRC=202.83.121.35 LEN=40 TTL=244 ID=51324 TCP DPT=445 WINDOW=1024 SYN |
2019-09-24 09:08:18 |
| 156.194.56.52 | attack | Sep 23 23:07:23 dev sshd\[24077\]: Invalid user admin from 156.194.56.52 port 38177 Sep 23 23:07:23 dev sshd\[24077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.194.56.52 Sep 23 23:07:26 dev sshd\[24077\]: Failed password for invalid user admin from 156.194.56.52 port 38177 ssh2 |
2019-09-24 08:44:18 |
| 52.163.56.188 | attackspam | Sep 23 15:30:49 xxxxxxx9247313 sshd[15545]: Invalid user o from 52.163.56.188 Sep 23 15:30:49 xxxxxxx9247313 sshd[15545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.163.56.188 Sep 23 15:30:51 xxxxxxx9247313 sshd[15545]: Failed password for invalid user o from 52.163.56.188 port 56360 ssh2 Sep 23 15:35:47 xxxxxxx9247313 sshd[15652]: Invalid user zw from 52.163.56.188 Sep 23 15:35:47 xxxxxxx9247313 sshd[15652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.163.56.188 Sep 23 15:35:49 xxxxxxx9247313 sshd[15652]: Failed password for invalid user zw from 52.163.56.188 port 43816 ssh2 Sep 23 15:40:52 xxxxxxx9247313 sshd[15777]: Invalid user tomasi from 52.163.56.188 Sep 23 15:40:52 xxxxxxx9247313 sshd[15777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.163.56.188 Sep 23 15:40:55 xxxxxxx9247313 sshd[15777]: Failed password for invalid use........ ------------------------------ |
2019-09-24 08:39:58 |
| 106.12.120.155 | attackbots | Sep 24 03:14:30 docs sshd\[49493\]: Invalid user book from 106.12.120.155Sep 24 03:14:31 docs sshd\[49493\]: Failed password for invalid user book from 106.12.120.155 port 45024 ssh2Sep 24 03:19:27 docs sshd\[49601\]: Invalid user test from 106.12.120.155Sep 24 03:19:30 docs sshd\[49601\]: Failed password for invalid user test from 106.12.120.155 port 57168 ssh2Sep 24 03:24:20 docs sshd\[49707\]: Invalid user blond from 106.12.120.155Sep 24 03:24:22 docs sshd\[49707\]: Failed password for invalid user blond from 106.12.120.155 port 41090 ssh2 ... |
2019-09-24 08:53:32 |
| 181.105.8.109 | attackbotsspam | Honeypot attack, port: 445, PTR: host109.181-105-8.telecom.net.ar. |
2019-09-24 08:51:01 |
| 181.25.167.149 | attackspam | 9090/tcp [2019-09-23]1pkt |
2019-09-24 08:43:01 |
| 189.59.205.236 | attackspambots | 445/tcp [2019-09-23]1pkt |
2019-09-24 09:12:32 |
| 117.7.133.251 | attack | Sep 23 04:51:03 Aberdeen-m4-Access auth.info sshd[15820]: Invalid user maxime from 117.7.133.251 port 51888 Sep 23 04:51:03 Aberdeen-m4-Access auth.info sshd[15820]: Failed password for invalid user maxime from 117.7.133.251 port 51888 ssh2 Sep 23 04:51:03 Aberdeen-m4-Access auth.notice sshguard[14407]: Attack from "117.7.133.251" on service 100 whostnameh danger 10. Sep 23 04:51:03 Aberdeen-m4-Access auth.notice sshguard[14407]: Attack from "117.7.133.251" on service 100 whostnameh danger 10. Sep 23 04:51:03 Aberdeen-m4-Access auth.notice sshguard[14407]: Attack from "117.7.133.251" on service 100 whostnameh danger 10. Sep 23 04:51:03 Aberdeen-m4-Access auth.warn sshguard[14407]: Blocking "117.7.133.251/32" for 240 secs (3 attacks in 0 secs, after 2 abuses over 988 secs.) Sep 23 04:51:03 Aberdeen-m4-Access auth.info sshd[15820]: Received disconnect from 117.7.133.251 port 51888:11: Bye Bye [preauth] Sep 23 04:51:03 Aberdeen-m4-Access auth.info sshd[15820]: Disconnected ........ ------------------------------ |
2019-09-24 08:54:28 |
| 109.244.12.50 | attackbots | SSH Brute-Force reported by Fail2Ban |
2019-09-24 08:51:24 |