City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 161.162.92.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28866
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;161.162.92.242. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012501 1800 900 604800 86400
;; Query time: 46 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 26 13:07:57 CST 2025
;; MSG SIZE rcvd: 107Host 242.92.162.161.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 242.92.162.161.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 81.22.45.216 | attackspambots | port scan/probe/communication attempt |
2019-06-28 16:16:03 |
| 181.90.214.56 | attackbots | Jun 26 21:08:22 shared05 sshd[9320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.90.214.56 user=r.r Jun 26 21:08:25 shared05 sshd[9320]: Failed password for r.r from 181.90.214.56 port 45618 ssh2 Jun 26 21:08:25 shared05 sshd[9320]: Received disconnect from 181.90.214.56 port 45618:11: Bye Bye [preauth] Jun 26 21:08:25 shared05 sshd[9320]: Disconnected from 181.90.214.56 port 45618 [preauth] Jun 26 21:13:52 shared05 sshd[10533]: Invalid user mahdi from 181.90.214.56 Jun 26 21:13:52 shared05 sshd[10533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.90.214.56 Jun 26 21:13:55 shared05 sshd[10533]: Failed password for invalid user mahdi from 181.90.214.56 port 51914 ssh2 Jun 26 21:13:55 shared05 sshd[10533]: Received disconnect from 181.90.214.56 port 51914:11: Bye Bye [preauth] Jun 26 21:13:55 shared05 sshd[10533]: Disconnected from 181.90.214.56 port 51914 [preauth] ........ ---------------------------------------- |
2019-06-28 15:49:39 |
| 139.199.158.14 | attack | web-1 [ssh] SSH Attack |
2019-06-28 16:14:56 |
| 159.65.150.136 | attackbotsspam | [munged]::443 159.65.150.136 - - [28/Jun/2019:07:13:20 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 159.65.150.136 - - [28/Jun/2019:07:13:22 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 159.65.150.136 - - [28/Jun/2019:07:13:25 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 159.65.150.136 - - [28/Jun/2019:07:13:27 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 159.65.150.136 - - [28/Jun/2019:07:13:29 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 159.65.150.136 - - [28/Jun/2019:07:13:36 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11 |
2019-06-28 15:44:27 |
| 104.248.167.51 | attack | Jun 28 07:57:43 tuxlinux sshd[47111]: Invalid user alok from 104.248.167.51 port 46704 Jun 28 07:57:43 tuxlinux sshd[47111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.167.51 Jun 28 07:57:43 tuxlinux sshd[47111]: Invalid user alok from 104.248.167.51 port 46704 Jun 28 07:57:43 tuxlinux sshd[47111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.167.51 Jun 28 07:57:43 tuxlinux sshd[47111]: Invalid user alok from 104.248.167.51 port 46704 Jun 28 07:57:43 tuxlinux sshd[47111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.167.51 Jun 28 07:57:44 tuxlinux sshd[47111]: Failed password for invalid user alok from 104.248.167.51 port 46704 ssh2 ... |
2019-06-28 16:18:02 |
| 58.87.100.72 | attackspambots | $f2bV_matches |
2019-06-28 16:03:48 |
| 220.164.2.61 | attackbots | Brute force attempt |
2019-06-28 16:12:26 |
| 23.240.82.66 | attack | 2019-06-28T05:13:13.689614abusebot-2.cloudsearch.cf sshd\[11389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-23-240-82-66.socal.res.rr.com user=root |
2019-06-28 16:08:18 |
| 201.230.153.253 | attackbotsspam | port scan and connect, tcp 23 (telnet) |
2019-06-28 16:05:29 |
| 93.241.227.124 | attackbots | Jun 26 22:17:15 penfold sshd[5935]: Invalid user mrx from 93.241.227.124 port 59531 Jun 26 22:17:15 penfold sshd[5935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.241.227.124 Jun 26 22:17:16 penfold sshd[5935]: Failed password for invalid user mrx from 93.241.227.124 port 59531 ssh2 Jun 26 22:17:17 penfold sshd[5935]: Received disconnect from 93.241.227.124 port 59531:11: Bye Bye [preauth] Jun 26 22:17:17 penfold sshd[5935]: Disconnected from 93.241.227.124 port 59531 [preauth] Jun 26 22:21:53 penfold sshd[6069]: Connection closed by 93.241.227.124 port 43907 [preauth] Jun 26 22:25:12 penfold sshd[6167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.241.227.124 user=man Jun 26 22:25:14 penfold sshd[6167]: Failed password for man from 93.241.227.124 port 52229 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=93.241.227.124 |
2019-06-28 15:53:50 |
| 191.7.209.166 | attackspam | proto=tcp . spt=43688 . dpt=25 . (listed on Blocklist de Jun 27) (435) |
2019-06-28 15:43:21 |
| 82.41.77.242 | attackbotsspam | proto=tcp . spt=30858 . dpt=25 . (listed on Blocklist de Jun 27) (433) |
2019-06-28 15:45:23 |
| 188.163.99.43 | attackbots | Jun2807:26:09server6sshd[30209]:refusedconnectfrom188.163.99.43\(188.163.99.43\)Jun2807:26:09server6sshd[30211]:refusedconnectfrom188.163.99.43\(188.163.99.43\)Jun2807:26:10server6sshd[30213]:refusedconnectfrom188.163.99.43\(188.163.99.43\)Jun2807:26:14server6sshd[30219]:refusedconnectfrom188.163.99.43\(188.163.99.43\)Jun2807:26:14server6sshd[30221]:refusedconnectfrom188.163.99.43\(188.163.99.43\) |
2019-06-28 15:30:10 |
| 62.234.77.136 | attackspambots | Jun 26 11:01:35 srv1 sshd[10262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.77.136 user=r.r Jun 26 11:01:36 srv1 sshd[10262]: Failed password for r.r from 62.234.77.136 port 52712 ssh2 Jun 26 11:01:37 srv1 sshd[10262]: Received disconnect from 62.234.77.136: 11: Bye Bye [preauth] Jun 26 11:01:40 srv1 sshd[10283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.77.136 user=r.r Jun 26 11:01:42 srv1 sshd[10283]: Failed password for r.r from 62.234.77.136 port 57283 ssh2 Jun 26 11:01:42 srv1 sshd[10283]: Received disconnect from 62.234.77.136: 11: Bye Bye [preauth] Jun 26 11:01:44 srv1 sshd[10285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.77.136 user=r.r Jun 26 11:01:46 srv1 sshd[10285]: Failed password for r.r from 62.234.77.136 port 59484 ssh2 Jun 26 11:01:46 srv1 sshd[10285]: Received disconnect from 62.234.77.136: 1........ ------------------------------- |
2019-06-28 15:39:46 |
| 74.82.47.51 | attack | 7547/tcp 11211/tcp 389/tcp... [2019-04-28/06-27]43pkt,13pt.(tcp),2pt.(udp) |
2019-06-28 16:14:35 |