City: Pretoria
Region: Gauteng
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 165.0.43.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11604
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;165.0.43.142. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 427 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 13:40:43 CST 2025
;; MSG SIZE rcvd: 105Host 142.43.0.165.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 142.43.0.165.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 144.217.166.92 | attackspambots | Oct 24 17:45:09 sachi sshd\[11222\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.ip-144-217-166.net user=root Oct 24 17:45:11 sachi sshd\[11222\]: Failed password for root from 144.217.166.92 port 44494 ssh2 Oct 24 17:48:56 sachi sshd\[11490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.ip-144-217-166.net user=root Oct 24 17:48:58 sachi sshd\[11490\]: Failed password for root from 144.217.166.92 port 35189 ssh2 Oct 24 17:52:43 sachi sshd\[11752\]: Invalid user cms from 144.217.166.92 |
2019-10-25 15:48:35 |
| 14.164.134.11 | attackbots | 445/tcp [2019-10-25]1pkt |
2019-10-25 15:34:09 |
| 66.70.189.236 | attackbots | detected by Fail2Ban |
2019-10-25 15:35:45 |
| 188.254.0.182 | attackbots | Oct 24 18:22:04 hanapaa sshd\[25071\]: Invalid user manas from 188.254.0.182 Oct 24 18:22:04 hanapaa sshd\[25071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.182 Oct 24 18:22:07 hanapaa sshd\[25071\]: Failed password for invalid user manas from 188.254.0.182 port 39082 ssh2 Oct 24 18:26:19 hanapaa sshd\[25401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.182 user=root Oct 24 18:26:21 hanapaa sshd\[25401\]: Failed password for root from 188.254.0.182 port 48378 ssh2 |
2019-10-25 15:39:17 |
| 94.158.245.185 | attackspam | Lines containing failures of 94.158.245.185 Oct 22 00:59:56 nextcloud sshd[3830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.158.245.185 user=r.r Oct 22 00:59:59 nextcloud sshd[3830]: Failed password for r.r from 94.158.245.185 port 59458 ssh2 Oct 22 00:59:59 nextcloud sshd[3830]: Received disconnect from 94.158.245.185 port 59458:11: Bye Bye [preauth] Oct 22 00:59:59 nextcloud sshd[3830]: Disconnected from authenticating user r.r 94.158.245.185 port 59458 [preauth] Oct 22 01:30:08 nextcloud sshd[8527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.158.245.185 user=r.r Oct 22 01:30:10 nextcloud sshd[8527]: Failed password for r.r from 94.158.245.185 port 60514 ssh2 Oct 22 01:30:10 nextcloud sshd[8527]: Received disconnect from 94.158.245.185 port 60514:11: Bye Bye [preauth] Oct 22 01:30:10 nextcloud sshd[8527]: Disconnected from authenticating user r.r 94.158.245.185 port 60514........ ------------------------------ |
2019-10-25 15:49:19 |
| 118.69.54.7 | attackbots | 445/tcp [2019-10-25]1pkt |
2019-10-25 15:44:09 |
| 114.32.121.216 | attackbotsspam | port scan and connect, tcp 23 (telnet) |
2019-10-25 15:53:42 |
| 119.33.31.132 | attackbots | Port 1433 Scan |
2019-10-25 15:48:54 |
| 36.77.95.20 | attackbotsspam | 445/tcp [2019-10-25]1pkt |
2019-10-25 15:31:57 |
| 94.102.57.169 | attackbotsspam | 110/tcp 110/tcp 110/tcp [2019-10-25]3pkt |
2019-10-25 15:47:25 |
| 123.27.62.6 | attack | Trying to (more than 3 packets) bruteforce (not open) Samba/Microsoft-DS port 445 |
2019-10-25 15:42:13 |
| 36.226.170.169 | attackspam | 23/tcp [2019-10-25]1pkt |
2019-10-25 15:25:29 |
| 118.27.16.153 | attackspambots | $f2bV_matches |
2019-10-25 15:31:15 |
| 180.76.249.74 | attackbots | Oct 21 23:36:35 lola sshd[5470]: Invalid user test from 180.76.249.74 Oct 21 23:36:35 lola sshd[5470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.249.74 Oct 21 23:36:37 lola sshd[5470]: Failed password for invalid user test from 180.76.249.74 port 49272 ssh2 Oct 21 23:36:37 lola sshd[5470]: Received disconnect from 180.76.249.74: 11: Bye Bye [preauth] Oct 21 23:49:27 lola sshd[6825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.249.74 user=r.r Oct 21 23:49:29 lola sshd[6825]: Failed password for r.r from 180.76.249.74 port 43910 ssh2 Oct 21 23:49:29 lola sshd[6825]: Received disconnect from 180.76.249.74: 11: Bye Bye [preauth] Oct 21 23:54:24 lola sshd[7451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.249.74 user=r.r Oct 21 23:54:26 lola sshd[7451]: Failed password for r.r from 180.76.249.74 port 55230 ssh2 Oct 21 2........ ------------------------------- |
2019-10-25 15:30:16 |
| 190.141.220.160 | attackbots | 23/tcp [2019-10-25]1pkt |
2019-10-25 15:51:57 |