City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.202.75.69
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35334
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;166.202.75.69. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012100 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 21 17:34:20 CST 2025
;; MSG SIZE rcvd: 106Host 69.75.202.166.in-addr.arpa not found: 2(SERVFAIL)
server can't find 166.202.75.69.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 203.192.219.7 | attack | "fail2ban match" |
2020-09-14 05:11:52 |
| 195.2.93.68 | attackspambots | (PERMBLOCK) 195.2.93.68 (NL/Netherlands/v337910.hosted-by-vdsina.ru) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: |
2020-09-14 04:56:58 |
| 212.237.42.236 | attack | SSH invalid-user multiple login attempts |
2020-09-14 04:59:54 |
| 104.131.131.140 | attackspam | Sep 13 21:02:17 ns308116 sshd[25452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.131.140 user=root Sep 13 21:02:19 ns308116 sshd[25452]: Failed password for root from 104.131.131.140 port 40471 ssh2 Sep 13 21:05:54 ns308116 sshd[30485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.131.140 user=root Sep 13 21:05:56 ns308116 sshd[30485]: Failed password for root from 104.131.131.140 port 35061 ssh2 Sep 13 21:09:19 ns308116 sshd[2631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.131.140 user=root ... |
2020-09-14 04:57:28 |
| 159.192.250.138 | attackbots | 1600016352 - 09/13/2020 18:59:12 Host: 159.192.250.138/159.192.250.138 Port: 445 TCP Blocked |
2020-09-14 04:46:42 |
| 210.56.23.100 | attackbotsspam | Sep 13 21:44:24 host2 sshd[1383818]: Failed password for root from 210.56.23.100 port 54226 ssh2 Sep 13 21:48:18 host2 sshd[1384445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.56.23.100 user=root Sep 13 21:48:19 host2 sshd[1384445]: Failed password for root from 210.56.23.100 port 57818 ssh2 Sep 13 21:48:18 host2 sshd[1384445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.56.23.100 user=root Sep 13 21:48:19 host2 sshd[1384445]: Failed password for root from 210.56.23.100 port 57818 ssh2 ... |
2020-09-14 04:49:23 |
| 35.226.252.36 | attack | 35.226.252.36 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 13 12:58:33 server5 sshd[28629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.89.214 user=root Sep 13 12:56:05 server5 sshd[27533]: Failed password for root from 51.83.97.44 port 38070 ssh2 Sep 13 12:57:18 server5 sshd[27960]: Failed password for root from 35.226.252.36 port 48176 ssh2 Sep 13 12:58:55 server5 sshd[28762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.98.49.7 user=root Sep 13 12:58:36 server5 sshd[28629]: Failed password for root from 159.65.89.214 port 39400 ssh2 IP Addresses Blocked: 159.65.89.214 (GB/United Kingdom/-) 51.83.97.44 (FR/France/-) |
2020-09-14 04:55:24 |
| 222.186.42.213 | attack | Brute%20Force%20SSH |
2020-09-14 04:51:02 |
| 104.244.78.136 | attack | Sep 13 20:04:39 XXX sshd[60692]: Invalid user cablecom from 104.244.78.136 port 34760 |
2020-09-14 05:07:37 |
| 81.68.209.73 | attackspam | Sep 13 17:38:29 scivo sshd[6563]: Invalid user vsftp from 81.68.209.73 Sep 13 17:38:29 scivo sshd[6563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.209.73 Sep 13 17:38:31 scivo sshd[6563]: Failed password for invalid user vsftp from 81.68.209.73 port 54700 ssh2 Sep 13 17:38:32 scivo sshd[6563]: Received disconnect from 81.68.209.73: 11: Bye Bye [preauth] Sep 13 17:49:51 scivo sshd[7129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.209.73 user=r.r Sep 13 17:49:53 scivo sshd[7129]: Failed password for r.r from 81.68.209.73 port 40442 ssh2 Sep 13 17:49:54 scivo sshd[7129]: Received disconnect from 81.68.209.73: 11: Bye Bye [preauth] Sep 13 17:56:08 scivo sshd[7436]: Did not receive identification string from 81.68.209.73 Sep 13 18:02:32 scivo sshd[7788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.209.73 user=r.r Sep 13 1........ ------------------------------- |
2020-09-14 04:57:43 |
| 104.248.57.44 | attackbotsspam | B: Abusive ssh attack |
2020-09-14 05:10:11 |
| 192.42.116.18 | attackspambots | Sep 13 18:58:40 serwer sshd\[26397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.18 user=root Sep 13 18:58:43 serwer sshd\[26397\]: Failed password for root from 192.42.116.18 port 36236 ssh2 Sep 13 18:58:45 serwer sshd\[26397\]: Failed password for root from 192.42.116.18 port 36236 ssh2 ... |
2020-09-14 05:04:24 |
| 79.0.147.19 | attackspam | Telnet Server BruteForce Attack |
2020-09-14 04:58:37 |
| 106.13.167.3 | attackbots | Sep 13 22:30:58 vpn01 sshd[19535]: Failed password for root from 106.13.167.3 port 37360 ssh2 ... |
2020-09-14 04:42:33 |
| 222.186.175.183 | attackbots | Sep 13 20:43:13 localhost sshd[127999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root Sep 13 20:43:15 localhost sshd[127999]: Failed password for root from 222.186.175.183 port 11038 ssh2 Sep 13 20:43:19 localhost sshd[127999]: Failed password for root from 222.186.175.183 port 11038 ssh2 Sep 13 20:43:13 localhost sshd[127999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root Sep 13 20:43:15 localhost sshd[127999]: Failed password for root from 222.186.175.183 port 11038 ssh2 Sep 13 20:43:19 localhost sshd[127999]: Failed password for root from 222.186.175.183 port 11038 ssh2 Sep 13 20:43:13 localhost sshd[127999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root Sep 13 20:43:15 localhost sshd[127999]: Failed password for root from 222.186.175.183 port 11038 ssh2 Sep 13 20:43:19 localhost ... |
2020-09-14 05:00:30 |