City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.40.24.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41164
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;166.40.24.16. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022800 1800 900 604800 86400
;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 17:23:09 CST 2025
;; MSG SIZE rcvd: 105Host 16.24.40.166.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 16.24.40.166.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 84.216.197.41 | attack | Multiple SASL authentication failures. Date: 2019 Oct 12. 02:16:45 -- Source IP: 84.216.197.41 Portion of the log(s): Oct 12 02:16:45 vserv postfix/smtps/smtpd[8730]: warning: c-29c5d854.04-57-73746f61.bbcust.telenor.se[84.216.197.41]: SASL PLAIN authentication failed Oct 12 02:16:34 vserv postfix/smtps/smtpd[8730]: warning: c-29c5d854.04-57-73746f61.bbcust.telenor.se[84.216.197.41]: SASL PLAIN authentication failed: Connection lost to authentication server Oct 12 02:16:34 vserv postfix/smtps/smtpd[8730]: warning: c-29c5d854.04-57-73746f61.bbcust.telenor.se[84.216.197.41]: SASL PLAIN authentication failed: Connection lost to authentication server Oct 12 02:16:23 vserv postfix/smtps/smtpd[8730]: warning: c-29c5d854.04-57-73746f61.bbcust.telenor.se[84.216.197.41]: SASL PLAIN authentication failed: Connection lost to authentication server Oct 12 02:16:23 vserv postfix/smtps/smtpd[8730]: warning: c-29c5d854.04-57-73746f61.bbcust.telenor.se[84.216.197.41]: SASL PLAIN authentication failed |
2019-10-12 20:03:19 |
| 106.75.156.175 | attack | *Port Scan* detected from 106.75.156.175 (CN/China/-). 4 hits in the last 10 seconds |
2019-10-12 19:59:22 |
| 129.204.147.102 | attack | Oct 12 08:46:23 localhost sshd\[5653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.147.102 user=root Oct 12 08:46:25 localhost sshd\[5653\]: Failed password for root from 129.204.147.102 port 34022 ssh2 Oct 12 08:51:54 localhost sshd\[6207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.147.102 user=root |
2019-10-12 20:19:36 |
| 46.61.13.90 | attackbots | Honeypot hit. |
2019-10-12 20:07:50 |
| 41.79.225.150 | attackbotsspam | Automatic report - Port Scan Attack |
2019-10-12 20:10:58 |
| 194.36.101.234 | attackspam | Unauthorised access (Oct 12) SRC=194.36.101.234 LEN=40 TOS=0x08 PREC=0x20 TTL=235 ID=34181 TCP DPT=1433 WINDOW=1024 SYN |
2019-10-12 19:43:02 |
| 51.38.49.140 | attackbotsspam | Oct 12 13:45:49 * sshd[14086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.49.140 Oct 12 13:45:52 * sshd[14086]: Failed password for invalid user 123Bud from 51.38.49.140 port 39852 ssh2 |
2019-10-12 20:23:10 |
| 45.227.255.202 | attack | Port Scan IP:45.227.255.202 |
2019-10-12 19:39:26 |
| 113.21.228.210 | attackbots | B: zzZZzz blocked content access |
2019-10-12 19:44:01 |
| 181.170.143.198 | attackspam | Automatic report - Port Scan Attack |
2019-10-12 19:40:53 |
| 45.136.109.239 | attackspambots | Oct 12 13:29:58 h2177944 kernel: \[3755824.982431\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.239 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=31045 PROTO=TCP SPT=40793 DPT=4789 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 12 13:32:30 h2177944 kernel: \[3755976.638928\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.239 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=59289 PROTO=TCP SPT=40793 DPT=3456 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 12 13:38:52 h2177944 kernel: \[3756358.971703\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.239 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=12465 PROTO=TCP SPT=40793 DPT=4485 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 12 13:39:15 h2177944 kernel: \[3756382.204192\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.239 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=21156 PROTO=TCP SPT=40793 DPT=7500 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 12 13:51:04 h2177944 kernel: \[3757090.789873\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.239 DST=85.214. |
2019-10-12 20:24:57 |
| 59.41.165.109 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 12-10-2019 06:55:18. |
2019-10-12 19:45:51 |
| 185.36.81.248 | attackspambots | Oct 12 11:13:48 mail postfix/smtpd\[23818\]: warning: unknown\[185.36.81.248\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Oct 12 11:38:39 mail postfix/smtpd\[22102\]: warning: unknown\[185.36.81.248\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Oct 12 12:03:21 mail postfix/smtpd\[26624\]: warning: unknown\[185.36.81.248\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Oct 12 12:53:11 mail postfix/smtpd\[29208\]: warning: unknown\[185.36.81.248\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2019-10-12 20:20:21 |
| 61.242.62.186 | attackbots | " " |
2019-10-12 20:13:18 |
| 111.231.137.158 | attackspam | 2019-10-12T08:03:29.019986hub.schaetter.us sshd\[29669\]: Invalid user qwer@12 from 111.231.137.158 port 53576 2019-10-12T08:03:29.027615hub.schaetter.us sshd\[29669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.137.158 2019-10-12T08:03:31.002020hub.schaetter.us sshd\[29669\]: Failed password for invalid user qwer@12 from 111.231.137.158 port 53576 ssh2 2019-10-12T08:08:15.977868hub.schaetter.us sshd\[29713\]: Invalid user P@$$@2020 from 111.231.137.158 port 33326 2019-10-12T08:08:15.990628hub.schaetter.us sshd\[29713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.137.158 ... |
2019-10-12 20:20:01 |