City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 167.242.143.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56671
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;167.242.143.29. IN A
;; AUTHORITY SECTION:
. 279 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022010101 1800 900 604800 86400
;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 02 05:11:18 CST 2022
;; MSG SIZE rcvd: 107b'Host 29.143.242.167.in-addr.arpa not found: 2(SERVFAIL)
';; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 29.143.242.167.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 200.6.188.38 | attack | May 15 20:26:09 server1 sshd\[14829\]: Failed password for root from 200.6.188.38 port 42738 ssh2 May 15 20:30:07 server1 sshd\[16002\]: Invalid user hadoop from 200.6.188.38 May 15 20:30:07 server1 sshd\[16002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.6.188.38 May 15 20:30:09 server1 sshd\[16002\]: Failed password for invalid user hadoop from 200.6.188.38 port 49616 ssh2 May 15 20:34:08 server1 sshd\[17119\]: Invalid user liam from 200.6.188.38 ... |
2020-05-16 18:18:40 |
| 93.79.102.220 | attackspam | UA_VOLIA-MNT_<177>1588490722 [1:2403470:56986] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 86 [Classification: Misc Attack] [Priority: 2]: |
2020-05-16 18:29:21 |
| 203.245.28.144 | attackspambots | May 16 04:45:23 vpn01 sshd[32619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.245.28.144 May 16 04:45:25 vpn01 sshd[32619]: Failed password for invalid user timemachine from 203.245.28.144 port 35280 ssh2 ... |
2020-05-16 18:13:14 |
| 51.68.251.202 | attack | Invalid user poa from 51.68.251.202 port 56580 |
2020-05-16 18:31:27 |
| 31.27.216.108 | attackbots | May 16 03:13:09 ns382633 sshd\[32638\]: Invalid user james from 31.27.216.108 port 39834 May 16 03:13:09 ns382633 sshd\[32638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.27.216.108 May 16 03:13:11 ns382633 sshd\[32638\]: Failed password for invalid user james from 31.27.216.108 port 39834 ssh2 May 16 03:16:37 ns382633 sshd\[857\]: Invalid user duck from 31.27.216.108 port 60438 May 16 03:16:37 ns382633 sshd\[857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.27.216.108 |
2020-05-16 18:14:17 |
| 108.160.199.217 | attack | May 15 20:31:53 ns3033917 sshd[13254]: Invalid user vp from 108.160.199.217 port 42088 May 15 20:31:55 ns3033917 sshd[13254]: Failed password for invalid user vp from 108.160.199.217 port 42088 ssh2 May 16 00:04:38 ns3033917 sshd[15268]: Invalid user ubuntu from 108.160.199.217 port 43814 ... |
2020-05-16 18:00:31 |
| 64.225.58.121 | attack | May 16 02:35:13 ip-172-31-62-245 sshd\[31384\]: Invalid user hadoop1 from 64.225.58.121\ May 16 02:35:15 ip-172-31-62-245 sshd\[31384\]: Failed password for invalid user hadoop1 from 64.225.58.121 port 35254 ssh2\ May 16 02:38:40 ip-172-31-62-245 sshd\[31456\]: Invalid user ts3 from 64.225.58.121\ May 16 02:38:41 ip-172-31-62-245 sshd\[31456\]: Failed password for invalid user ts3 from 64.225.58.121 port 42990 ssh2\ May 16 02:42:11 ip-172-31-62-245 sshd\[31646\]: Invalid user leaz from 64.225.58.121\ |
2020-05-16 17:52:41 |
| 180.166.141.58 | attackbots | May 16 04:52:58 debian-2gb-nbg1-2 kernel: \[11856424.468413\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=180.166.141.58 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=237 ID=15438 PROTO=TCP SPT=50029 DPT=33501 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-16 18:01:17 |
| 51.38.238.205 | attack | May 16 04:46:01 eventyay sshd[19544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.238.205 May 16 04:46:03 eventyay sshd[19544]: Failed password for invalid user brukernavn from 51.38.238.205 port 45815 ssh2 May 16 04:49:45 eventyay sshd[19659]: Failed password for root from 51.38.238.205 port 49376 ssh2 ... |
2020-05-16 18:00:00 |
| 106.54.200.22 | attackbots | Invalid user bmdmserver from 106.54.200.22 port 52162 |
2020-05-16 17:47:16 |
| 113.21.122.50 | attackbots | Cluster member 192.168.0.30 (-) said, DENY 113.21.122.50, Reason:[(imapd) Failed IMAP login from 113.21.122.50 (NC/New Caledonia/host-113-21-122-50.canl.nc): 1 in the last 3600 secs] |
2020-05-16 17:45:18 |
| 134.122.117.242 | attackbotsspam | Port scan denied |
2020-05-16 18:19:30 |
| 222.186.175.217 | attack | 2020-05-16T02:58:57.221795shield sshd\[1825\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.217 user=root 2020-05-16T02:58:59.800928shield sshd\[1825\]: Failed password for root from 222.186.175.217 port 11770 ssh2 2020-05-16T02:59:03.151675shield sshd\[1825\]: Failed password for root from 222.186.175.217 port 11770 ssh2 2020-05-16T02:59:06.912382shield sshd\[1825\]: Failed password for root from 222.186.175.217 port 11770 ssh2 2020-05-16T02:59:11.009068shield sshd\[1825\]: Failed password for root from 222.186.175.217 port 11770 ssh2 |
2020-05-16 17:52:19 |
| 167.114.92.49 | attack | goldgier-uhren-ankauf.de:80 167.114.92.49 - - [12/May/2020:23:38:46 +0200] "POST /xmlrpc.php HTTP/1.0" 301 515 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36" goldgier-uhren-ankauf.de 167.114.92.49 [12/May/2020:23:38:48 +0200] "POST /xmlrpc.php HTTP/1.0" 302 3435 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36" |
2020-05-16 18:11:06 |
| 217.125.110.139 | attackspam | May 16 04:42:32 PorscheCustomer sshd[22134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.125.110.139 May 16 04:42:35 PorscheCustomer sshd[22134]: Failed password for invalid user temp from 217.125.110.139 port 49820 ssh2 May 16 04:48:05 PorscheCustomer sshd[22341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.125.110.139 ... |
2020-05-16 18:14:57 |