City: unknown
Region: unknown
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 168.138.249.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63491
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;168.138.249.66. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 06:16:32 CST 2025
;; MSG SIZE rcvd: 107Host 66.249.138.168.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 66.249.138.168.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.135.166.113 | attackbots | SSH/22 MH Probe, BF, Hack - |
2019-11-26 16:11:02 |
| 54.204.10.224 | attackbots | Nov 26 08:32:42 venus sshd\[15916\]: Invalid user maynord from 54.204.10.224 port 49352 Nov 26 08:32:42 venus sshd\[15916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.204.10.224 Nov 26 08:32:44 venus sshd\[15916\]: Failed password for invalid user maynord from 54.204.10.224 port 49352 ssh2 ... |
2019-11-26 16:33:36 |
| 191.232.198.212 | attack | Nov 26 07:23:42 pornomens sshd\[6123\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.232.198.212 user=www-data Nov 26 07:23:43 pornomens sshd\[6123\]: Failed password for www-data from 191.232.198.212 port 58776 ssh2 Nov 26 07:27:57 pornomens sshd\[6171\]: Invalid user takayama from 191.232.198.212 port 39628 Nov 26 07:27:57 pornomens sshd\[6171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.232.198.212 ... |
2019-11-26 16:30:31 |
| 81.4.111.189 | attackspambots | 2019-11-26T06:28:24.496906abusebot-2.cloudsearch.cf sshd\[25927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=tia.relhos.de user=root |
2019-11-26 16:09:39 |
| 45.82.153.135 | attack | Nov 26 08:55:39 relay postfix/smtpd\[23309\]: warning: unknown\[45.82.153.135\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 26 08:55:58 relay postfix/smtpd\[29307\]: warning: unknown\[45.82.153.135\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 26 09:02:46 relay postfix/smtpd\[29341\]: warning: unknown\[45.82.153.135\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 26 09:03:03 relay postfix/smtpd\[29285\]: warning: unknown\[45.82.153.135\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 26 09:06:59 relay postfix/smtpd\[29341\]: warning: unknown\[45.82.153.135\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-11-26 16:13:08 |
| 5.196.18.169 | attackbots | Nov 26 09:36:19 SilenceServices sshd[3525]: Failed password for root from 5.196.18.169 port 36992 ssh2 Nov 26 09:42:32 SilenceServices sshd[5635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.18.169 Nov 26 09:42:34 SilenceServices sshd[5635]: Failed password for invalid user speech-dispatcher from 5.196.18.169 port 45208 ssh2 |
2019-11-26 16:43:29 |
| 179.106.159.204 | attackbots | Sent mail to target address hacked/leaked from abandonia in 2016 |
2019-11-26 16:44:57 |
| 103.78.141.202 | attackbots | Unauthorised access (Nov 26) SRC=103.78.141.202 LEN=52 PREC=0x20 TTL=110 ID=5153 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-26 16:18:35 |
| 68.187.40.237 | attackbots | RDP Bruteforce |
2019-11-26 16:20:45 |
| 113.80.86.2 | attack | 2019-11-26T06:40:10.997755shield sshd\[3542\]: Invalid user lakristal from 113.80.86.2 port 33543 2019-11-26T06:40:11.001833shield sshd\[3542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.80.86.2 2019-11-26T06:40:12.855595shield sshd\[3542\]: Failed password for invalid user lakristal from 113.80.86.2 port 33543 ssh2 2019-11-26T06:44:24.182307shield sshd\[3813\]: Invalid user dorice from 113.80.86.2 port 49310 2019-11-26T06:44:24.188815shield sshd\[3813\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.80.86.2 |
2019-11-26 16:35:36 |
| 180.76.100.246 | attack | Web App Attack |
2019-11-26 16:23:53 |
| 118.24.99.163 | attackbotsspam | Nov 26 10:17:29 ncomp sshd[12472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.99.163 user=root Nov 26 10:17:31 ncomp sshd[12472]: Failed password for root from 118.24.99.163 port 18227 ssh2 Nov 26 10:26:00 ncomp sshd[12628]: Invalid user amp from 118.24.99.163 |
2019-11-26 16:48:20 |
| 106.13.182.173 | attackspam | Nov 26 00:50:04 cumulus sshd[30194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.182.173 user=r.r Nov 26 00:50:06 cumulus sshd[30194]: Failed password for r.r from 106.13.182.173 port 39804 ssh2 Nov 26 00:50:06 cumulus sshd[30194]: Received disconnect from 106.13.182.173 port 39804:11: Bye Bye [preauth] Nov 26 00:50:06 cumulus sshd[30194]: Disconnected from 106.13.182.173 port 39804 [preauth] Nov 26 01:05:51 cumulus sshd[31155]: Invalid user kailash from 106.13.182.173 port 40540 Nov 26 01:05:51 cumulus sshd[31155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.182.173 Nov 26 01:05:53 cumulus sshd[31155]: Failed password for invalid user kailash from 106.13.182.173 port 40540 ssh2 Nov 26 01:05:53 cumulus sshd[31155]: Received disconnect from 106.13.182.173 port 40540:11: Bye Bye [preauth] Nov 26 01:05:53 cumulus sshd[31155]: Disconnected from 106.13.182.173 port 40540 [p........ ------------------------------- |
2019-11-26 16:15:39 |
| 203.7.0.53 | attack | TCP Port Scanning |
2019-11-26 16:17:24 |
| 223.240.84.196 | attack | Nov 26 07:27:46 icinga sshd[29147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.240.84.196 Nov 26 07:27:48 icinga sshd[29147]: Failed password for invalid user 8080 from 223.240.84.196 port 55142 ssh2 ... |
2019-11-26 16:36:20 |