City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 168.142.149.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27728
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;168.142.149.1. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022400 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 24 18:38:40 CST 2025
;; MSG SIZE rcvd: 106Host 1.149.142.168.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 1.149.142.168.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.244.79.146 | attack | 2019-12-09T19:23:42.514564vps751288.ovh.net sshd\[818\]: Invalid user fake from 104.244.79.146 port 48600 2019-12-09T19:23:42.522924vps751288.ovh.net sshd\[818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.79.146 2019-12-09T19:23:44.676447vps751288.ovh.net sshd\[818\]: Failed password for invalid user fake from 104.244.79.146 port 48600 ssh2 2019-12-09T19:23:45.072988vps751288.ovh.net sshd\[820\]: Invalid user ubnt from 104.244.79.146 port 52200 2019-12-09T19:23:45.082297vps751288.ovh.net sshd\[820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.79.146 |
2019-12-10 02:53:39 |
| 87.103.214.196 | attackbots | Port 1433 Scan |
2019-12-10 03:03:15 |
| 190.24.146.202 | attackspambots | Unauthorized connection attempt from IP address 190.24.146.202 on Port 445(SMB) |
2019-12-10 03:01:44 |
| 128.42.123.40 | attackspam | --- report --- Dec 9 12:11:41 sshd: Connection from 128.42.123.40 port 57366 Dec 9 12:11:41 sshd: Invalid user debidatta from 128.42.123.40 Dec 9 12:11:44 sshd: Failed password for invalid user debidatta from 128.42.123.40 port 57366 ssh2 Dec 9 12:11:44 sshd: Received disconnect from 128.42.123.40: 11: Bye Bye [preauth] |
2019-12-10 02:53:18 |
| 189.158.224.244 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2019-12-10 03:07:03 |
| 222.186.173.226 | attack | 2019-12-09T14:10:57.502554xentho-1 sshd[3425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226 user=root 2019-12-09T14:10:59.520784xentho-1 sshd[3425]: Failed password for root from 222.186.173.226 port 54072 ssh2 2019-12-09T14:11:03.473943xentho-1 sshd[3425]: Failed password for root from 222.186.173.226 port 54072 ssh2 2019-12-09T14:10:57.502554xentho-1 sshd[3425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226 user=root 2019-12-09T14:10:59.520784xentho-1 sshd[3425]: Failed password for root from 222.186.173.226 port 54072 ssh2 2019-12-09T14:11:03.473943xentho-1 sshd[3425]: Failed password for root from 222.186.173.226 port 54072 ssh2 2019-12-09T14:10:57.502554xentho-1 sshd[3425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226 user=root 2019-12-09T14:10:59.520784xentho-1 sshd[3425]: Failed password for root from 2 ... |
2019-12-10 03:12:18 |
| 52.43.25.117 | attackbots | 12/09/2019-19:36:02.862147 52.43.25.117 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-12-10 02:51:23 |
| 218.92.0.141 | attackbotsspam | v+ssh-bruteforce |
2019-12-10 02:49:06 |
| 77.247.110.58 | attackspambots | 77.247.110.58 was recorded 5 times by 5 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 46, 1622 |
2019-12-10 03:03:40 |
| 200.46.28.45 | attackspambots | Unauthorized connection attempt from IP address 200.46.28.45 on Port 445(SMB) |
2019-12-10 02:58:34 |
| 181.194.225.127 | attackbotsspam | v+ssh-bruteforce |
2019-12-10 02:41:39 |
| 80.211.131.143 | attackbotsspam | Port 1433 Scan |
2019-12-10 03:05:28 |
| 111.93.237.186 | attackspambots | WP_xmlrpc_attack |
2019-12-10 02:46:48 |
| 188.162.39.138 | attackspambots | Unauthorized connection attempt detected from IP address 188.162.39.138 to port 445 |
2019-12-10 02:35:23 |
| 148.70.113.96 | attack | Dec 9 19:52:13 ArkNodeAT sshd\[2999\]: Invalid user ngoldric from 148.70.113.96 Dec 9 19:52:13 ArkNodeAT sshd\[2999\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.113.96 Dec 9 19:52:16 ArkNodeAT sshd\[2999\]: Failed password for invalid user ngoldric from 148.70.113.96 port 38358 ssh2 |
2019-12-10 02:55:48 |