City: unknown
Region: unknown
Country: Europe
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 168.168.104.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11357
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;168.168.104.138. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022700 1800 900 604800 86400
;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 27 18:52:50 CST 2025
;; MSG SIZE rcvd: 108Host 138.104.168.168.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 138.104.168.168.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.10.55.163 | attackspambots | 06/27/2020-23:54:56.580709 103.10.55.163 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2020-06-28 14:13:45 |
| 107.173.176.209 | attackspam | *Port Scan* detected from 107.173.176.209 (US/United States/New York/Albany/107-173-176-209-host.colocrossing.com). 4 hits in the last 140 seconds |
2020-06-28 14:05:28 |
| 13.77.154.108 | attackbots | 3 failed attempts at connecting to SSH. |
2020-06-28 13:59:55 |
| 79.137.163.43 | attackspambots | (sshd) Failed SSH login from 79.137.163.43 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 28 05:44:29 grace sshd[3147]: Invalid user ckc from 79.137.163.43 port 52916 Jun 28 05:44:31 grace sshd[3147]: Failed password for invalid user ckc from 79.137.163.43 port 52916 ssh2 Jun 28 05:50:41 grace sshd[4167]: Invalid user nr from 79.137.163.43 port 38102 Jun 28 05:50:43 grace sshd[4167]: Failed password for invalid user nr from 79.137.163.43 port 38102 ssh2 Jun 28 05:55:21 grace sshd[4720]: Invalid user grafana from 79.137.163.43 port 37038 |
2020-06-28 13:42:48 |
| 61.177.172.128 | attackspambots | Jun 28 07:37:24 server sshd[37149]: Failed none for root from 61.177.172.128 port 24778 ssh2 Jun 28 07:37:27 server sshd[37149]: Failed password for root from 61.177.172.128 port 24778 ssh2 Jun 28 07:37:32 server sshd[37149]: Failed password for root from 61.177.172.128 port 24778 ssh2 |
2020-06-28 13:44:28 |
| 222.186.173.154 | attackspam | Jun 28 05:44:24 hcbbdb sshd\[9332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root Jun 28 05:44:25 hcbbdb sshd\[9332\]: Failed password for root from 222.186.173.154 port 29906 ssh2 Jun 28 05:44:36 hcbbdb sshd\[9332\]: Failed password for root from 222.186.173.154 port 29906 ssh2 Jun 28 05:44:39 hcbbdb sshd\[9332\]: Failed password for root from 222.186.173.154 port 29906 ssh2 Jun 28 05:44:43 hcbbdb sshd\[9352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root |
2020-06-28 13:57:09 |
| 202.88.237.15 | attackbotsspam | Jun 25 09:55:30 nandi sshd[30327]: reveeclipse mapping checking getaddrinfo for 15.237.88.202.asianet.co.in [202.88.237.15] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 25 09:55:30 nandi sshd[30327]: Invalid user com from 202.88.237.15 Jun 25 09:55:30 nandi sshd[30327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.88.237.15 Jun 25 09:55:32 nandi sshd[30327]: Failed password for invalid user com from 202.88.237.15 port 57490 ssh2 Jun 25 09:55:32 nandi sshd[30327]: Received disconnect from 202.88.237.15: 11: Bye Bye [preauth] Jun 25 10:17:08 nandi sshd[10743]: reveeclipse mapping checking getaddrinfo for 15.237.88.202.asianet.co.in [202.88.237.15] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 25 10:17:08 nandi sshd[10743]: Invalid user samira from 202.88.237.15 Jun 25 10:17:08 nandi sshd[10743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.88.237.15 Jun 25 10:17:10 nandi sshd[10743]: Fail........ ------------------------------- |
2020-06-28 13:39:19 |
| 85.209.0.100 | attack | Jun 28 07:59:51 debian64 sshd[28980]: Failed password for root from 85.209.0.100 port 50290 ssh2 Jun 28 07:59:51 debian64 sshd[28981]: Failed password for root from 85.209.0.100 port 50208 ssh2 ... |
2020-06-28 14:01:13 |
| 81.68.97.184 | attackbots | Jun 26 18:57:22 v26 sshd[10194]: Invalid user panxiaoming from 81.68.97.184 port 41794 Jun 26 18:57:24 v26 sshd[10194]: Failed password for invalid user panxiaoming from 81.68.97.184 port 41794 ssh2 Jun 26 18:57:25 v26 sshd[10194]: Received disconnect from 81.68.97.184 port 41794:11: Bye Bye [preauth] Jun 26 18:57:25 v26 sshd[10194]: Disconnected from 81.68.97.184 port 41794 [preauth] Jun 26 19:02:18 v26 sshd[10417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.97.184 user=r.r Jun 26 19:02:20 v26 sshd[10417]: Failed password for r.r from 81.68.97.184 port 55498 ssh2 Jun 26 19:02:20 v26 sshd[10417]: Received disconnect from 81.68.97.184 port 55498:11: Bye Bye [preauth] Jun 26 19:02:20 v26 sshd[10417]: Disconnected from 81.68.97.184 port 55498 [preauth] Jun 26 19:05:00 v26 sshd[10556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.97.184 user=r.r Jun 26 19:05:02 v26 sshd[105........ ------------------------------- |
2020-06-28 14:04:31 |
| 203.3.84.204 | attack | Port Scan |
2020-06-28 13:48:00 |
| 222.239.124.19 | attackbotsspam | SSH Brute-Forcing (server2) |
2020-06-28 13:38:35 |
| 45.14.150.86 | attack | 2020-06-28T03:47:48.961159abusebot-2.cloudsearch.cf sshd[32590]: Invalid user hhu from 45.14.150.86 port 55374 2020-06-28T03:47:48.968476abusebot-2.cloudsearch.cf sshd[32590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.150.86 2020-06-28T03:47:48.961159abusebot-2.cloudsearch.cf sshd[32590]: Invalid user hhu from 45.14.150.86 port 55374 2020-06-28T03:47:50.509781abusebot-2.cloudsearch.cf sshd[32590]: Failed password for invalid user hhu from 45.14.150.86 port 55374 ssh2 2020-06-28T03:55:22.518472abusebot-2.cloudsearch.cf sshd[32725]: Invalid user vftp from 45.14.150.86 port 55612 2020-06-28T03:55:22.528927abusebot-2.cloudsearch.cf sshd[32725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.150.86 2020-06-28T03:55:22.518472abusebot-2.cloudsearch.cf sshd[32725]: Invalid user vftp from 45.14.150.86 port 55612 2020-06-28T03:55:24.727967abusebot-2.cloudsearch.cf sshd[32725]: Failed password for i ... |
2020-06-28 13:43:05 |
| 212.102.33.47 | attack | (From stubbs.alejandro@outlook.com) Hello, I’m David Domine, owner of Louisville Historic Tours that operates here in Old Louisville, Kentucky. Like many businesses, I’m sure you and your employees have probably been stuck at home because of the Kentucky-wide lockdown. Most restaurants and bars still aren’t accepting large groups. This is making get-togethers or outside team building exercises currently impossible. That’s why I’m reaching out today. I run a Daytime Walking Tour and a Nighttime Ghost Tour right here in Louisville. Since our tours are outside, we are operating fully, and we are able to take groups of people (as long as we follow the social distancing guidelines.) I’ve had a huge increase in the amount of organizations booking private tours for their employees since everyone is looking for a way to get together. I wanted to reach out to you about the same possibility. Here’s the Daytime Walking Tour: https://bit.ly/DaytimeWalkingTour And here’s a bit of detail on the |
2020-06-28 13:36:05 |
| 175.24.81.123 | attackspambots | Jun 28 06:37:37 h2646465 sshd[4250]: Invalid user zh from 175.24.81.123 Jun 28 06:37:37 h2646465 sshd[4250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.81.123 Jun 28 06:37:37 h2646465 sshd[4250]: Invalid user zh from 175.24.81.123 Jun 28 06:37:38 h2646465 sshd[4250]: Failed password for invalid user zh from 175.24.81.123 port 44026 ssh2 Jun 28 06:48:17 h2646465 sshd[4975]: Invalid user orlando from 175.24.81.123 Jun 28 06:48:17 h2646465 sshd[4975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.81.123 Jun 28 06:48:17 h2646465 sshd[4975]: Invalid user orlando from 175.24.81.123 Jun 28 06:48:19 h2646465 sshd[4975]: Failed password for invalid user orlando from 175.24.81.123 port 38522 ssh2 Jun 28 06:56:26 h2646465 sshd[5531]: Invalid user rocio from 175.24.81.123 ... |
2020-06-28 13:39:37 |
| 149.56.129.68 | attackspam | Invalid user user12 from 149.56.129.68 port 43940 |
2020-06-28 14:12:21 |