City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 168.42.120.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45412
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;168.42.120.140. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021202 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 09:10:21 CST 2025
;; MSG SIZE rcvd: 107Host 140.120.42.168.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 140.120.42.168.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 79.7.206.177 | attackspambots | SSH bruteforce |
2019-10-02 22:27:43 |
| 112.175.120.179 | attackbots | 3389BruteforceFW21 |
2019-10-02 22:16:18 |
| 1.9.46.177 | attackbots | Oct 2 15:56:24 OPSO sshd\[12737\]: Invalid user fctrserver from 1.9.46.177 port 38711 Oct 2 15:56:24 OPSO sshd\[12737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.9.46.177 Oct 2 15:56:26 OPSO sshd\[12737\]: Failed password for invalid user fctrserver from 1.9.46.177 port 38711 ssh2 Oct 2 16:00:53 OPSO sshd\[13661\]: Invalid user ps from 1.9.46.177 port 58689 Oct 2 16:00:53 OPSO sshd\[13661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.9.46.177 |
2019-10-02 22:09:21 |
| 123.207.14.76 | attackbots | Triggered by Fail2Ban at Vostok web server |
2019-10-02 22:44:03 |
| 1.55.191.176 | attack | DATE:2019-10-02 14:24:11, IP:1.55.191.176, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc-bis) |
2019-10-02 22:49:10 |
| 185.175.93.21 | attack | 10/02/2019-15:55:32.876856 185.175.93.21 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-02 22:49:32 |
| 113.173.237.249 | attackspambots | Oct 2 10:49:22 f201 sshd[10748]: Address 113.173.237.249 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 2 10:49:23 f201 sshd[10748]: Connection closed by 113.173.237.249 [preauth] Oct 2 13:29:47 f201 sshd[19240]: Address 113.173.237.249 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 2 13:29:48 f201 sshd[19240]: Connection closed by 113.173.237.249 [preauth] Oct 2 14:25:37 f201 sshd[1667]: Address 113.173.237.249 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 2 14:25:38 f201 sshd[1667]: Connection closed by 113.173.237.249 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.173.237.249 |
2019-10-02 22:32:49 |
| 120.43.48.45 | attackspambots | scan r |
2019-10-02 22:44:24 |
| 175.139.2.165 | attackspam | Oct 1 14:25:54 plesk sshd[22196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.2.165 user=r.r Oct 1 14:25:56 plesk sshd[22196]: Failed password for r.r from 175.139.2.165 port 59269 ssh2 Oct 1 14:25:56 plesk sshd[22196]: Received disconnect from 175.139.2.165: 11: Bye Bye [preauth] Oct 1 14:39:35 plesk sshd[22671]: Invalid user sales from 175.139.2.165 Oct 1 14:39:35 plesk sshd[22671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.2.165 Oct 1 14:39:37 plesk sshd[22671]: Failed password for invalid user sales from 175.139.2.165 port 51339 ssh2 Oct 1 14:39:37 plesk sshd[22671]: Received disconnect from 175.139.2.165: 11: Bye Bye [preauth] Oct 1 14:44:35 plesk sshd[22779]: Invalid user irwang from 175.139.2.165 Oct 1 14:44:35 plesk sshd[22779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.2.165 Oct 1 14:44:37 p........ ------------------------------- |
2019-10-02 22:50:01 |
| 217.15.18.144 | attack | Honeypot attack, port: 445, PTR: 217.15.18.144.static.futures.ru. |
2019-10-02 22:19:05 |
| 111.231.239.143 | attackbotsspam | 2019-10-02T17:12:18.598965tmaserv sshd\[11219\]: Failed password for invalid user weblogic from 111.231.239.143 port 43562 ssh2 2019-10-02T17:22:51.575600tmaserv sshd\[11820\]: Invalid user postmaster from 111.231.239.143 port 58866 2019-10-02T17:22:51.579869tmaserv sshd\[11820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.239.143 2019-10-02T17:22:53.559967tmaserv sshd\[11820\]: Failed password for invalid user postmaster from 111.231.239.143 port 58866 ssh2 2019-10-02T17:26:21.369913tmaserv sshd\[12168\]: Invalid user steve from 111.231.239.143 port 54554 2019-10-02T17:26:21.375215tmaserv sshd\[12168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.239.143 ... |
2019-10-02 22:33:02 |
| 1.193.160.164 | attack | Oct 2 04:04:23 sachi sshd\[25562\]: Invalid user steam from 1.193.160.164 Oct 2 04:04:23 sachi sshd\[25562\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.193.160.164 Oct 2 04:04:25 sachi sshd\[25562\]: Failed password for invalid user steam from 1.193.160.164 port 64857 ssh2 Oct 2 04:11:02 sachi sshd\[26265\]: Invalid user tony from 1.193.160.164 Oct 2 04:11:02 sachi sshd\[26265\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.193.160.164 |
2019-10-02 22:15:00 |
| 112.175.120.223 | attackspambots | 3389BruteforceFW23 |
2019-10-02 22:50:23 |
| 188.162.199.144 | attackbotsspam | Brute force attempt |
2019-10-02 22:30:59 |
| 187.218.98.121 | attackspam | Honeypot attack, port: 445, PTR: customer-187-218-98-121.uninet-ide.com.mx. |
2019-10-02 22:03:10 |