City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 168.80.38.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7915
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;168.80.38.143. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 51 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 21:58:47 CST 2025
;; MSG SIZE rcvd: 106Host 143.38.80.168.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 143.38.80.168.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 220.141.8.216 | attackbots | Unauthorised access (Sep 20) SRC=220.141.8.216 LEN=40 PREC=0x20 TTL=53 ID=35375 TCP DPT=23 WINDOW=3203 SYN Unauthorised access (Sep 19) SRC=220.141.8.216 LEN=40 PREC=0x20 TTL=53 ID=51888 TCP DPT=23 WINDOW=14764 SYN Unauthorised access (Sep 16) SRC=220.141.8.216 LEN=40 PREC=0x20 TTL=53 ID=64306 TCP DPT=23 WINDOW=14764 SYN Unauthorised access (Sep 15) SRC=220.141.8.216 LEN=40 PREC=0x20 TTL=53 ID=34473 TCP DPT=23 WINDOW=56252 SYN |
2019-09-21 08:17:25 |
| 163.172.207.104 | attackbots | \[2019-09-20 20:11:25\] SECURITY\[2283\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-20T20:11:25.677-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="101011972592277524",SessionID="0x7fcd8c409238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/50252",ACLName="no_extension_match" \[2019-09-20 20:15:47\] SECURITY\[2283\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-20T20:15:47.362-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="201011972592277524",SessionID="0x7fcd8c05a958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/62173",ACLName="no_extension_match" \[2019-09-20 20:19:33\] SECURITY\[2283\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-20T20:19:33.769-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="301011972592277524",SessionID="0x7fcd8c1c4788",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/50106", |
2019-09-21 08:28:11 |
| 51.38.128.94 | attack | Sep 21 00:50:07 OPSO sshd\[16594\]: Invalid user h from 51.38.128.94 port 40742 Sep 21 00:50:07 OPSO sshd\[16594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.128.94 Sep 21 00:50:08 OPSO sshd\[16594\]: Failed password for invalid user h from 51.38.128.94 port 40742 ssh2 Sep 21 00:54:17 OPSO sshd\[17572\]: Invalid user support from 51.38.128.94 port 54072 Sep 21 00:54:17 OPSO sshd\[17572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.128.94 |
2019-09-21 08:48:15 |
| 150.95.187.89 | attackbotsspam | Sep 21 02:21:21 vps01 sshd[19816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.187.89 Sep 21 02:21:23 vps01 sshd[19816]: Failed password for invalid user hlds from 150.95.187.89 port 49994 ssh2 |
2019-09-21 08:36:53 |
| 82.254.132.152 | attack | Sep 20 22:45:22 core sshd[26515]: Failed password for root from 82.254.132.152 port 34084 ssh2 Sep 20 22:49:31 core sshd[31587]: Invalid user mysql2 from 82.254.132.152 port 47210 ... |
2019-09-21 08:18:54 |
| 172.105.94.126 | attackspambots | Fail2Ban Ban Triggered |
2019-09-21 08:12:05 |
| 95.49.154.92 | attack | Port Scan: TCP/443 |
2019-09-21 08:20:37 |
| 129.204.115.214 | attack | SSH invalid-user multiple login try |
2019-09-21 08:14:19 |
| 23.94.46.192 | attackspam | [Aegis] @ 2019-09-20 23:39:18 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack |
2019-09-21 08:40:44 |
| 178.128.36.204 | attackspam | Sep 21 01:13:46 Ubuntu-1404-trusty-64-minimal sshd\[23666\]: Invalid user manager from 178.128.36.204 Sep 21 01:13:46 Ubuntu-1404-trusty-64-minimal sshd\[23666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.36.204 Sep 21 01:13:48 Ubuntu-1404-trusty-64-minimal sshd\[23666\]: Failed password for invalid user manager from 178.128.36.204 port 51984 ssh2 Sep 21 01:30:36 Ubuntu-1404-trusty-64-minimal sshd\[1502\]: Invalid user operator from 178.128.36.204 Sep 21 01:30:36 Ubuntu-1404-trusty-64-minimal sshd\[1502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.36.204 |
2019-09-21 08:11:39 |
| 123.126.113.151 | attackbotsspam | This IP address was blacklisted for the following reason: /de/jobs/?p=1640/amp/amp/amp/amp/amp/ @ 2019-09-18T20:35:21+02:00. |
2019-09-21 08:08:53 |
| 106.12.132.81 | attack | Sep 20 14:07:29 xentho sshd[26682]: Invalid user josemaria from 106.12.132.81 port 44362 Sep 20 14:07:29 xentho sshd[26682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.81 Sep 20 14:07:29 xentho sshd[26682]: Invalid user josemaria from 106.12.132.81 port 44362 Sep 20 14:07:30 xentho sshd[26682]: Failed password for invalid user josemaria from 106.12.132.81 port 44362 ssh2 Sep 20 14:09:16 xentho sshd[26697]: Invalid user melk from 106.12.132.81 port 50980 Sep 20 14:09:16 xentho sshd[26697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.81 Sep 20 14:09:16 xentho sshd[26697]: Invalid user melk from 106.12.132.81 port 50980 Sep 20 14:09:18 xentho sshd[26697]: Failed password for invalid user melk from 106.12.132.81 port 50980 ssh2 Sep 20 14:10:58 xentho sshd[26713]: Invalid user mp from 106.12.132.81 port 57597 Sep 20 14:10:58 xentho sshd[26713]: pam_unix(sshd:auth): authentication f ... |
2019-09-21 08:33:28 |
| 92.118.38.52 | attack | Sep 20 22:45:52 heicom postfix/smtpd\[17629\]: warning: unknown\[92.118.38.52\]: SASL LOGIN authentication failed: authentication failure Sep 20 22:49:09 heicom postfix/smtpd\[17800\]: warning: unknown\[92.118.38.52\]: SASL LOGIN authentication failed: authentication failure Sep 20 22:52:27 heicom postfix/smtpd\[17966\]: warning: unknown\[92.118.38.52\]: SASL LOGIN authentication failed: authentication failure Sep 20 22:55:44 heicom postfix/smtpd\[18141\]: warning: unknown\[92.118.38.52\]: SASL LOGIN authentication failed: authentication failure Sep 20 22:59:01 heicom postfix/smtpd\[18303\]: warning: unknown\[92.118.38.52\]: SASL LOGIN authentication failed: authentication failure ... |
2019-09-21 08:32:46 |
| 51.15.212.48 | attackspambots | Sep 21 02:28:47 OPSO sshd\[10361\]: Invalid user tst from 51.15.212.48 port 48848 Sep 21 02:28:47 OPSO sshd\[10361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.212.48 Sep 21 02:28:49 OPSO sshd\[10361\]: Failed password for invalid user tst from 51.15.212.48 port 48848 ssh2 Sep 21 02:33:29 OPSO sshd\[11698\]: Invalid user squid from 51.15.212.48 port 32998 Sep 21 02:33:29 OPSO sshd\[11698\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.212.48 |
2019-09-21 08:38:18 |
| 59.179.17.140 | attackspambots | $f2bV_matches |
2019-09-21 08:47:50 |