City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 173.245.204.39
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32595
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;173.245.204.39. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 05:59:08 CST 2025
;; MSG SIZE rcvd: 107Host 39.204.245.173.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 39.204.245.173.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.66.48.188 | attackspambots | Automatic report - Port Scan Attack |
2020-04-02 09:09:45 |
| 45.125.117.98 | attackbots | Icarus honeypot on github |
2020-04-02 09:03:01 |
| 178.128.213.91 | attackbots | Apr 2 02:59:59 Ubuntu-1404-trusty-64-minimal sshd\[28398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.213.91 user=root Apr 2 03:00:02 Ubuntu-1404-trusty-64-minimal sshd\[28398\]: Failed password for root from 178.128.213.91 port 51674 ssh2 Apr 2 03:07:39 Ubuntu-1404-trusty-64-minimal sshd\[4817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.213.91 user=root Apr 2 03:07:41 Ubuntu-1404-trusty-64-minimal sshd\[4817\]: Failed password for root from 178.128.213.91 port 48682 ssh2 Apr 2 03:12:01 Ubuntu-1404-trusty-64-minimal sshd\[7682\]: Invalid user weijitao from 178.128.213.91 Apr 2 03:12:01 Ubuntu-1404-trusty-64-minimal sshd\[7682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.213.91 |
2020-04-02 09:13:53 |
| 51.79.66.190 | attackbots | Invalid user hlwang from 51.79.66.190 port 44778 |
2020-04-02 09:04:13 |
| 195.210.172.43 | attackspambots | TCP src-port=43450 dst-port=25 Listed on dnsbl-sorbs abuseat-org barracuda (Project Honey Pot rated Suspicious) (304) |
2020-04-02 08:51:44 |
| 42.81.122.86 | attackspam | Port scan |
2020-04-02 08:56:35 |
| 82.149.13.45 | attackbots | Apr 1 23:00:33 ns382633 sshd\[21257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.149.13.45 user=root Apr 1 23:00:35 ns382633 sshd\[21257\]: Failed password for root from 82.149.13.45 port 47334 ssh2 Apr 1 23:08:02 ns382633 sshd\[22631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.149.13.45 user=root Apr 1 23:08:05 ns382633 sshd\[22631\]: Failed password for root from 82.149.13.45 port 37274 ssh2 Apr 1 23:11:29 ns382633 sshd\[23491\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.149.13.45 user=root |
2020-04-02 08:47:15 |
| 185.156.73.38 | attack | 04/01/2020-20:51:44.707141 185.156.73.38 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-04-02 09:11:05 |
| 61.161.125.1 | attackspam | fail2ban |
2020-04-02 09:15:12 |
| 78.128.113.73 | attackbots | Apr 2 03:04:36 relay postfix/smtpd\[8338\]: warning: unknown\[78.128.113.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 2 03:04:58 relay postfix/smtpd\[5777\]: warning: unknown\[78.128.113.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 2 03:10:59 relay postfix/smtpd\[13244\]: warning: unknown\[78.128.113.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 2 03:11:19 relay postfix/smtpd\[13244\]: warning: unknown\[78.128.113.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 2 03:11:41 relay postfix/smtpd\[5777\]: warning: unknown\[78.128.113.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-04-02 09:14:45 |
| 207.182.135.164 | attackspam | Apr 2 02:53:37 lock-38 sshd[449065]: Failed password for root from 207.182.135.164 port 54096 ssh2 Apr 2 02:56:53 lock-38 sshd[449141]: Invalid user oo from 207.182.135.164 port 56974 Apr 2 02:56:53 lock-38 sshd[449141]: Invalid user oo from 207.182.135.164 port 56974 Apr 2 02:56:53 lock-38 sshd[449141]: Failed password for invalid user oo from 207.182.135.164 port 56974 ssh2 Apr 2 03:00:09 lock-38 sshd[449243]: Failed password for root from 207.182.135.164 port 59826 ssh2 ... |
2020-04-02 09:22:12 |
| 106.75.15.142 | attackbots | (sshd) Failed SSH login from 106.75.15.142 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 1 22:39:25 amsweb01 sshd[24508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.15.142 user=root Apr 1 22:39:27 amsweb01 sshd[24508]: Failed password for root from 106.75.15.142 port 53234 ssh2 Apr 1 23:07:49 amsweb01 sshd[28007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.15.142 user=root Apr 1 23:07:51 amsweb01 sshd[28007]: Failed password for root from 106.75.15.142 port 39384 ssh2 Apr 1 23:11:24 amsweb01 sshd[28401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.15.142 user=root |
2020-04-02 08:52:07 |
| 103.86.134.194 | attack | Apr 1 20:53:33 mail sshd\[64610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.86.134.194 user=root ... |
2020-04-02 09:19:25 |
| 109.227.63.3 | attackbots | Invalid user zenobia from 109.227.63.3 port 57936 |
2020-04-02 09:00:41 |
| 139.99.122.194 | attack | 2020-04-01 16:10:52 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=ns558397.ip-139-99-122.net [139.99.122.194]:62000 I=[192.147.25.65]:25 input="CONNECT 104.26.13.200:443 HTTP/1" 2020-04-01 16:10:57 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=ns558397.ip-139-99-122.net [139.99.122.194]:62499 I=[192.147.25.65]:25 input="\004\001\001\273h\032\r\310" 2020-04-01 16:11:02 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=ns558397.ip-139-99-122.net [139.99.122.194]:61195 I=[192.147.25.65]:25 input="\005\001" ... |
2020-04-02 09:16:18 |