City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 180.76.90.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15471
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;180.76.90.42. IN A
;; AUTHORITY SECTION:
. 473 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022063001 1800 900 604800 86400
;; Query time: 288 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 01 15:02:52 CST 2022
;; MSG SIZE rcvd: 105Host 42.90.76.180.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.90.76.180.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 102.165.35.243 | attackspam | Jul 4 07:28:08 srv00 sshd[12045]: fatal: Unable to negotiate whostnameh 102.165.35.243 port 3842: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jul 4 07:28:11 srv00 sshd[12047]: fatal: Unable to negotiate whostnameh 102.165.35.243 port 4000: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jul 4 07:28:14 srv00 sshd[12049]: fatal: Unable to negotiate whostnameh 102.165.35.243 port 4167: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jul 4 07:28:17 srv00 sshd[12051]: fatal: Unable to negotiate whostnameh 102.165.35.243 port 4339: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-gro........ ------------------------------ |
2019-07-08 08:26:48 |
| 36.90.253.106 | attackspambots | (From hayden.laroche@hotmail.com) Hello YOU WANT LIVE BUT EXPIRED DOMAINS That Are Still Posted On Wikipedia And Youtube ? Can you imagine how powerful it is to be able to pick up an expired domain that is still posted below a YouTube video that is getting hundreds or even thousands of views per day? Or be able to pick up an expired domain that still has a live link from Wikipedia? MyTrafficJacker allows users to search by keyword on either Wikipedia and YouTube and find live but expired links that are still posted on these sites that you can pick up for as little as $10 and redirect that traffic and authority anywhere they’d like. NOW GET TRAFFIC and SALES in as little as 24 hours: without having to make or rank any videos, without having to create a website, without having to pay a dime for traffic... IF YOU ARE INTERESTED, CONTACT US ==> sayedasaliha748@gmail.com Once you Join TODAY, You'll Also GET AMAZING BONUSES Regards, TrafficJacker |
2019-07-08 08:39:59 |
| 203.109.233.109 | attackbots | Jul 8 01:30:15 ubuntu-2gb-nbg1-dc3-1 sshd[16644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.109.233.109 Jul 8 01:30:16 ubuntu-2gb-nbg1-dc3-1 sshd[16644]: Failed password for invalid user gerente from 203.109.233.109 port 64444 ssh2 ... |
2019-07-08 08:56:20 |
| 148.227.224.17 | attackspambots | $f2bV_matches |
2019-07-08 08:44:16 |
| 62.234.77.136 | attackbotsspam | Jul 1 20:37:32 l01 sshd[812209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.77.136 user=r.r Jul 1 20:37:34 l01 sshd[812209]: Failed password for r.r from 62.234.77.136 port 53121 ssh2 Jul 1 20:37:37 l01 sshd[812220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.77.136 user=r.r Jul 1 20:37:38 l01 sshd[812220]: Failed password for r.r from 62.234.77.136 port 55116 ssh2 Jul 1 20:37:40 l01 sshd[812223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.77.136 user=r.r Jul 1 20:37:42 l01 sshd[812223]: Failed password for r.r from 62.234.77.136 port 57439 ssh2 Jul 1 20:37:44 l01 sshd[812229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.77.136 user=r.r Jul 1 20:37:46 l01 sshd[812229]: Failed password for r.r from 62.234.77.136 port 59581 ssh2 Jul 1 20:37:48 l01 sshd[812........ ------------------------------- |
2019-07-08 08:32:46 |
| 37.230.116.62 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-07-08 09:08:10 |
| 59.180.230.148 | attackbotsspam | Jul 1 04:27:02 new sshd[14462]: reveeclipse mapping checking getaddrinfo for triband-del-59.180.230.148.bol.net.in [59.180.230.148] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 1 04:27:04 new sshd[14462]: Failed password for invalid user anicet from 59.180.230.148 port 54632 ssh2 Jul 1 04:27:04 new sshd[14462]: Received disconnect from 59.180.230.148: 11: Bye Bye [preauth] Jul 1 04:29:28 new sshd[14836]: reveeclipse mapping checking getaddrinfo for triband-del-59.180.230.148.bol.net.in [59.180.230.148] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 1 04:29:29 new sshd[14836]: Failed password for invalid user ang from 59.180.230.148 port 16460 ssh2 Jul 1 04:29:29 new sshd[14836]: Received disconnect from 59.180.230.148: 11: Bye Bye [preauth] Jul 1 04:31:32 new sshd[15758]: reveeclipse mapping checking getaddrinfo for triband-del-59.180.230.148.bol.net.in [59.180.230.148] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 1 04:31:35 new sshd[15758]: Failed password for invalid user mash........ ------------------------------- |
2019-07-08 08:55:50 |
| 1.30.28.195 | attack | 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x 2019-07-02 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=1.30.28.195 |
2019-07-08 09:10:31 |
| 153.126.146.79 | attack | $f2bV_matches |
2019-07-08 08:42:00 |
| 35.247.249.40 | attack | Jun 25 21:21:45 localhost postfix/smtpd[9753]: disconnect from 40.249.247.35.bc.googleusercontent.com[35.247.249.40] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Jun 26 05:47:21 localhost postfix/smtpd[29935]: disconnect from 40.249.247.35.bc.googleusercontent.com[35.247.249.40] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Jun 26 06:12:58 localhost postfix/smtpd[3866]: disconnect from 40.249.247.35.bc.googleusercontent.com[35.247.249.40] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Jun 26 06:37:44 localhost postfix/smtpd[10636]: disconnect from 40.249.247.35.bc.googleusercontent.com[35.247.249.40] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Jun 26 07:02:54 localhost postfix/smtpd[16482]: disconnect from 40.249.247.35.bc.googleusercontent.com[35.247.249.40] ehlo=1 auth=0/1 quhostname=1 commands=2/3 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=35.247.249.40 |
2019-07-08 08:29:20 |
| 162.243.174.84 | attackbotsspam | Lines containing failures of 162.243.174.84 Jul 5 10:26:22 server01 postfix/smtpd[2340]: connect from inspirehealthiness.com[162.243.174.84] Jul x@x Jul x@x Jul 5 10:26:24 server01 postfix/policy-spf[2348]: : Policy action=550 Please see hxxp://www.openspf.org/Why?s=mfrom;id=altel%40rfai.com;ip=162.243.174.84;r=server01.2800km.de Jul x@x Jul 5 10:26:24 server01 postfix/smtpd[2340]: lost connection after RCPT from inspirehealthiness.com[162.243.174.84] Jul 5 10:26:24 server01 postfix/smtpd[2340]: disconnect from inspirehealthiness.com[162.243.174.84] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=162.243.174.84 |
2019-07-08 08:35:45 |
| 191.53.193.200 | attackbots | failed_logins |
2019-07-08 08:52:23 |
| 45.230.2.37 | attackspam | Jul 7 07:28:23 nirvana postfix/smtpd[11985]: connect from unknown[45.230.2.37] Jul 7 07:28:26 nirvana postfix/smtpd[11985]: warning: unknown[45.230.2.37]: SASL CRAM-MD5 authentication failed: authentication failure Jul 7 07:28:26 nirvana postfix/smtpd[11985]: warning: unknown[45.230.2.37]: SASL PLAIN authentication failed: authentication failure Jul 7 07:28:28 nirvana postfix/smtpd[11985]: warning: unknown[45.230.2.37]: SASL LOGIN authentication failed: authentication failure Jul 7 07:28:28 nirvana postfix/smtpd[11985]: disconnect from unknown[45.230.2.37] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.230.2.37 |
2019-07-08 09:03:40 |
| 78.134.65.66 | attackspambots | port scan and connect, tcp 23 (telnet) |
2019-07-08 09:05:36 |
| 36.89.209.22 | attackbots | 2019-07-08T00:06:43.395794abusebot-6.cloudsearch.cf sshd\[11918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.89.209.22 user=root |
2019-07-08 08:43:44 |