City: unknown
Region: unknown
Country: Macedonia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 194.149.131.36
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32953
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;194.149.131.36. IN A
;; AUTHORITY SECTION:
. 321 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 22:10:46 CST 2022
;; MSG SIZE rcvd: 10736.131.149.194.in-addr.arpa domain name pointer ws.ukim.mk.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
36.131.149.194.in-addr.arpa name = ws.ukim.mk.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 111.68.105.22 | attack | 1582205308 - 02/20/2020 14:28:28 Host: 111.68.105.22/111.68.105.22 Port: 445 TCP Blocked |
2020-02-20 23:44:45 |
| 41.160.28.66 | attack | ZA South Africa - Hits: 11 |
2020-02-20 23:23:06 |
| 222.186.175.151 | attackspambots | Feb 20 15:55:17 SilenceServices sshd[3826]: Failed password for root from 222.186.175.151 port 62190 ssh2 Feb 20 15:55:32 SilenceServices sshd[3826]: Failed password for root from 222.186.175.151 port 62190 ssh2 Feb 20 15:55:32 SilenceServices sshd[3826]: error: maximum authentication attempts exceeded for root from 222.186.175.151 port 62190 ssh2 [preauth] |
2020-02-20 23:02:51 |
| 54.161.195.179 | attack | Feb 19 06:51:52 pl3server sshd[32256]: Invalid user admin from 54.161.195.179 Feb 19 06:51:52 pl3server sshd[32256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-54-161-195-179.compute-1.amazonaws.com Feb 19 06:51:55 pl3server sshd[32256]: Failed password for invalid user admin from 54.161.195.179 port 56024 ssh2 Feb 19 06:51:55 pl3server sshd[32256]: Received disconnect from 54.161.195.179: 11: Bye Bye [preauth] Feb 19 07:05:09 pl3server sshd[17175]: Invalid user rabbhostnamemq from 54.161.195.179 Feb 19 07:05:09 pl3server sshd[17175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-54-161-195-179.compute-1.amazonaws.com Feb 19 07:05:10 pl3server sshd[17175]: Failed password for invalid user rabbhostnamemq from 54.161.195.179 port 43900 ssh2 Feb 19 07:05:10 pl3server sshd[17175]: Received disconnect from 54.161.195.179: 11: Bye Bye [preauth] Feb 19 07:06:43 pl3server sshd[18957]:........ ------------------------------- |
2020-02-20 23:15:39 |
| 222.186.175.215 | attackspambots | Feb 20 22:05:58 lcl-usvr-01 sshd[13046]: refused connect from 222.186.175.215 (222.186.175.215) Feb 20 22:06:49 lcl-usvr-01 sshd[13323]: refused connect from 222.186.175.215 (222.186.175.215) Feb 20 22:10:35 lcl-usvr-01 sshd[14491]: refused connect from 222.186.175.215 (222.186.175.215) |
2020-02-20 23:23:50 |
| 51.91.100.236 | attack | DATE:2020-02-20 14:28:45, IP:51.91.100.236, PORT:ssh SSH brute force auth (docker-dc) |
2020-02-20 23:33:34 |
| 89.38.150.200 | attack | Feb 20 15:29:24 h2779839 sshd[28183]: Invalid user mapred from 89.38.150.200 port 47336 Feb 20 15:29:24 h2779839 sshd[28183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.38.150.200 Feb 20 15:29:24 h2779839 sshd[28183]: Invalid user mapred from 89.38.150.200 port 47336 Feb 20 15:29:26 h2779839 sshd[28183]: Failed password for invalid user mapred from 89.38.150.200 port 47336 ssh2 Feb 20 15:32:17 h2779839 sshd[28199]: Invalid user oracle from 89.38.150.200 port 45640 Feb 20 15:32:17 h2779839 sshd[28199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.38.150.200 Feb 20 15:32:17 h2779839 sshd[28199]: Invalid user oracle from 89.38.150.200 port 45640 Feb 20 15:32:19 h2779839 sshd[28199]: Failed password for invalid user oracle from 89.38.150.200 port 45640 ssh2 Feb 20 15:35:08 h2779839 sshd[28229]: Invalid user wangli from 89.38.150.200 port 43940 ... |
2020-02-20 23:42:33 |
| 92.63.194.7 | attack | $f2bV_matches |
2020-02-20 23:26:51 |
| 51.38.57.78 | attackbotsspam | 02/20/2020-10:24:15.072080 51.38.57.78 Protocol: 6 ET SCAN Potential SSH Scan |
2020-02-20 23:25:13 |
| 89.144.47.246 | attackspambots | Unauthorised access (Feb 20) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=796 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 19) SRC=89.144.47.246 LEN=40 TTL=246 ID=61760 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 19) SRC=89.144.47.246 LEN=40 TTL=248 ID=12661 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 19) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=33747 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 18) SRC=89.144.47.246 LEN=40 TTL=246 ID=52430 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 18) SRC=89.144.47.246 LEN=40 TTL=246 ID=42575 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 17) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=44560 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 17) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=28706 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 16) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=23437 TCP DPT=3389 WINDOW=1024 SYN |
2020-02-20 23:01:38 |
| 3.135.208.239 | attackspam | Feb 20 13:27:32 web8 sshd\[18987\]: Invalid user michael from 3.135.208.239 Feb 20 13:27:32 web8 sshd\[18987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.135.208.239 Feb 20 13:27:34 web8 sshd\[18987\]: Failed password for invalid user michael from 3.135.208.239 port 45296 ssh2 Feb 20 13:28:56 web8 sshd\[19671\]: Invalid user cpaneleximscanner from 3.135.208.239 Feb 20 13:28:56 web8 sshd\[19671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.135.208.239 |
2020-02-20 23:22:15 |
| 83.97.20.171 | attack | Port probing on unauthorized port 5432 |
2020-02-20 23:09:47 |
| 164.132.111.76 | attackspam | Feb 20 04:21:39 web1 sshd\[12456\]: Invalid user rr from 164.132.111.76 Feb 20 04:21:39 web1 sshd\[12456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.111.76 Feb 20 04:21:42 web1 sshd\[12456\]: Failed password for invalid user rr from 164.132.111.76 port 43926 ssh2 Feb 20 04:24:04 web1 sshd\[12684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.111.76 user=gnats Feb 20 04:24:06 web1 sshd\[12684\]: Failed password for gnats from 164.132.111.76 port 36680 ssh2 |
2020-02-20 23:22:41 |
| 106.13.138.3 | attackspambots | DATE:2020-02-20 14:29:27, IP:106.13.138.3, PORT:ssh SSH brute force auth (docker-dc) |
2020-02-20 23:01:11 |
| 223.242.228.146 | attack | Email spam message |
2020-02-20 23:14:32 |