City: unknown
Region: unknown
Country: Egypt
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.57.0.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49339
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;197.57.0.107. IN A
;; AUTHORITY SECTION:
. 557 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 10:50:01 CST 2022
;; MSG SIZE rcvd: 105107.0.57.197.in-addr.arpa domain name pointer host-197.57.0.107.tedata.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
107.0.57.197.in-addr.arpa name = host-197.57.0.107.tedata.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 148.244.191.65 | attackspam | Sep 7 06:48:48 localhost kernel: [1591145.210705] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=148.244.191.65 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=1656 PROTO=TCP SPT=52359 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 7 06:48:48 localhost kernel: [1591145.210730] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=148.244.191.65 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=1656 PROTO=TCP SPT=52359 DPT=445 SEQ=631754717 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-09-07 22:05:01 |
| 103.207.11.2 | attack | Sep 7 15:50:17 bouncer sshd\[22093\]: Invalid user server from 103.207.11.2 port 37690 Sep 7 15:50:17 bouncer sshd\[22093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.207.11.2 Sep 7 15:50:19 bouncer sshd\[22093\]: Failed password for invalid user server from 103.207.11.2 port 37690 ssh2 ... |
2019-09-07 22:25:05 |
| 124.158.162.58 | attackspam | Unauthorized connection attempt from IP address 124.158.162.58 on Port 445(SMB) |
2019-09-07 21:40:57 |
| 14.177.88.241 | attackbots | Sep 7 11:32:30 mxgate1 postfix/postscreen[14028]: CONNECT from [14.177.88.241]:57972 to [176.31.12.44]:25 Sep 7 11:32:30 mxgate1 postfix/dnsblog[14216]: addr 14.177.88.241 listed by domain zen.spamhaus.org as 127.0.0.3 Sep 7 11:32:30 mxgate1 postfix/dnsblog[14216]: addr 14.177.88.241 listed by domain zen.spamhaus.org as 127.0.0.11 Sep 7 11:32:30 mxgate1 postfix/dnsblog[14216]: addr 14.177.88.241 listed by domain zen.spamhaus.org as 127.0.0.4 Sep 7 11:32:30 mxgate1 postfix/dnsblog[14213]: addr 14.177.88.241 listed by domain cbl.abuseat.org as 127.0.0.2 Sep 7 11:32:31 mxgate1 postfix/postscreen[14028]: PREGREET 20 after 0.92 from [14.177.88.241]:57972: HELO xumyyyvpi.com Sep 7 11:32:31 mxgate1 postfix/postscreen[14028]: DNSBL rank 3 for [14.177.88.241]:57972 Sep x@x Sep 7 11:32:34 mxgate1 postfix/postscreen[14028]: HANGUP after 3.1 from [14.177.88.241]:57972 in tests after SMTP handshake Sep 7 11:32:34 mxgate1 postfix/postscreen[14028]: DISCONNECT [14.177.88.241........ ------------------------------- |
2019-09-07 21:57:28 |
| 222.141.41.182 | attackspambots | Sep 7 14:29:24 uapps sshd[320]: Address 222.141.41.182 maps to hn.kd.ny.adsl, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 7 14:29:24 uapps sshd[320]: User r.r from 222.141.41.182 not allowed because not listed in AllowUsers Sep 7 14:29:24 uapps sshd[320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.141.41.182 user=r.r Sep 7 14:29:27 uapps sshd[320]: Failed password for invalid user r.r from 222.141.41.182 port 37851 ssh2 Sep 7 14:29:29 uapps sshd[320]: Failed password for invalid user r.r from 222.141.41.182 port 37851 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=222.141.41.182 |
2019-09-07 21:33:12 |
| 68.183.127.13 | attackbotsspam | Sep 7 13:41:28 plex sshd[17814]: Invalid user ubuntu from 68.183.127.13 port 36114 |
2019-09-07 22:26:16 |
| 212.44.65.22 | attack | Sep 7 03:12:01 lcprod sshd\[27099\]: Invalid user minecraft from 212.44.65.22 Sep 7 03:12:01 lcprod sshd\[27099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip65-22.gazinter.net Sep 7 03:12:03 lcprod sshd\[27099\]: Failed password for invalid user minecraft from 212.44.65.22 port 62980 ssh2 Sep 7 03:16:50 lcprod sshd\[27825\]: Invalid user node from 212.44.65.22 Sep 7 03:16:50 lcprod sshd\[27825\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip65-22.gazinter.net |
2019-09-07 21:35:12 |
| 106.12.120.155 | attack | Sep 7 14:28:15 game-panel sshd[16144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.120.155 Sep 7 14:28:17 game-panel sshd[16144]: Failed password for invalid user testing from 106.12.120.155 port 55252 ssh2 Sep 7 14:35:36 game-panel sshd[16401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.120.155 |
2019-09-07 22:38:14 |
| 61.34.105.66 | attackbots | Unauthorized connection attempt from IP address 61.34.105.66 on Port 445(SMB) |
2019-09-07 21:31:53 |
| 60.250.132.155 | attackbotsspam | Sql/code injection probe |
2019-09-07 22:10:49 |
| 58.171.108.172 | attackbots | Sep 7 13:59:02 MK-Soft-VM3 sshd\[11239\]: Invalid user newuser from 58.171.108.172 port 51097 Sep 7 13:59:02 MK-Soft-VM3 sshd\[11239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.171.108.172 Sep 7 13:59:04 MK-Soft-VM3 sshd\[11239\]: Failed password for invalid user newuser from 58.171.108.172 port 51097 ssh2 ... |
2019-09-07 22:39:19 |
| 92.119.160.52 | attack | 09/07/2019-08:13:11.089242 92.119.160.52 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-09-07 21:42:55 |
| 117.50.44.215 | attackbots | Sep 7 13:56:02 MK-Soft-VM3 sshd\[11109\]: Invalid user q1w2e3 from 117.50.44.215 port 36236 Sep 7 13:56:02 MK-Soft-VM3 sshd\[11109\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.44.215 Sep 7 13:56:04 MK-Soft-VM3 sshd\[11109\]: Failed password for invalid user q1w2e3 from 117.50.44.215 port 36236 ssh2 ... |
2019-09-07 22:07:00 |
| 142.93.122.185 | attackspam | 2019-09-07T11:55:57.645987abusebot-6.cloudsearch.cf sshd\[28128\]: Invalid user user2 from 142.93.122.185 port 51348 |
2019-09-07 21:39:35 |
| 37.187.26.207 | attackspambots | Sep 7 15:40:54 SilenceServices sshd[19650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.26.207 Sep 7 15:40:56 SilenceServices sshd[19650]: Failed password for invalid user teamspeak3 from 37.187.26.207 port 54266 ssh2 Sep 7 15:44:49 SilenceServices sshd[21073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.26.207 |
2019-09-07 21:47:28 |