City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: TICSA-ASN
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.75.74.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54405
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;197.75.74.160. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019070701 1800 900 604800 86400
;; Query time: 4 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 08 03:21:36 CST 2019
;; MSG SIZE rcvd: 117Host 160.74.75.197.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 160.74.75.197.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 121.225.24.38 | attackspam | SSH bruteforce |
2020-04-18 08:02:39 |
| 106.75.67.48 | attackbotsspam | Apr 18 00:08:23 l03 sshd[9334]: Invalid user ubuntu from 106.75.67.48 port 36394 ... |
2020-04-18 08:10:36 |
| 193.112.129.199 | attackspambots | Apr 18 02:16:42 itv-usvr-01 sshd[3788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.129.199 user=root Apr 18 02:16:44 itv-usvr-01 sshd[3788]: Failed password for root from 193.112.129.199 port 49534 ssh2 Apr 18 02:19:59 itv-usvr-01 sshd[3927]: Invalid user hadoop from 193.112.129.199 |
2020-04-18 08:13:01 |
| 193.112.185.159 | attackspambots | Apr 17 23:17:12 www4 sshd\[12889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.185.159 user=root Apr 17 23:17:14 www4 sshd\[12889\]: Failed password for root from 193.112.185.159 port 39896 ssh2 Apr 17 23:21:28 www4 sshd\[13366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.185.159 user=root ... |
2020-04-18 08:16:56 |
| 49.88.112.114 | attack | Apr 17 19:46:20 plusreed sshd[1015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Apr 17 19:46:22 plusreed sshd[1015]: Failed password for root from 49.88.112.114 port 44032 ssh2 ... |
2020-04-18 07:52:28 |
| 218.106.244.72 | attack | [MK-VM6] Blocked by UFW |
2020-04-18 08:04:55 |
| 139.59.146.28 | attackspam | 139.59.146.28 - - [17/Apr/2020:21:20:18 +0200] "GET /wp-login.php HTTP/1.1" 200 5998 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.146.28 - - [17/Apr/2020:21:20:19 +0200] "POST /wp-login.php HTTP/1.1" 200 6778 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.146.28 - - [17/Apr/2020:21:20:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-04-18 07:49:06 |
| 167.71.229.19 | attackbots | 2020-04-17T23:21:59.982315abusebot-3.cloudsearch.cf sshd[23459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.229.19 user=root 2020-04-17T23:22:02.390467abusebot-3.cloudsearch.cf sshd[23459]: Failed password for root from 167.71.229.19 port 41606 ssh2 2020-04-17T23:26:28.727765abusebot-3.cloudsearch.cf sshd[23782]: Invalid user nj from 167.71.229.19 port 48878 2020-04-17T23:26:28.735693abusebot-3.cloudsearch.cf sshd[23782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.229.19 2020-04-17T23:26:28.727765abusebot-3.cloudsearch.cf sshd[23782]: Invalid user nj from 167.71.229.19 port 48878 2020-04-17T23:26:31.075670abusebot-3.cloudsearch.cf sshd[23782]: Failed password for invalid user nj from 167.71.229.19 port 48878 ssh2 2020-04-17T23:30:50.876535abusebot-3.cloudsearch.cf sshd[24149]: Invalid user ry from 167.71.229.19 port 56162 ... |
2020-04-18 08:07:22 |
| 14.232.160.213 | attackspam | Apr 18 01:49:50 pkdns2 sshd\[2966\]: Invalid user jw from 14.232.160.213Apr 18 01:49:52 pkdns2 sshd\[2966\]: Failed password for invalid user jw from 14.232.160.213 port 59506 ssh2Apr 18 01:53:12 pkdns2 sshd\[3136\]: Invalid user uz from 14.232.160.213Apr 18 01:53:14 pkdns2 sshd\[3136\]: Failed password for invalid user uz from 14.232.160.213 port 57036 ssh2Apr 18 01:56:33 pkdns2 sshd\[3315\]: Invalid user admin from 14.232.160.213Apr 18 01:56:35 pkdns2 sshd\[3315\]: Failed password for invalid user admin from 14.232.160.213 port 54588 ssh2 ... |
2020-04-18 07:40:52 |
| 68.183.95.11 | attackbotsspam | Apr 17 22:29:11 cloud sshd[6137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.95.11 Apr 17 22:29:12 cloud sshd[6137]: Failed password for invalid user ca from 68.183.95.11 port 37292 ssh2 |
2020-04-18 08:13:28 |
| 196.52.43.119 | attackspam | Port Scan: Events[1] countPorts[1]: 8009 .. |
2020-04-18 07:59:01 |
| 92.118.160.41 | attack | Port Scan: Events[1] countPorts[1]: 943 .. |
2020-04-18 07:50:55 |
| 106.12.90.45 | attackspambots | 2020-04-17T23:20:36.904355ns386461 sshd\[4192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.90.45 user=root 2020-04-17T23:20:38.818597ns386461 sshd\[4192\]: Failed password for root from 106.12.90.45 port 38848 ssh2 2020-04-17T23:33:50.806078ns386461 sshd\[15986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.90.45 user=root 2020-04-17T23:33:53.054475ns386461 sshd\[15986\]: Failed password for root from 106.12.90.45 port 41546 ssh2 2020-04-17T23:36:53.214425ns386461 sshd\[18896\]: Invalid user postgres from 106.12.90.45 port 51130 ... |
2020-04-18 07:57:27 |
| 185.232.30.130 | attack | Multiport scan : 36 ports scanned 1218 2001(x2) 3300(x2) 3344 3366 3377 3380 3382 3385 3386 3400(x2) 4000(x2) 4001(x2) 4444 4489(x2) 5555 5589(x2) 7777 7899 9001 9090 10086 10089 10793 13579 18933 32890 33390 33894(x2) 33895 33896(x2) 33897 33898(x2) 54321 55555 55589(x2) |
2020-04-18 08:08:31 |
| 83.223.208.13 | attackbots | Invalid user phim18h from 83.223.208.13 port 60384 |
2020-04-18 07:40:31 |