City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 198.3.66.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37549
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;198.3.66.42. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022500 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 26 01:24:48 CST 2025
;; MSG SIZE rcvd: 104Host 42.66.3.198.in-addr.arpa not found: 2(SERVFAIL)
server can't find 198.3.66.42.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 128.199.99.204 | attackspam | 2020-09-09 17:47:24.838121-0500 localhost sshd[28856]: Failed password for root from 128.199.99.204 port 60458 ssh2 |
2020-09-10 16:31:03 |
| 103.246.240.30 | attackspambots | (sshd) Failed SSH login from 103.246.240.30 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 9 15:00:50 jbs1 sshd[3134]: Invalid user enterprise from 103.246.240.30 Sep 9 15:00:50 jbs1 sshd[3134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.246.240.30 Sep 9 15:00:52 jbs1 sshd[3134]: Failed password for invalid user enterprise from 103.246.240.30 port 36346 ssh2 Sep 9 15:05:53 jbs1 sshd[5730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.246.240.30 user=root Sep 9 15:05:55 jbs1 sshd[5730]: Failed password for root from 103.246.240.30 port 54090 ssh2 |
2020-09-10 16:44:54 |
| 193.169.253.179 | attackbots | 2020-09-10 11:47:08 dovecot_login authenticator failed for \(User\) \[193.169.253.179\]: 535 Incorrect authentication data \(set_id=receptionist@ift.org.ua\)2020-09-10 11:47:14 dovecot_login authenticator failed for \(User\) \[193.169.253.179\]: 535 Incorrect authentication data \(set_id=receptionist@ift.org.ua\)2020-09-10 11:47:24 dovecot_login authenticator failed for \(User\) \[193.169.253.179\]: 535 Incorrect authentication data \(set_id=receptionist@ift.org.ua\) ... |
2020-09-10 16:54:28 |
| 139.59.153.133 | attackspambots | CMS (WordPress or Joomla) login attempt. |
2020-09-10 17:11:48 |
| 107.172.211.96 | attackbotsspam | Lines containing failures of 107.172.211.96 Sep 9 18:49:04 v2hgb postfix/smtpd[15740]: connect from unknown[107.172.211.96] Sep x@x Sep 9 18:49:06 v2hgb postfix/smtpd[15740]: disconnect from unknown[107.172.211.96] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=107.172.211.96 |
2020-09-10 16:38:58 |
| 50.47.140.203 | attack | 2020-09-10T03:22:41.047574yoshi.linuxbox.ninja sshd[60827]: Failed password for root from 50.47.140.203 port 53350 ssh2 2020-09-10T03:22:45.546238yoshi.linuxbox.ninja sshd[60827]: Failed password for root from 50.47.140.203 port 53350 ssh2 2020-09-10T03:22:49.904464yoshi.linuxbox.ninja sshd[60827]: Failed password for root from 50.47.140.203 port 53350 ssh2 ... |
2020-09-10 16:38:17 |
| 128.199.190.186 | attackspam | firewall-block, port(s): 1081/tcp |
2020-09-10 17:07:25 |
| 36.107.90.213 | attack | Tried our host z. |
2020-09-10 16:39:35 |
| 178.128.201.175 | attackspam | SSH Brute-Force. Ports scanning. |
2020-09-10 16:41:32 |
| 218.92.0.171 | attack | Sep 10 04:33:22 NPSTNNYC01T sshd[1963]: Failed password for root from 218.92.0.171 port 18500 ssh2 Sep 10 04:33:35 NPSTNNYC01T sshd[1963]: error: maximum authentication attempts exceeded for root from 218.92.0.171 port 18500 ssh2 [preauth] Sep 10 04:33:56 NPSTNNYC01T sshd[2084]: Failed password for root from 218.92.0.171 port 57504 ssh2 ... |
2020-09-10 16:46:03 |
| 89.248.167.141 | attackspambots |
|
2020-09-10 17:11:27 |
| 165.73.80.235 | attack | Lines containing failures of 165.73.80.235 (max 1000) Sep 7 10:04:49 ks3370873 sshd[158090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.73.80.235 user=r.r Sep 7 10:04:51 ks3370873 sshd[158090]: Failed password for r.r from 165.73.80.235 port 38350 ssh2 Sep 7 10:04:52 ks3370873 sshd[158090]: Received disconnect from 165.73.80.235 port 38350:11: Bye Bye [preauth] Sep 7 10:04:52 ks3370873 sshd[158090]: Disconnected from authenticating user r.r 165.73.80.235 port 38350 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=165.73.80.235 |
2020-09-10 16:49:20 |
| 178.128.99.141 | attack | techno.ws 178.128.99.141 [10/Sep/2020:03:59:49 +0200] "POST /wp-login.php HTTP/1.1" 200 6134 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" techno.ws 178.128.99.141 [10/Sep/2020:03:59:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4037 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-10 16:51:13 |
| 138.197.171.79 | attackspambots | SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2020-09-10 17:05:45 |
| 165.22.121.56 | attackbots | 2020-09-10T14:32:56.261945billing sshd[16238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=qsimh.com 2020-09-10T14:32:56.253369billing sshd[16238]: Invalid user mzv from 165.22.121.56 port 39702 2020-09-10T14:32:58.486927billing sshd[16238]: Failed password for invalid user mzv from 165.22.121.56 port 39702 ssh2 ... |
2020-09-10 16:34:44 |