City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 199.238.166.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40436
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;199.238.166.106. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012102 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 12:27:47 CST 2025
;; MSG SIZE rcvd: 108Host 106.166.238.199.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 106.166.238.199.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 183.81.191.60 | attackspam | Brute force SMTP login attempts. |
2019-12-14 22:34:04 |
| 14.168.160.162 | attackspam | 1576304501 - 12/14/2019 07:21:41 Host: 14.168.160.162/14.168.160.162 Port: 445 TCP Blocked |
2019-12-14 22:24:58 |
| 83.255.14.113 | attackbots | Dec 14 07:21:58 mail sshd\[13364\]: Invalid user wwAdmin from 83.255.14.113 Dec 14 07:21:58 mail sshd\[13364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.255.14.113 Dec 14 07:22:00 mail sshd\[13364\]: Failed password for invalid user wwAdmin from 83.255.14.113 port 53522 ssh2 |
2019-12-14 22:04:08 |
| 45.146.201.142 | attackspambots | Lines containing failures of 45.146.201.142 Dec 14 07:02:51 shared04 postfix/smtpd[26279]: connect from possess.jovenesarrechas.com[45.146.201.142] Dec 14 07:02:51 shared04 policyd-spf[27697]: prepend Received-SPF: None (mailfrom) identhostnamey=mailfrom; client-ip=45.146.201.142; helo=possess.skwed.com; envelope-from=x@x Dec x@x Dec 14 07:02:51 shared04 postfix/smtpd[26279]: disconnect from possess.jovenesarrechas.com[45.146.201.142] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Dec 14 07:03:20 shared04 postfix/smtpd[26279]: connect from possess.jovenesarrechas.com[45.146.201.142] Dec 14 07:03:21 shared04 policyd-spf[27697]: prepend Received-SPF: None (mailfrom) identhostnamey=mailfrom; client-ip=45.146.201.142; helo=possess.skwed.com; envelope-from=x@x Dec x@x Dec 14 07:03:21 shared04 postfix/smtpd[26279]: disconnect from possess.jovenesarrechas.com[45.146.201.142] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Dec 14 07:03:34 shared04 postfix/sm........ ------------------------------ |
2019-12-14 21:51:05 |
| 157.230.112.34 | attack | Dec 14 15:03:42 ns381471 sshd[1765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.112.34 Dec 14 15:03:45 ns381471 sshd[1765]: Failed password for invalid user arvid from 157.230.112.34 port 54476 ssh2 |
2019-12-14 22:08:30 |
| 1.34.220.237 | attack | Invalid user host from 1.34.220.237 port 42736 |
2019-12-14 22:19:56 |
| 95.53.99.36 | attackspambots | Dec 14 07:15:31 nbi-636 sshd[10183]: User r.r from 95.53.99.36 not allowed because not listed in AllowUsers Dec 14 07:15:31 nbi-636 sshd[10183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.53.99.36 user=r.r Dec 14 07:15:33 nbi-636 sshd[10183]: Failed password for invalid user r.r from 95.53.99.36 port 58945 ssh2 Dec 14 07:15:35 nbi-636 sshd[10183]: Failed password for invalid user r.r from 95.53.99.36 port 58945 ssh2 Dec 14 07:15:38 nbi-636 sshd[10183]: Failed password for invalid user r.r from 95.53.99.36 port 58945 ssh2 Dec 14 07:15:40 nbi-636 sshd[10183]: Failed password for invalid user r.r from 95.53.99.36 port 58945 ssh2 Dec 14 07:15:42 nbi-636 sshd[10183]: Failed password for invalid user r.r from 95.53.99.36 port 58945 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=95.53.99.36 |
2019-12-14 22:22:33 |
| 139.189.248.78 | attack | [portscan] tcp/21 [FTP] [scan/connect: 3 time(s)] *(RWIN=65535)(12141029) |
2019-12-14 21:50:25 |
| 217.182.74.125 | attack | SSH Brute Force |
2019-12-14 22:02:37 |
| 176.107.170.191 | attack | " " |
2019-12-14 22:01:51 |
| 50.60.217.168 | attackspam | Unauthorized connection attempt detected from IP address 50.60.217.168 to port 445 |
2019-12-14 22:02:09 |
| 81.46.226.137 | attackspam | 2019-12-14T01:05:56.556804srv.ecualinux.com sshd[2754]: Invalid user student from 81.46.226.137 port 38768 2019-12-14T01:05:56.563615srv.ecualinux.com sshd[2754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.46.226.137 2019-12-14T01:05:58.509107srv.ecualinux.com sshd[2754]: Failed password for invalid user student from 81.46.226.137 port 38768 ssh2 2019-12-14T01:07:51.163490srv.ecualinux.com sshd[2845]: Invalid user ping from 81.46.226.137 port 59976 2019-12-14T01:07:51.168496srv.ecualinux.com sshd[2845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.46.226.137 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=81.46.226.137 |
2019-12-14 21:57:02 |
| 36.77.94.175 | attack | FTP Brute Force |
2019-12-14 22:03:17 |
| 218.153.159.222 | attackbots | Dec 14 01:21:31 Tower sshd[15486]: Connection from 218.153.159.222 port 53950 on 192.168.10.220 port 22 Dec 14 01:21:41 Tower sshd[15486]: Invalid user robert from 218.153.159.222 port 53950 Dec 14 01:21:41 Tower sshd[15486]: error: Could not get shadow information for NOUSER Dec 14 01:21:41 Tower sshd[15486]: Failed password for invalid user robert from 218.153.159.222 port 53950 ssh2 Dec 14 01:21:41 Tower sshd[15486]: Received disconnect from 218.153.159.222 port 53950:11: Bye Bye [preauth] Dec 14 01:21:41 Tower sshd[15486]: Disconnected from invalid user robert 218.153.159.222 port 53950 [preauth] |
2019-12-14 22:11:05 |
| 110.244.94.56 | attackbotsspam | Dec 14 03:09:25 tdfoods sshd\[27866\]: Invalid user admin from 110.244.94.56 Dec 14 03:09:25 tdfoods sshd\[27866\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.244.94.56 Dec 14 03:09:27 tdfoods sshd\[27866\]: Failed password for invalid user admin from 110.244.94.56 port 12336 ssh2 Dec 14 03:15:41 tdfoods sshd\[28416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.244.94.56 user=root Dec 14 03:15:44 tdfoods sshd\[28416\]: Failed password for root from 110.244.94.56 port 9812 ssh2 |
2019-12-14 21:59:38 |