City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.149.199.43
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50320
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.149.199.43. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021901 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 04:40:01 CST 2025
;; MSG SIZE rcvd: 106Host 43.199.149.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 43.199.149.20.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 203.153.34.114 | attackspambots | Unauthorized connection attempt from IP address 203.153.34.114 on Port 445(SMB) |
2019-10-19 03:37:27 |
| 106.12.84.115 | attack | Automatic report - Banned IP Access |
2019-10-19 03:32:09 |
| 163.172.6.150 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/163.172.6.150/ FR - 1H : (73) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : FR NAME ASN : ASN12876 IP : 163.172.6.150 CIDR : 163.172.0.0/17 PREFIX COUNT : 18 UNIQUE IP COUNT : 507904 ATTACKS DETECTED ASN12876 : 1H - 1 3H - 1 6H - 2 12H - 3 24H - 4 DateTime : 2019-10-18 21:53:55 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery |
2019-10-19 03:57:22 |
| 34.70.186.153 | attackspam | serveres are UTC Lines containing failures of 34.70.186.153 Oct 16 03:42:18 tux2 sshd[20805]: Invalid user marketing from 34.70.186.153 port 37210 Oct 16 03:42:18 tux2 sshd[20805]: Failed password for invalid user marketing from 34.70.186.153 port 37210 ssh2 Oct 16 03:42:18 tux2 sshd[20805]: Received disconnect from 34.70.186.153 port 37210:11: Bye Bye [preauth] Oct 16 03:42:18 tux2 sshd[20805]: Disconnected from invalid user marketing 34.70.186.153 port 37210 [preauth] Oct 16 03:55:51 tux2 sshd[21551]: Failed password for r.r from 34.70.186.153 port 43828 ssh2 Oct 16 03:55:51 tux2 sshd[21551]: Received disconnect from 34.70.186.153 port 43828:11: Bye Bye [preauth] Oct 16 03:55:51 tux2 sshd[21551]: Disconnected from authenticating user r.r 34.70.186.153 port 43828 [preauth] Oct 16 03:59:20 tux2 sshd[21739]: Invalid user ig from 34.70.186.153 port 56278 Oct 16 03:59:20 tux2 sshd[21739]: Failed password for invalid user ig from 34.70.186.153 port 56278 ssh2 Oct 16 03:59:2........ ------------------------------ |
2019-10-19 03:59:45 |
| 211.253.10.96 | attackbots | Oct 18 22:37:52 server sshd\[9207\]: Invalid user deploy from 211.253.10.96 Oct 18 22:37:52 server sshd\[9207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.10.96 Oct 18 22:37:54 server sshd\[9207\]: Failed password for invalid user deploy from 211.253.10.96 port 46344 ssh2 Oct 18 22:53:40 server sshd\[13328\]: Invalid user nicholas from 211.253.10.96 Oct 18 22:53:40 server sshd\[13328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.10.96 ... |
2019-10-19 04:06:43 |
| 74.208.94.213 | attackbots | 2019-10-18T19:53:57.975574abusebot-3.cloudsearch.cf sshd\[9857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.94.213 user=root |
2019-10-19 03:56:52 |
| 222.233.53.132 | attackspam | Oct 18 16:49:56 jane sshd[17617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.233.53.132 Oct 18 16:49:58 jane sshd[17617]: Failed password for invalid user M3d!aP0rtal from 222.233.53.132 port 54226 ssh2 ... |
2019-10-19 03:40:11 |
| 27.71.209.238 | attackbotsspam | 27.71.209.238 - - [18/Oct/2019:07:32:09 -0400] "GET /?page=..%2f..%2fetc%2fpasswd&action=view&manufacturerID=143&productID=9300&linkID=7489&duplicate=0 HTTP/1.1" 200 16655 "https://exitdevice.com/?page=..%2f..%2fetc%2fpasswd&action=view&manufacturerID=143&productID=9300&linkID=7489&duplicate=0" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ... |
2019-10-19 03:51:56 |
| 61.247.235.180 | attack | Unauthorized connection attempt from IP address 61.247.235.180 on Port 445(SMB) |
2019-10-19 03:38:37 |
| 51.77.231.213 | attackbots | Invalid user doina from 51.77.231.213 port 54652 |
2019-10-19 03:29:32 |
| 106.12.202.181 | attackbots | Oct 18 15:59:08 firewall sshd[20608]: Invalid user officina from 106.12.202.181 Oct 18 15:59:10 firewall sshd[20608]: Failed password for invalid user officina from 106.12.202.181 port 54521 ssh2 Oct 18 16:03:10 firewall sshd[20725]: Invalid user qpalzm123 from 106.12.202.181 ... |
2019-10-19 03:53:36 |
| 182.61.48.209 | attackbots | Invalid user sinusbot from 182.61.48.209 port 58330 |
2019-10-19 03:31:40 |
| 80.67.172.162 | attackbotsspam | Oct 18 19:54:09 rotator sshd\[13707\]: Failed password for root from 80.67.172.162 port 39322 ssh2Oct 18 19:54:11 rotator sshd\[13707\]: Failed password for root from 80.67.172.162 port 39322 ssh2Oct 18 19:54:14 rotator sshd\[13707\]: Failed password for root from 80.67.172.162 port 39322 ssh2Oct 18 19:54:16 rotator sshd\[13707\]: Failed password for root from 80.67.172.162 port 39322 ssh2Oct 18 19:54:18 rotator sshd\[13707\]: Failed password for root from 80.67.172.162 port 39322 ssh2Oct 18 19:54:21 rotator sshd\[13707\]: Failed password for root from 80.67.172.162 port 39322 ssh2 ... |
2019-10-19 03:46:11 |
| 167.114.0.23 | attack | Oct 18 19:03:44 XXXXXX sshd[5608]: Invalid user repair from 167.114.0.23 port 37594 |
2019-10-19 04:04:59 |
| 213.87.102.230 | attackspam | 213.87.102.230 - - [18/Oct/2019:07:32:36 -0400] "GET /?page=products&action=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00&manufacturerID=61&productID=4701-RIM&linkID=16812 HTTP/1.1" 200 17534 "https://exitdevice.com/?page=products&action=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00&manufacturerID=61&productID=4701-RIM&linkID=16812" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ... |
2019-10-19 03:30:06 |