City: unknown
Region: unknown
Country: Switzerland
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.199.172.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43183
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.199.172.243. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022800 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 15:08:19 CST 2025
;; MSG SIZE rcvd: 107Host 243.172.199.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 243.172.199.20.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 125.211.64.75 | attack | (ftpd) Failed FTP login from 125.211.64.75 (CN/China/-): 10 in the last 3600 secs |
2020-05-01 20:22:55 |
| 191.237.249.78 | attack | Brute force |
2020-05-01 19:54:54 |
| 124.121.31.61 | attackbotsspam | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-05-01 20:20:57 |
| 182.116.162.207 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-05-01 19:56:12 |
| 41.41.147.243 | attackbotsspam | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-05-01 20:03:22 |
| 103.101.82.155 | attackspam | May 1 10:48:26 our-server-hostname sshd[29433]: reveeclipse mapping checking getaddrinfo for host82.155.turbotech.com [103.101.82.155] failed - POSSIBLE BREAK-IN ATTEMPT! May 1 10:48:26 our-server-hostname sshd[29433]: Invalid user postgres from 103.101.82.155 May 1 10:48:26 our-server-hostname sshd[29433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.82.155 May 1 10:48:28 our-server-hostname sshd[29433]: Failed password for invalid user postgres from 103.101.82.155 port 51264 ssh2 May 1 10:50:26 our-server-hostname sshd[29970]: reveeclipse mapping checking getaddrinfo for host82.155.turbotech.com [103.101.82.155] failed - POSSIBLE BREAK-IN ATTEMPT! May 1 10:50:26 our-server-hostname sshd[29970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.82.155 user=r.r May 1 10:50:28 our-server-hostname sshd[29970]: Failed password for r.r from 103.101.82.155 port 53622 ssh........ ------------------------------- |
2020-05-01 20:21:38 |
| 61.227.36.187 | attackspam | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-05-01 20:07:55 |
| 37.187.116.56 | attackbots | May 1 13:49:13 lock-38 sshd[1782152]: Unable to negotiate with 37.187.116.56 port 51854: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 1 13:50:17 lock-38 sshd[1782186]: Unable to negotiate with 37.187.116.56 port 52772: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 1 13:51:25 lock-38 sshd[1782206]: Unable to negotiate with 37.187.116.56 port 53768: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 1 13:52:46 lock-38 sshd[1782231]: Unable to negotiate with 37.187.116.56 port 54984: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 1 13:54:08 lock-38 sshd[178 ... |
2020-05-01 20:29:53 |
| 112.85.42.188 | attackspam | 05/01/2020-08:15:43.702739 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan |
2020-05-01 20:16:13 |
| 45.142.195.5 | attackbotsspam | May 1 13:16:46 blackbee postfix/smtpd\[2830\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure May 1 13:17:20 blackbee postfix/smtpd\[2830\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure May 1 13:17:53 blackbee postfix/smtpd\[2830\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure May 1 13:18:25 blackbee postfix/smtpd\[2830\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure May 1 13:18:58 blackbee postfix/smtpd\[2830\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure ... |
2020-05-01 20:19:52 |
| 45.142.195.6 | attackspambots | May 1 13:57:09 relay postfix/smtpd\[5241\]: warning: unknown\[45.142.195.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 1 13:57:31 relay postfix/smtpd\[7669\]: warning: unknown\[45.142.195.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 1 13:58:21 relay postfix/smtpd\[4822\]: warning: unknown\[45.142.195.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 1 13:58:39 relay postfix/smtpd\[5309\]: warning: unknown\[45.142.195.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 1 13:59:27 relay postfix/smtpd\[5241\]: warning: unknown\[45.142.195.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-05-01 20:00:32 |
| 185.143.74.93 | attackbotsspam | May 1 13:23:48 mail postfix/smtpd\[4823\]: warning: unknown\[185.143.74.93\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ May 1 13:25:37 mail postfix/smtpd\[5710\]: warning: unknown\[185.143.74.93\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ May 1 13:27:35 mail postfix/smtpd\[5615\]: warning: unknown\[185.143.74.93\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ May 1 13:57:42 mail postfix/smtpd\[6485\]: warning: unknown\[185.143.74.93\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2020-05-01 20:02:26 |
| 94.255.247.4 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-05-01 20:08:51 |
| 83.143.148.197 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-05-01 20:30:37 |
| 36.153.252.102 | attackbots | May 1 07:50:50 mail sshd\[27546\]: Invalid user deploy from 36.153.252.102 May 1 07:50:50 mail sshd\[27546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.153.252.102 ... |
2020-05-01 20:25:21 |