City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 205.57.140.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44181
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;205.57.140.58. IN A
;; AUTHORITY SECTION:
. 458 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024060200 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 02 20:27:35 CST 2024
;; MSG SIZE rcvd: 106Host 58.140.57.205.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 58.140.57.205.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 121.157.82.210 | attackbots | 2019-11-06T10:46:36.521223abusebot-5.cloudsearch.cf sshd\[6460\]: Invalid user hp from 121.157.82.210 port 46926 |
2019-11-06 19:18:08 |
| 217.61.2.97 | attack | Nov 6 11:45:58 vpn01 sshd[28796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.61.2.97 Nov 6 11:46:01 vpn01 sshd[28796]: Failed password for invalid user mai from 217.61.2.97 port 54983 ssh2 ... |
2019-11-06 18:58:22 |
| 97.100.46.232 | attackspam | Invalid user java from 97.100.46.232 port 36310 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=97.100.46.232 Failed password for invalid user java from 97.100.46.232 port 36310 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=97.100.46.232 user=root Failed password for root from 97.100.46.232 port 47652 ssh2 |
2019-11-06 19:31:00 |
| 185.142.236.34 | attack | 185.142.236.34 was recorded 8 times by 7 hosts attempting to connect to the following ports: 6000,9191,179,12345,2222,2086,4443,1400. Incident counter (4h, 24h, all-time): 8, 34, 102 |
2019-11-06 18:55:33 |
| 117.0.35.153 | attackspambots | ... |
2019-11-06 18:55:55 |
| 198.245.63.94 | attack | Nov 6 13:31:08 server sshd\[23632\]: Invalid user wkidup from 198.245.63.94 Nov 6 13:31:08 server sshd\[23632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns508619.ip-198-245-63.net Nov 6 13:31:10 server sshd\[23632\]: Failed password for invalid user wkidup from 198.245.63.94 port 50024 ssh2 Nov 6 13:45:30 server sshd\[27614\]: Invalid user odoo from 198.245.63.94 Nov 6 13:45:30 server sshd\[27614\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns508619.ip-198-245-63.net ... |
2019-11-06 18:53:13 |
| 212.83.158.222 | attackspambots | 11/06/2019-03:22:09.206432 212.83.158.222 Protocol: 17 ATTACK [PTSecurity] Cisco ASA and Cisco FTD possible DoS (CVE-2018-15454) |
2019-11-06 18:56:45 |
| 218.244.146.115 | attackbots | CloudCIX Reconnaissance Scan Detected, PTR: mxvps2705.hichina.com. |
2019-11-06 19:27:55 |
| 117.216.130.109 | attackbots | Unauthorised access (Nov 6) SRC=117.216.130.109 LEN=52 PREC=0x20 TTL=110 ID=23281 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-06 18:54:12 |
| 148.70.4.242 | attack | Nov 6 07:24:02 amit sshd\[15750\]: Invalid user zhouh from 148.70.4.242 Nov 6 07:24:02 amit sshd\[15750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.4.242 Nov 6 07:24:04 amit sshd\[15750\]: Failed password for invalid user zhouh from 148.70.4.242 port 40088 ssh2 ... |
2019-11-06 19:29:56 |
| 69.16.221.104 | attackspambots | 2019-11-06T12:17:40.340879mail01 postfix/smtpd[30152]: warning: unknown[69.16.221.104]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-06T12:18:00.447921mail01 postfix/smtpd[30049]: warning: unknown[69.16.221.104]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-06T12:23:44.251151mail01 postfix/smtpd[29554]: warning: unknown[69.16.221.104]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-06 19:25:17 |
| 14.63.221.108 | attackbots | 2019-11-06T08:51:15.234660shield sshd\[28160\]: Invalid user Lotta from 14.63.221.108 port 36515 2019-11-06T08:51:15.239446shield sshd\[28160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.221.108 2019-11-06T08:51:17.044198shield sshd\[28160\]: Failed password for invalid user Lotta from 14.63.221.108 port 36515 ssh2 2019-11-06T08:55:51.009802shield sshd\[28813\]: Invalid user gb from 14.63.221.108 port 55686 2019-11-06T08:55:51.014390shield sshd\[28813\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.221.108 |
2019-11-06 18:58:40 |
| 142.44.160.214 | attackbots | Nov 6 13:02:33 server sshd\[19858\]: User root from 142.44.160.214 not allowed because listed in DenyUsers Nov 6 13:02:33 server sshd\[19858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.160.214 user=root Nov 6 13:02:35 server sshd\[19858\]: Failed password for invalid user root from 142.44.160.214 port 34333 ssh2 Nov 6 13:06:51 server sshd\[8105\]: User root from 142.44.160.214 not allowed because listed in DenyUsers Nov 6 13:06:51 server sshd\[8105\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.160.214 user=root |
2019-11-06 19:08:48 |
| 185.156.177.15 | attackspambots | RDP Brute force |
2019-11-06 19:07:29 |
| 173.29.207.62 | attack | Lines containing failures of 173.29.207.62 Nov 5 05:37:06 hvs sshd[32289]: Invalid user pi from 173.29.207.62 port 35664 Nov 5 05:37:06 hvs sshd[32290]: Invalid user pi from 173.29.207.62 port 35666 Nov 5 05:37:06 hvs sshd[32289]: Connection closed by invalid user pi 173.29.207.62 port 35664 [preauth] Nov 5 05:37:06 hvs sshd[32290]: Connection closed by invalid user pi 173.29.207.62 port 35666 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=173.29.207.62 |
2019-11-06 19:26:01 |