City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 242.206.66.90
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38249
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;242.206.66.90. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 13:24:50 CST 2025
;; MSG SIZE rcvd: 106Host 90.66.206.242.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 90.66.206.242.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 145.239.82.192 | attackspam | Aug 26 00:44:05 wbs sshd\[20545\]: Invalid user osvaldo from 145.239.82.192 Aug 26 00:44:05 wbs sshd\[20545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.ip-145-239-82.eu Aug 26 00:44:07 wbs sshd\[20545\]: Failed password for invalid user osvaldo from 145.239.82.192 port 35764 ssh2 Aug 26 00:48:10 wbs sshd\[20889\]: Invalid user album from 145.239.82.192 Aug 26 00:48:10 wbs sshd\[20889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.ip-145-239-82.eu |
2019-08-26 18:51:56 |
| 177.69.213.236 | attackspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.213.236 user=root Failed password for root from 177.69.213.236 port 49384 ssh2 Invalid user winnie from 177.69.213.236 port 40162 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.213.236 Failed password for invalid user winnie from 177.69.213.236 port 40162 ssh2 |
2019-08-26 19:47:11 |
| 106.51.143.178 | attackbotsspam | Aug 26 00:48:50 kapalua sshd\[17215\]: Invalid user git from 106.51.143.178 Aug 26 00:48:50 kapalua sshd\[17215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.143.178 Aug 26 00:48:52 kapalua sshd\[17215\]: Failed password for invalid user git from 106.51.143.178 port 40572 ssh2 Aug 26 00:53:33 kapalua sshd\[17579\]: Invalid user telkom from 106.51.143.178 Aug 26 00:53:33 kapalua sshd\[17579\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.143.178 |
2019-08-26 19:07:43 |
| 103.131.89.53 | attackbots | Unauthorised access (Aug 26) SRC=103.131.89.53 LEN=40 TTL=44 ID=19177 TCP DPT=8080 WINDOW=53623 SYN |
2019-08-26 19:01:36 |
| 114.36.11.128 | attack | Telnet Server BruteForce Attack |
2019-08-26 19:42:52 |
| 46.101.187.76 | attackspam | Lines containing failures of 46.101.187.76 Aug 26 05:07:17 nxxxxxxx sshd[12541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.187.76 user=r.r Aug 26 05:07:19 nxxxxxxx sshd[12541]: Failed password for r.r from 46.101.187.76 port 53328 ssh2 Aug 26 05:07:19 nxxxxxxx sshd[12541]: Received disconnect from 46.101.187.76 port 53328:11: Bye Bye [preauth] Aug 26 05:07:19 nxxxxxxx sshd[12541]: Disconnected from authenticating user r.r 46.101.187.76 port 53328 [preauth] Aug 26 05:20:42 nxxxxxxx sshd[14574]: Invalid user water from 46.101.187.76 port 55594 Aug 26 05:20:42 nxxxxxxx sshd[14574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.187.76 Aug 26 05:20:44 nxxxxxxx sshd[14574]: Failed password for invalid user water from 46.101.187.76 port 55594 ssh2 Aug 26 05:20:44 nxxxxxxx sshd[14574]: Received disconnect from 46.101.187.76 port 55594:11: Bye Bye [preauth] Aug 26 05:20:44 nxxxx........ ------------------------------ |
2019-08-26 19:51:47 |
| 41.67.59.14 | attackspambots | Honeypot attack, port: 445, PTR: PTR record not found |
2019-08-26 19:29:55 |
| 168.197.29.70 | attackbotsspam | Aug 26 08:56:11 our-server-hostname postfix/smtpd[24413]: connect from unknown[168.197.29.70] Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug 26 08:56:18 our-server-hostname postfix/smtpd[24413]: lost connection after RCPT from unknown[168.197.29.70] Aug 26 08:56:18 our-server-hostname postfix/smtpd[24413]: disconnect from unknown[168.197.29.70] Aug 26 12:41:21 our-server-hostname postfix/smtpd[13394]: connect from unknown[168.197.29.70] Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug 26 12:41:31 our-server-hostname postfix/smtpd[13394]: lost connection after RCPT from unknown[168.197.29.70] Aug 26 12:41:31 our-server-hostname postfix/smtpd[13394]: disconnect from unknown[168.197.29.70] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=168.197.29.70 |
2019-08-26 19:11:37 |
| 118.24.219.111 | attackspam | Aug 26 05:03:20 mail sshd[7007]: Invalid user randy from 118.24.219.111 Aug 26 05:03:20 mail sshd[7007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.219.111 Aug 26 05:03:20 mail sshd[7007]: Invalid user randy from 118.24.219.111 Aug 26 05:03:22 mail sshd[7007]: Failed password for invalid user randy from 118.24.219.111 port 48264 ssh2 Aug 26 05:21:42 mail sshd[3058]: Invalid user beagleindex from 118.24.219.111 ... |
2019-08-26 19:07:08 |
| 14.168.11.223 | attack | Aug 26 05:11:23 lvps83-169-44-148 sshd[30961]: warning: /etc/hosts.allow, line 26: host name/address mismatch: 14.168.11.223 != static.vnpt.vn Aug 26 05:11:28 lvps83-169-44-148 sshd[30961]: Address 14.168.11.223 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 26 05:11:28 lvps83-169-44-148 sshd[30961]: Invalid user admin from 14.168.11.223 Aug 26 05:11:28 lvps83-169-44-148 sshd[30961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.168.11.223 Aug 26 05:11:30 lvps83-169-44-148 sshd[30961]: Failed password for invalid user admin from 14.168.11.223 port 36631 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.168.11.223 |
2019-08-26 19:21:28 |
| 179.191.96.166 | attack | Aug 26 03:20:54 MK-Soft-VM3 sshd\[8707\]: Invalid user cen from 179.191.96.166 port 52456 Aug 26 03:20:54 MK-Soft-VM3 sshd\[8707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.191.96.166 Aug 26 03:20:56 MK-Soft-VM3 sshd\[8707\]: Failed password for invalid user cen from 179.191.96.166 port 52456 ssh2 ... |
2019-08-26 19:46:40 |
| 72.141.239.7 | attack | Aug 26 08:13:45 [host] sshd[22483]: Invalid user 1q2w3e from 72.141.239.7 Aug 26 08:13:45 [host] sshd[22483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.141.239.7 Aug 26 08:13:48 [host] sshd[22483]: Failed password for invalid user 1q2w3e from 72.141.239.7 port 39506 ssh2 |
2019-08-26 19:57:05 |
| 37.115.186.149 | attack | 37.115.186.149 - - [25/Aug/2019:19:28:42 +0300] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 37.115.186.149 - - [25/Aug/2019:19:28:42 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" ... |
2019-08-26 19:20:54 |
| 45.81.35.175 | attackspambots | SASL Brute Force |
2019-08-26 19:26:42 |
| 165.22.181.77 | attackspambots | Aug 26 12:59:56 rpi sshd[25229]: Failed password for root from 165.22.181.77 port 40770 ssh2 |
2019-08-26 19:29:04 |