City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 243.79.129.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55210
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;243.79.129.116. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 08:02:58 CST 2025
;; MSG SIZE rcvd: 107Host 116.129.79.243.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 116.129.79.243.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 35.246.14.251 | attack | Jul 29 07:37:45 keyhelp sshd[8506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.246.14.251 user=r.r Jul 29 07:37:48 keyhelp sshd[8506]: Failed password for r.r from 35.246.14.251 port 51410 ssh2 Jul 29 07:37:48 keyhelp sshd[8506]: Received disconnect from 35.246.14.251 port 51410:11: Bye Bye [preauth] Jul 29 07:37:48 keyhelp sshd[8506]: Disconnected from 35.246.14.251 port 51410 [preauth] Jul 29 07:51:13 keyhelp sshd[11050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.246.14.251 user=r.r Jul 29 07:51:15 keyhelp sshd[11050]: Failed password for r.r from 35.246.14.251 port 52328 ssh2 Jul 29 07:51:15 keyhelp sshd[11050]: Received disconnect from 35.246.14.251 port 52328:11: Bye Bye [preauth] Jul 29 07:51:15 keyhelp sshd[11050]: Disconnected from 35.246.14.251 port 52328 [preauth] Jul 29 07:58:08 keyhelp sshd[12000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui........ ------------------------------- |
2019-07-29 14:10:36 |
| 124.205.9.241 | attack | SSH authentication failure x 6 reported by Fail2Ban ... |
2019-07-29 13:50:02 |
| 218.92.0.212 | attack | (sshd) Failed SSH login from 218.92.0.212 (-): 5 in the last 3600 secs |
2019-07-29 13:19:50 |
| 194.55.187.46 | attack | 2019-07-29T04:18:23.124058enmeeting.mahidol.ac.th sshd\[5082\]: User root from 194.55.187.46 not allowed because not listed in AllowUsers 2019-07-29T04:18:23.380948enmeeting.mahidol.ac.th sshd\[5082\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.55.187.46 user=root 2019-07-29T04:18:24.890222enmeeting.mahidol.ac.th sshd\[5082\]: Failed password for invalid user root from 194.55.187.46 port 33338 ssh2 ... |
2019-07-29 13:28:09 |
| 36.85.55.27 | attackspam | Automatic report - Port Scan Attack |
2019-07-29 14:03:24 |
| 77.40.62.112 | attack | Jul 29 05:18:55 mail postfix/smtpd\[26844\]: warning: unknown\[77.40.62.112\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 29 05:36:53 mail postfix/smtpd\[27593\]: warning: unknown\[77.40.62.112\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 29 05:39:56 mail postfix/smtpd\[27741\]: warning: unknown\[77.40.62.112\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 29 06:17:41 mail postfix/smtpd\[29345\]: warning: unknown\[77.40.62.112\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2019-07-29 13:41:03 |
| 171.241.132.74 | attackspambots | Jul 29 01:03:56 tuxlinux sshd[7381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.241.132.74 user=root Jul 29 01:03:58 tuxlinux sshd[7381]: Failed password for root from 171.241.132.74 port 49502 ssh2 Jul 29 01:03:56 tuxlinux sshd[7381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.241.132.74 user=root Jul 29 01:03:58 tuxlinux sshd[7381]: Failed password for root from 171.241.132.74 port 49502 ssh2 Jul 29 02:15:20 tuxlinux sshd[8765]: Invalid user 123a from 171.241.132.74 port 37038 Jul 29 02:15:20 tuxlinux sshd[8765]: Invalid user 123a from 171.241.132.74 port 37038 Jul 29 02:15:20 tuxlinux sshd[8765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.241.132.74 ... |
2019-07-29 13:37:56 |
| 102.141.212.9 | attackbots | Rude login attack (6 tries in 1d) |
2019-07-29 13:12:15 |
| 45.160.149.47 | attack | Jul 29 02:28:48 server sshd\[28498\]: User root from 45.160.149.47 not allowed because listed in DenyUsers Jul 29 02:28:48 server sshd\[28498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.160.149.47 user=root Jul 29 02:28:50 server sshd\[28498\]: Failed password for invalid user root from 45.160.149.47 port 49650 ssh2 Jul 29 02:34:26 server sshd\[5864\]: Invalid user com from 45.160.149.47 port 44972 Jul 29 02:34:26 server sshd\[5864\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.160.149.47 |
2019-07-29 13:18:42 |
| 112.85.42.238 | attackbotsspam | Jul 29 06:16:00 dcd-gentoo sshd[7212]: User root from 112.85.42.238 not allowed because none of user's groups are listed in AllowGroups Jul 29 06:16:03 dcd-gentoo sshd[7212]: error: PAM: Authentication failure for illegal user root from 112.85.42.238 Jul 29 06:16:00 dcd-gentoo sshd[7212]: User root from 112.85.42.238 not allowed because none of user's groups are listed in AllowGroups Jul 29 06:16:03 dcd-gentoo sshd[7212]: error: PAM: Authentication failure for illegal user root from 112.85.42.238 Jul 29 06:16:00 dcd-gentoo sshd[7212]: User root from 112.85.42.238 not allowed because none of user's groups are listed in AllowGroups Jul 29 06:16:03 dcd-gentoo sshd[7212]: error: PAM: Authentication failure for illegal user root from 112.85.42.238 Jul 29 06:16:03 dcd-gentoo sshd[7212]: Failed keyboard-interactive/pam for invalid user root from 112.85.42.238 port 57828 ssh2 ... |
2019-07-29 13:28:35 |
| 202.64.142.76 | attackbots | Honeypot attack, port: 445, PTR: klb76.pacific.net.hk. |
2019-07-29 13:43:59 |
| 62.210.127.244 | attackbots | Jul 29 00:33:28 lnxmail61 postfix/smtpd[2993]: warning: [munged]:[62.210.127.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 29 00:33:28 lnxmail61 postfix/smtpd[2993]: lost connection after AUTH from [munged]:[62.210.127.244] Jul 29 00:33:34 lnxmail61 postfix/smtpd[2993]: warning: [munged]:[62.210.127.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 29 00:33:34 lnxmail61 postfix/smtpd[2993]: lost connection after AUTH from [munged]:[62.210.127.244] Jul 29 00:33:45 lnxmail61 postfix/smtpd[11794]: warning: [munged]:[62.210.127.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 29 00:33:45 lnxmail61 postfix/smtpd[11794]: lost connection after AUTH from [munged]:[62.210.127.244] |
2019-07-29 13:12:52 |
| 218.92.1.142 | attackspambots | Jul 29 00:59:30 TORMINT sshd\[8435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=root Jul 29 00:59:33 TORMINT sshd\[8435\]: Failed password for root from 218.92.1.142 port 13374 ssh2 Jul 29 01:03:54 TORMINT sshd\[8648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=root ... |
2019-07-29 13:24:46 |
| 193.201.224.232 | attack | Fail2Ban |
2019-07-29 13:21:26 |
| 189.197.187.202 | attackspam | Jul 28 16:17:49 aat-srv002 sshd[21312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.197.187.202 Jul 28 16:17:51 aat-srv002 sshd[21312]: Failed password for invalid user admin from 189.197.187.202 port 49896 ssh2 Jul 28 16:18:09 aat-srv002 sshd[21320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.197.187.202 Jul 28 16:18:11 aat-srv002 sshd[21320]: Failed password for invalid user ubuntu from 189.197.187.202 port 49915 ssh2 ... |
2019-07-29 13:36:31 |