City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 252.166.170.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57147
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;252.166.170.42. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024120602 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 07 07:00:37 CST 2024
;; MSG SIZE rcvd: 107Host 42.170.166.252.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.170.166.252.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 113.180.87.92 | attack | Oct 21 12:18:39 our-server-hostname postfix/smtpd[22622]: connect from unknown[113.180.87.92] Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.180.87.92 |
2019-10-23 07:17:01 |
| 2.191.79.145 | attack | 1433/tcp 1433/tcp [2019-10-19/22]2pkt |
2019-10-23 06:43:33 |
| 168.196.176.53 | attackspambots | Automatic report - Port Scan Attack |
2019-10-23 06:43:50 |
| 51.91.108.77 | attackspam | Oct 21 20:40:23 vm11 sshd[4010]: Did not receive identification string from 51.91.108.77 port 48024 Oct 21 20:42:16 vm11 sshd[4014]: Invalid user a from 51.91.108.77 port 50742 Oct 21 20:42:16 vm11 sshd[4014]: Received disconnect from 51.91.108.77 port 50742:11: Normal Shutdown, Thank you for playing [preauth] Oct 21 20:42:16 vm11 sshd[4014]: Disconnected from 51.91.108.77 port 50742 [preauth] Oct 21 20:42:59 vm11 sshd[4016]: Received disconnect from 51.91.108.77 port 55084:11: Normal Shutdown, Thank you for playing [preauth] Oct 21 20:42:59 vm11 sshd[4016]: Disconnected from 51.91.108.77 port 55084 [preauth] Oct 21 20:43:43 vm11 sshd[4018]: Received disconnect from 51.91.108.77 port 59424:11: Normal Shutdown, Thank you for playing [preauth] Oct 21 20:43:43 vm11 sshd[4018]: Disconnected from 51.91.108.77 port 59424 [preauth] Oct 21 20:44:27 vm11 sshd[4020]: Received disconnect from 51.91.108.77 port 35536:11: Normal Shutdown, Thank you for playing [preauth] Oct 21 20:44........ ------------------------------- |
2019-10-23 07:19:06 |
| 222.186.180.17 | attackspam | Oct 23 00:45:12 MainVPS sshd[13618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Oct 23 00:45:13 MainVPS sshd[13618]: Failed password for root from 222.186.180.17 port 5248 ssh2 Oct 23 00:45:29 MainVPS sshd[13618]: error: maximum authentication attempts exceeded for root from 222.186.180.17 port 5248 ssh2 [preauth] Oct 23 00:45:12 MainVPS sshd[13618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Oct 23 00:45:13 MainVPS sshd[13618]: Failed password for root from 222.186.180.17 port 5248 ssh2 Oct 23 00:45:29 MainVPS sshd[13618]: error: maximum authentication attempts exceeded for root from 222.186.180.17 port 5248 ssh2 [preauth] Oct 23 00:45:37 MainVPS sshd[13647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Oct 23 00:45:39 MainVPS sshd[13647]: Failed password for root from 222.186.180.17 port 7302 ssh2 .. |
2019-10-23 06:46:06 |
| 31.17.26.190 | attack | Oct 22 23:12:46 icinga sshd[10202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.17.26.190 Oct 22 23:12:48 icinga sshd[10202]: Failed password for invalid user guest from 31.17.26.190 port 44736 ssh2 ... |
2019-10-23 06:55:19 |
| 61.133.232.253 | attack | Invalid user tear from 61.133.232.253 port 2326 |
2019-10-23 07:08:46 |
| 36.66.149.211 | attackspambots | Invalid user postgres from 36.66.149.211 port 44558 |
2019-10-23 07:19:21 |
| 128.199.162.108 | attackbotsspam | $f2bV_matches |
2019-10-23 06:48:16 |
| 142.44.137.62 | attackspambots | Oct 22 23:25:43 meumeu sshd[1619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.137.62 Oct 22 23:25:45 meumeu sshd[1619]: Failed password for invalid user po7rte from 142.44.137.62 port 47314 ssh2 Oct 22 23:29:45 meumeu sshd[2235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.137.62 ... |
2019-10-23 06:50:20 |
| 80.211.86.96 | attack | Oct 22 22:05:20 MK-Soft-Root2 sshd[5783]: Failed password for root from 80.211.86.96 port 43460 ssh2 ... |
2019-10-23 06:44:48 |
| 155.232.195.63 | attack | Oct 22 12:46:24 php1 sshd\[4637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=eve-ng.sanren.ac.za user=root Oct 22 12:46:25 php1 sshd\[4637\]: Failed password for root from 155.232.195.63 port 43156 ssh2 Oct 22 12:52:31 php1 sshd\[5296\]: Invalid user frosty from 155.232.195.63 Oct 22 12:52:31 php1 sshd\[5296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=eve-ng.sanren.ac.za Oct 22 12:52:33 php1 sshd\[5296\]: Failed password for invalid user frosty from 155.232.195.63 port 54502 ssh2 |
2019-10-23 07:15:21 |
| 178.132.69.18 | attackbots | Oct 21 12:15:52 our-server-hostname postfix/smtpd[5485]: connect from unknown[178.132.69.18] Oct 21 12:15:55 our-server-hostname sqlgrey: grey: new: 178.132.69.18(178.132.69.18), x@x -> x@x Oct 21 12:15:56 our-server-hostname postfix/policy-spf[27465]: : Policy action=550 Please see hxxp://www.openspf.org/Why?s=mfrom;id=mattice%40apex.net.au;ip=178.132.69.18;r=mx1.cbr.spam-filtering-appliance Oct x@x Oct 21 12:15:57 our-server-hostname postfix/smtpd[5485]: lost connection after DATA from unknown[178.132.69.18] Oct 21 12:15:57 our-server-hostname postfix/smtpd[5485]: disconnect from unknown[178.132.69.18] Oct 21 12:16:37 our-server-hostname postfix/smtpd[26991]: connect from unknown[178.132.69.18] Oct 21 12:16:39 our-server-hostname sqlgrey: grey: new: 178.132.69.18(178.132.69.18), x@x -> x@x Oct 21 12:16:39 our-server-hostname postfix/policy-spf[27886]: : Policy action=550 Please see hxxp://www.openspf.org/Why?s=mfrom;id=mark.fletcherd%40apex.net.au;ip=178.132.69.18;r=........ ------------------------------- |
2019-10-23 07:18:26 |
| 201.49.110.210 | attack | Oct 22 23:35:33 MK-Soft-Root2 sshd[21546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.49.110.210 Oct 22 23:35:35 MK-Soft-Root2 sshd[21546]: Failed password for invalid user 1q2w3e4r from 201.49.110.210 port 34284 ssh2 ... |
2019-10-23 07:12:08 |
| 61.230.44.16 | attackspam | Honeypot attack, port: 23, PTR: 61-230-44-16.dynamic-ip.hinet.net. |
2019-10-23 06:51:39 |