City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.202.104.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49115
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;3.202.104.166. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013001 1800 900 604800 86400
;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 11:28:20 CST 2025
;; MSG SIZE rcvd: 106Host 166.104.202.3.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 166.104.202.3.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 36.112.108.195 | attackbots | 2020-07-08T18:42:52.926586hostname sshd[32276]: Invalid user dana from 36.112.108.195 port 12107 2020-07-08T18:42:55.080787hostname sshd[32276]: Failed password for invalid user dana from 36.112.108.195 port 12107 ssh2 2020-07-08T18:47:32.037014hostname sshd[1845]: Invalid user jxw from 36.112.108.195 port 31732 ... |
2020-07-08 22:05:34 |
| 223.220.251.232 | attackbots | Jul 08 07:03:28 askasleikir sshd[36446]: Failed password for invalid user valerie from 223.220.251.232 port 41609 ssh2 Jul 08 07:10:36 askasleikir sshd[36481]: Failed password for invalid user Titusz from 223.220.251.232 port 58967 ssh2 Jul 08 07:01:04 askasleikir sshd[36436]: Failed password for invalid user spy from 223.220.251.232 port 54646 ssh2 |
2020-07-08 21:46:02 |
| 46.38.145.253 | attackbots | 2020-07-08 15:24:06 dovecot_login authenticator failed for \(User\) \[46.38.145.253\]: 535 Incorrect authentication data \(set_id=yc@hosting1.no-server.de\) 2020-07-08 15:24:28 dovecot_login authenticator failed for \(User\) \[46.38.145.253\]: 535 Incorrect authentication data \(set_id=yc@hosting1.no-server.de\) 2020-07-08 15:24:35 dovecot_login authenticator failed for \(User\) \[46.38.145.253\]: 535 Incorrect authentication data \(set_id=boleto@hosting1.no-server.de\) 2020-07-08 15:24:43 dovecot_login authenticator failed for \(User\) \[46.38.145.253\]: 535 Incorrect authentication data \(set_id=boleto@hosting1.no-server.de\) 2020-07-08 15:24:54 dovecot_login authenticator failed for \(User\) \[46.38.145.253\]: 535 Incorrect authentication data \(set_id=boleto@hosting1.no-server.de\) ... |
2020-07-08 21:37:32 |
| 36.111.187.215 | attack | 31936/tcp 1641/tcp 26600/tcp... [2020-05-29/07-08]20pkt,20pt.(tcp) |
2020-07-08 21:24:02 |
| 45.177.68.245 | attackbotsspam | Auto Fail2Ban report, multiple SSH login attempts. |
2020-07-08 21:55:53 |
| 212.64.60.50 | attack | Jul 8 11:47:57 marvibiene sshd[38815]: Invalid user xuzx from 212.64.60.50 port 53098 Jul 8 11:47:57 marvibiene sshd[38815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.60.50 Jul 8 11:47:57 marvibiene sshd[38815]: Invalid user xuzx from 212.64.60.50 port 53098 Jul 8 11:47:59 marvibiene sshd[38815]: Failed password for invalid user xuzx from 212.64.60.50 port 53098 ssh2 ... |
2020-07-08 21:25:09 |
| 194.165.153.28 | attack | " " |
2020-07-08 22:00:12 |
| 92.63.196.6 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 83 - port: 40911 proto: TCP cat: Misc Attack |
2020-07-08 21:55:28 |
| 106.75.92.239 | attackbotsspam | 8112/tcp 8291/tcp 81/tcp... [2020-05-08/07-08]72pkt,20pt.(tcp) |
2020-07-08 21:37:04 |
| 14.231.187.110 | attackspam | Lines containing failures of 14.231.187.110 Jul 7 22:00:21 shared02 sshd[27245]: Invalid user admin from 14.231.187.110 port 42409 Jul 7 22:00:21 shared02 sshd[27245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.231.187.110 Jul 7 22:00:23 shared02 sshd[27245]: Failed password for invalid user admin from 14.231.187.110 port 42409 ssh2 Jul 7 22:00:24 shared02 sshd[27245]: Connection closed by invalid user admin 14.231.187.110 port 42409 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.231.187.110 |
2020-07-08 21:39:08 |
| 106.12.161.99 | attack | [Mon Jun 22 10:55:56 2020] - DDoS Attack From IP: 106.12.161.99 Port: 56273 |
2020-07-08 21:59:10 |
| 159.203.102.122 | attackspam | scans once in preceeding hours on the ports (in chronological order) 21833 resulting in total of 5 scans from 159.203.0.0/16 block. |
2020-07-08 21:40:02 |
| 92.118.161.33 | attack | Unauthorized connection attempt detected from IP address 92.118.161.33 to port 10443 [T] |
2020-07-08 21:27:07 |
| 203.75.29.110 | attackspambots | $f2bV_matches |
2020-07-08 21:44:46 |
| 139.59.169.103 | attack | Jul 8 08:49:50 ws22vmsma01 sshd[49800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.169.103 Jul 8 08:49:52 ws22vmsma01 sshd[49800]: Failed password for invalid user phinex from 139.59.169.103 port 54118 ssh2 ... |
2020-07-08 21:29:32 |