City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 34.4.111.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37950
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;34.4.111.42. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012901 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 04:05:25 CST 2025
;; MSG SIZE rcvd: 104Host 42.111.4.34.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 42.111.4.34.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.83.42.244 | attack | Sep 13 10:57:15 hanapaa sshd\[30618\]: Invalid user itsupport from 51.83.42.244 Sep 13 10:57:15 hanapaa sshd\[30618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=244.ip-51-83-42.eu Sep 13 10:57:16 hanapaa sshd\[30618\]: Failed password for invalid user itsupport from 51.83.42.244 port 33068 ssh2 Sep 13 11:01:05 hanapaa sshd\[30957\]: Invalid user 1 from 51.83.42.244 Sep 13 11:01:05 hanapaa sshd\[30957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=244.ip-51-83-42.eu |
2019-09-14 05:07:26 |
| 148.70.246.130 | attackspambots | Unauthorized SSH login attempts |
2019-09-14 05:14:15 |
| 92.119.179.70 | attackbots | SSH-bruteforce attempts |
2019-09-14 05:37:06 |
| 89.42.234.129 | attack | 2019-09-13T20:48:56.114030abusebot-7.cloudsearch.cf sshd\[29856\]: Invalid user admin from 89.42.234.129 port 56079 |
2019-09-14 05:05:49 |
| 122.160.96.175 | attack | [portscan] Port scan |
2019-09-14 05:09:23 |
| 128.199.82.144 | attackspam | Sep 13 23:18:30 vps691689 sshd[22808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.82.144 Sep 13 23:18:32 vps691689 sshd[22808]: Failed password for invalid user minecraft from 128.199.82.144 port 40968 ssh2 ... |
2019-09-14 05:41:49 |
| 92.119.160.77 | attackspambots | Invalid user admin from 92.119.160.77 port 60817 |
2019-09-14 05:15:30 |
| 218.92.0.191 | attack | Sep 13 23:23:33 dcd-gentoo sshd[31408]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Sep 13 23:23:35 dcd-gentoo sshd[31408]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Sep 13 23:23:33 dcd-gentoo sshd[31408]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Sep 13 23:23:35 dcd-gentoo sshd[31408]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Sep 13 23:23:33 dcd-gentoo sshd[31408]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Sep 13 23:23:35 dcd-gentoo sshd[31408]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Sep 13 23:23:35 dcd-gentoo sshd[31408]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 36530 ssh2 ... |
2019-09-14 05:27:04 |
| 195.206.105.217 | attackbots | Sep 13 11:23:12 kapalua sshd\[27341\]: Invalid user aaron from 195.206.105.217 Sep 13 11:23:12 kapalua sshd\[27341\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=zrh-exit.privateinternetaccess.com Sep 13 11:23:14 kapalua sshd\[27341\]: Failed password for invalid user aaron from 195.206.105.217 port 48336 ssh2 Sep 13 11:23:17 kapalua sshd\[27341\]: Failed password for invalid user aaron from 195.206.105.217 port 48336 ssh2 Sep 13 11:23:20 kapalua sshd\[27341\]: Failed password for invalid user aaron from 195.206.105.217 port 48336 ssh2 |
2019-09-14 05:36:37 |
| 112.133.229.78 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-13 11:17:08,497 INFO [amun_request_handler] PortScan Detected on Port: 445 (112.133.229.78) |
2019-09-14 05:05:08 |
| 178.89.122.209 | attackbots | KZ - 1H : (5) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : KZ NAME ASN : ASN9198 IP : 178.89.122.209 CIDR : 178.89.120.0/22 PREFIX COUNT : 1223 UNIQUE IP COUNT : 1472256 WYKRYTE ATAKI Z ASN9198 : 1H - 2 3H - 2 6H - 2 12H - 3 24H - 4 INFO : Best E-Mail Spam Filter Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-09-14 05:13:45 |
| 166.62.125.130 | attack | WordPress brute force |
2019-09-14 05:18:52 |
| 157.230.214.150 | attack | $f2bV_matches |
2019-09-14 05:10:27 |
| 110.9.80.195 | attackspambots | detected by Fail2Ban |
2019-09-14 05:43:41 |
| 104.248.221.194 | attackspambots | Sep 13 01:57:45 sachi sshd\[17990\]: Invalid user developer from 104.248.221.194 Sep 13 01:57:45 sachi sshd\[17990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.221.194 Sep 13 01:57:48 sachi sshd\[17990\]: Failed password for invalid user developer from 104.248.221.194 port 49568 ssh2 Sep 13 02:02:23 sachi sshd\[18356\]: Invalid user 123qwe from 104.248.221.194 Sep 13 02:02:23 sachi sshd\[18356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.221.194 |
2019-09-14 05:20:20 |