City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 4.99.253.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57317
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;4.99.253.12. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020601 1800 900 604800 86400
;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 05:39:10 CST 2025
;; MSG SIZE rcvd: 104Host 12.253.99.4.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 12.253.99.4.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.30.128.168 | attackbotsspam | Port probing on unauthorized port 1433 |
2020-06-08 16:16:51 |
| 182.160.113.235 | attackspam | DATE:2020-06-08 05:50:08, IP:182.160.113.235, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc) |
2020-06-08 16:15:46 |
| 212.64.71.173 | attackspambots | Brute-force attempt banned |
2020-06-08 16:21:05 |
| 89.248.167.141 | attackbotsspam | 88 packets to ports 2013 2061 2100 2103 2169 2239 2301 2305 2382 2464 2499 2548 2631 2764 2893 2901 2913 2918 2947 2965 3028 3037 3065 3088 3091 3138 3175 3211 3261 3289 3438 3499 3545 3550 3583 3595 3606 3612 3689 3701 3757 3759 3766 3775 3792 3874 3883 3887, etc. |
2020-06-08 16:12:41 |
| 139.59.161.78 | attackbotsspam | SSH brute-force: detected 1 distinct username(s) / 15 distinct password(s) within a 24-hour window. |
2020-06-08 16:27:04 |
| 122.51.186.145 | attack | $f2bV_matches |
2020-06-08 16:33:14 |
| 31.134.209.80 | attackspam | firewall-block, port(s): 4503/tcp |
2020-06-08 16:24:44 |
| 150.95.25.109 | attackbots | Unauthorized SSH login attempts |
2020-06-08 16:12:23 |
| 122.114.239.22 | attackspambots | Lines containing failures of 122.114.239.22 Jun 7 23:51:25 shared07 sshd[12240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.239.22 user=r.r Jun 7 23:51:28 shared07 sshd[12240]: Failed password for r.r from 122.114.239.22 port 40466 ssh2 Jun 7 23:51:28 shared07 sshd[12240]: Received disconnect from 122.114.239.22 port 40466:11: Bye Bye [preauth] Jun 7 23:51:28 shared07 sshd[12240]: Disconnected from authenticating user r.r 122.114.239.22 port 40466 [preauth] Jun 8 00:13:11 shared07 sshd[22868]: Connection closed by 122.114.239.22 port 53006 [preauth] Jun 8 00:16:52 shared07 sshd[24198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.239.22 user=r.r Jun 8 00:16:54 shared07 sshd[24198]: Failed password for r.r from 122.114.239.22 port 41142 ssh2 Jun 8 00:16:54 shared07 sshd[24198]: Received disconnect from 122.114.239.22 port 41142:11: Bye Bye [preauth] Jun 8 00:........ ------------------------------ |
2020-06-08 16:39:17 |
| 222.186.42.7 | attack | Jun 8 10:24:39 vmi345603 sshd[28361]: Failed password for root from 222.186.42.7 port 14936 ssh2 Jun 8 10:24:41 vmi345603 sshd[28361]: Failed password for root from 222.186.42.7 port 14936 ssh2 ... |
2020-06-08 16:27:58 |
| 49.235.240.141 | attack | 2020-06-07 23:04:12.731310-0500 localhost sshd[26635]: Failed password for root from 49.235.240.141 port 42110 ssh2 |
2020-06-08 16:14:09 |
| 78.138.96.3 | attack | REQUESTED PAGE: /wp-login.php |
2020-06-08 16:20:13 |
| 148.70.31.188 | attackbots | Jun 8 09:11:27 xeon sshd[40527]: Failed password for root from 148.70.31.188 port 52550 ssh2 |
2020-06-08 16:23:38 |
| 178.62.21.80 | attack | Jun 8 10:08:25 server sshd[7304]: Failed password for root from 178.62.21.80 port 39682 ssh2 Jun 8 10:12:03 server sshd[7836]: Failed password for root from 178.62.21.80 port 41206 ssh2 ... |
2020-06-08 16:33:27 |
| 93.157.62.102 | attack | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-06-08T08:01:57Z and 2020-06-08T08:04:09Z |
2020-06-08 16:09:42 |