City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 40.136.138.43
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51930
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;40.136.138.43. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022001 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 01:57:00 CST 2025
;; MSG SIZE rcvd: 106
43.138.136.40.in-addr.arpa domain name pointer h43.138.136.40.static.ip.windstream.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
43.138.136.40.in-addr.arpa name = h43.138.136.40.static.ip.windstream.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 121.8.161.74 | attackbotsspam | Jul 13 14:12:38 ns392434 sshd[28386]: Invalid user lockout from 121.8.161.74 port 54964 Jul 13 14:12:38 ns392434 sshd[28386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.8.161.74 Jul 13 14:12:38 ns392434 sshd[28386]: Invalid user lockout from 121.8.161.74 port 54964 Jul 13 14:12:39 ns392434 sshd[28386]: Failed password for invalid user lockout from 121.8.161.74 port 54964 ssh2 Jul 13 14:32:57 ns392434 sshd[28593]: Invalid user jenkins from 121.8.161.74 port 41794 Jul 13 14:32:57 ns392434 sshd[28593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.8.161.74 Jul 13 14:32:57 ns392434 sshd[28593]: Invalid user jenkins from 121.8.161.74 port 41794 Jul 13 14:32:59 ns392434 sshd[28593]: Failed password for invalid user jenkins from 121.8.161.74 port 41794 ssh2 Jul 13 14:35:36 ns392434 sshd[28653]: Invalid user otavio from 121.8.161.74 port 45448 |
2020-07-13 21:51:04 |
| 207.237.148.14 | attackspambots | Dovecot Invalid User Login Attempt. |
2020-07-13 21:57:36 |
| 170.81.65.192 | attackspambots | Unauthorized connection attempt from IP address 170.81.65.192 on Port 445(SMB) |
2020-07-13 22:11:34 |
| 193.35.48.18 | attackbots | Jul 13 15:36:13 mail.srvfarm.net postfix/smtpd[2832461]: warning: unknown[193.35.48.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 13 15:36:13 mail.srvfarm.net postfix/smtpd[2832461]: lost connection after AUTH from unknown[193.35.48.18] Jul 13 15:36:18 mail.srvfarm.net postfix/smtpd[2832074]: lost connection after AUTH from unknown[193.35.48.18] Jul 13 15:36:18 mail.srvfarm.net postfix/smtpd[2832402]: lost connection after AUTH from unknown[193.35.48.18] Jul 13 15:36:24 mail.srvfarm.net postfix/smtpd[2832074]: lost connection after AUTH from unknown[193.35.48.18] |
2020-07-13 21:50:06 |
| 176.31.163.192 | attackspam | Jul 13 14:19:32 buvik sshd[31161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.163.192 Jul 13 14:19:35 buvik sshd[31161]: Failed password for invalid user wangli from 176.31.163.192 port 48800 ssh2 Jul 13 14:22:35 buvik sshd[31663]: Invalid user n from 176.31.163.192 ... |
2020-07-13 22:25:34 |
| 111.161.74.100 | attackbots | 2020-07-13T07:59:57.4453481495-001 sshd[52226]: Invalid user nologin from 111.161.74.100 port 60703 2020-07-13T07:59:59.3702701495-001 sshd[52226]: Failed password for invalid user nologin from 111.161.74.100 port 60703 ssh2 2020-07-13T08:02:42.2996911495-001 sshd[52332]: Invalid user minecraft from 111.161.74.100 port 52279 2020-07-13T08:02:42.3028511495-001 sshd[52332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.74.100 2020-07-13T08:02:42.2996911495-001 sshd[52332]: Invalid user minecraft from 111.161.74.100 port 52279 2020-07-13T08:02:44.8759111495-001 sshd[52332]: Failed password for invalid user minecraft from 111.161.74.100 port 52279 ssh2 ... |
2020-07-13 22:13:10 |
| 49.233.135.204 | attack | Jul 13 13:24:18 scw-tender-jepsen sshd[11552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.135.204 Jul 13 13:24:21 scw-tender-jepsen sshd[11552]: Failed password for invalid user hj from 49.233.135.204 port 54802 ssh2 |
2020-07-13 22:06:14 |
| 106.13.42.140 | attack | Jul 13 16:03:06 home sshd[32643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.140 Jul 13 16:03:08 home sshd[32643]: Failed password for invalid user milani from 106.13.42.140 port 53904 ssh2 Jul 13 16:06:20 home sshd[539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.140 ... |
2020-07-13 22:13:44 |
| 194.26.29.142 | attack | scans 121 times in preceeding hours on the ports (in chronological order) 38874 3866 3734 38788 36896 38232 3811 3789 36888 39129 3738 39416 38501 3713 38529 38154 3915 39172 37803 38039 37374 3908 38486 3686 3679 3889 38161 37942 38845 3926 38671 38383 38376 3847 38904 38188 3834 39539 38913 37241 3688 38211 38911 37941 37679 37243 39559 38921 38549 39595 38351 38306 37251 3787 3812 38555 37988 38632 38795 38447 36943 3900 37581 38167 37818 37341 37169 3751 36789 37707 3869 3736 37017 37502 38961 37418 3825 3782 37788 37462 38080 3723 3810 37402 3730 3909 38311 37890 37301 38344 39206 37057 38265 39118 38081 38932 38091 36787 3785 38393 38235 39189 38696 38152 38002 38090 36828 38415 39403 37503 3903 37277 38259 37191 38542 38990 38097 37002 38008 36849 37743 resulting in total of 1680 scans from 194.26.29.0/24 block. |
2020-07-13 22:22:24 |
| 189.33.172.142 | attackbotsspam | Email rejected due to spam filtering |
2020-07-13 21:52:05 |
| 51.91.212.80 | attackspambots | Port scan: Attack repeated for 24 hours |
2020-07-13 21:49:21 |
| 167.172.175.9 | attackbots | Jul 13 12:18:47 localhost sshd[58428]: Invalid user mig from 167.172.175.9 port 48776 Jul 13 12:18:47 localhost sshd[58428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.175.9 Jul 13 12:18:47 localhost sshd[58428]: Invalid user mig from 167.172.175.9 port 48776 Jul 13 12:18:50 localhost sshd[58428]: Failed password for invalid user mig from 167.172.175.9 port 48776 ssh2 Jul 13 12:23:03 localhost sshd[58784]: Invalid user cye from 167.172.175.9 port 50586 ... |
2020-07-13 21:56:18 |
| 118.69.71.182 | attackspambots | Jul 13 06:14:48 server1 sshd\[28068\]: Failed password for invalid user zhongyang from 118.69.71.182 port 7706 ssh2 Jul 13 06:18:52 server1 sshd\[29339\]: Invalid user user from 118.69.71.182 Jul 13 06:18:52 server1 sshd\[29339\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.69.71.182 Jul 13 06:18:53 server1 sshd\[29339\]: Failed password for invalid user user from 118.69.71.182 port 9400 ssh2 Jul 13 06:22:58 server1 sshd\[30535\]: Invalid user cmz from 118.69.71.182 ... |
2020-07-13 21:58:10 |
| 138.68.134.188 | attack | leo_www |
2020-07-13 22:04:41 |
| 104.168.219.197 | attackspam | 13.07.2020 12:23:00 Recursive DNS scan |
2020-07-13 22:02:03 |