City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.166.167.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5151
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.166.167.16. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 16:40:52 CST 2025
;; MSG SIZE rcvd: 106Host 16.167.166.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 16.167.166.42.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.29.236.132 | attackspam | Automatic report - Banned IP Access |
2019-07-27 01:49:15 |
| 94.225.213.54 | attackspambots | TCP port 23 (Telnet) attempt blocked by firewall. [2019-07-26 17:12:39] |
2019-07-27 02:02:46 |
| 168.195.100.102 | attackspam | Automatic report - Port Scan Attack |
2019-07-27 02:22:51 |
| 114.67.64.142 | attack | Jul 26 04:12:17 cumulus sshd[19464]: Invalid user serge from 114.67.64.142 port 39734 Jul 26 04:12:17 cumulus sshd[19464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.64.142 Jul 26 04:12:18 cumulus sshd[19464]: Failed password for invalid user serge from 114.67.64.142 port 39734 ssh2 Jul 26 04:12:19 cumulus sshd[19464]: Received disconnect from 114.67.64.142 port 39734:11: Bye Bye [preauth] Jul 26 04:12:19 cumulus sshd[19464]: Disconnected from 114.67.64.142 port 39734 [preauth] Jul 26 04:25:16 cumulus sshd[19763]: Invalid user hadoop from 114.67.64.142 port 48430 Jul 26 04:25:16 cumulus sshd[19763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.64.142 Jul 26 04:25:18 cumulus sshd[19763]: Failed password for invalid user hadoop from 114.67.64.142 port 48430 ssh2 Jul 26 04:25:18 cumulus sshd[19763]: Received disconnect from 114.67.64.142 port 48430:11: Bye Bye [preauth] Ju........ ------------------------------- |
2019-07-27 01:56:50 |
| 116.58.252.89 | attackspam | Jul 26 10:34:14 ip-172-31-10-178 sshd[27871]: Invalid user ubnt from 116.58.252.89 Jul 26 10:34:15 ip-172-31-10-178 sshd[27871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.58.252.89 Jul 26 10:34:18 ip-172-31-10-178 sshd[27871]: Failed password for invalid user ubnt from 116.58.252.89 port 10841 ssh2 Jul 26 10:34:20 ip-172-31-10-178 sshd[27873]: Invalid user UBNT from 116.58.252.89 Jul 26 10:34:21 ip-172-31-10-178 sshd[27873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.58.252.89 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=116.58.252.89 |
2019-07-27 02:33:39 |
| 103.123.151.118 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-25 13:52:26,400 INFO [shellcode_manager] (103.123.151.118) no match, writing hexdump (8d776bf5c34028459ae2e291d1a57335 :2286691) - MS17010 (EternalBlue) |
2019-07-27 02:42:29 |
| 78.171.164.11 | attackspambots | Unauthorised access (Jul 26) SRC=78.171.164.11 LEN=52 TTL=113 ID=4396 DF TCP DPT=445 WINDOW=8192 SYN |
2019-07-27 02:04:17 |
| 112.85.42.194 | attackbots | Jul 26 06:41:35 debian sshd[23070]: Unable to negotiate with 112.85.42.194 port 47937: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jul 26 06:46:37 debian sshd[23294]: Unable to negotiate with 112.85.42.194 port 27415: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2019-07-27 02:16:09 |
| 5.234.254.244 | attackbots | Honeypot triggered via portsentry |
2019-07-27 02:30:13 |
| 187.95.32.182 | attackbotsspam | Jul 26 16:21:58 mail sshd\[31501\]: Invalid user mw from 187.95.32.182 port 33634 Jul 26 16:21:58 mail sshd\[31501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.95.32.182 Jul 26 16:21:59 mail sshd\[31501\]: Failed password for invalid user mw from 187.95.32.182 port 33634 ssh2 Jul 26 16:27:21 mail sshd\[32307\]: Invalid user iredadmin from 187.95.32.182 port 55718 Jul 26 16:27:21 mail sshd\[32307\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.95.32.182 |
2019-07-27 01:57:40 |
| 200.29.108.214 | attack | Jul 26 20:31:20 rpi sshd[15001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.108.214 Jul 26 20:31:22 rpi sshd[15001]: Failed password for invalid user info from 200.29.108.214 port 16673 ssh2 |
2019-07-27 02:40:07 |
| 49.81.199.216 | attack | [Aegis] @ 2019-07-26 09:55:03 0100 -> Sendmail rejected message. |
2019-07-27 02:10:31 |
| 178.216.49.60 | attack | Automatic report - Banned IP Access |
2019-07-27 02:12:48 |
| 151.80.41.64 | attackbots | ssh failed login |
2019-07-27 02:27:42 |
| 178.33.22.154 | attackspambots | 2019-07-26T19:48:03.432145 sshd[32395]: Invalid user ts3server from 178.33.22.154 port 47712 2019-07-26T19:48:03.446602 sshd[32395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.22.154 2019-07-26T19:48:03.432145 sshd[32395]: Invalid user ts3server from 178.33.22.154 port 47712 2019-07-26T19:48:05.685711 sshd[32395]: Failed password for invalid user ts3server from 178.33.22.154 port 47712 ssh2 2019-07-26T19:52:10.113903 sshd[32418]: Invalid user prashant from 178.33.22.154 port 42214 ... |
2019-07-27 02:38:01 |