City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.239.45.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63581
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.239.45.149. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 03:57:23 CST 2022
;; MSG SIZE rcvd: 106149.45.239.42.in-addr.arpa domain name pointer hn.kd.ny.adsl.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
149.45.239.42.in-addr.arpa name = hn.kd.ny.adsl.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 190.25.49.114 | attackbots | Oct 9 02:52:23 host2 sshd[2004338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.25.49.114 user=root Oct 9 02:52:24 host2 sshd[2004338]: Failed password for root from 190.25.49.114 port 39503 ssh2 Oct 9 02:57:51 host2 sshd[2004986]: Invalid user tom from 190.25.49.114 port 31176 Oct 9 02:57:51 host2 sshd[2004986]: Invalid user tom from 190.25.49.114 port 31176 ... |
2020-10-09 13:29:12 |
| 124.128.39.226 | attack | Oct 9 06:56:47 * sshd[7042]: Failed password for root from 124.128.39.226 port 40553 ssh2 |
2020-10-09 13:38:34 |
| 51.68.189.54 | attack | Oct 9 02:45:48 vm0 sshd[17982]: Failed password for invalid user ftpuser from 51.68.189.54 port 39970 ssh2 Oct 9 07:16:16 vm0 sshd[21208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.189.54 ... |
2020-10-09 13:40:01 |
| 122.152.208.242 | attack | Oct 9 03:22:41 *hidden* sshd[3425]: Failed password for *hidden* from 122.152.208.242 port 52698 ssh2 Oct 9 03:24:56 *hidden* sshd[3713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.152.208.242 user=root Oct 9 03:24:58 *hidden* sshd[3713]: Failed password for *hidden* from 122.152.208.242 port 50258 ssh2 |
2020-10-09 13:16:22 |
| 222.90.93.109 | attack | Lines containing failures of 222.90.93.109 Oct 6 09:34:57 kmh-vmh-003-fsn07 sshd[30943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.93.109 user=r.r Oct 6 09:35:00 kmh-vmh-003-fsn07 sshd[30943]: Failed password for r.r from 222.90.93.109 port 37480 ssh2 Oct 6 09:35:01 kmh-vmh-003-fsn07 sshd[30943]: Received disconnect from 222.90.93.109 port 37480:11: Bye Bye [preauth] Oct 6 09:35:01 kmh-vmh-003-fsn07 sshd[30943]: Disconnected from authenticating user r.r 222.90.93.109 port 37480 [preauth] Oct 6 09:40:00 kmh-vmh-003-fsn07 sshd[31680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.93.109 user=r.r Oct 6 09:40:02 kmh-vmh-003-fsn07 sshd[31680]: Failed password for r.r from 222.90.93.109 port 34944 ssh2 Oct 6 09:40:03 kmh-vmh-003-fsn07 sshd[31680]: Received disconnect from 222.90.93.109 port 34944:11: Bye Bye [preauth] Oct 6 09:40:03 kmh-vmh-003-fsn07 sshd[31680]: Dis........ ------------------------------ |
2020-10-09 13:31:44 |
| 171.238.20.120 | attackbotsspam | Brute force attempt |
2020-10-09 13:31:17 |
| 218.92.0.175 | attack | Oct 9 07:18:08 marvibiene sshd[30137]: Failed password for root from 218.92.0.175 port 20394 ssh2 Oct 9 07:18:13 marvibiene sshd[30137]: Failed password for root from 218.92.0.175 port 20394 ssh2 |
2020-10-09 13:28:23 |
| 45.142.120.52 | attackspam | 2020-10-08T19:48:33.612538linuxbox-skyline auth[56796]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=webpop rhost=45.142.120.52 ... |
2020-10-09 13:18:06 |
| 178.62.50.192 | attackspam | $f2bV_matches |
2020-10-09 13:23:03 |
| 143.255.8.2 | attack | Too many connections or unauthorized access detected from Arctic banned ip |
2020-10-09 13:55:26 |
| 185.239.242.142 | attack | 2020-10-09T05:26:57.093615randservbullet-proofcloud-66.localdomain sshd[20689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.239.242.142 user=root 2020-10-09T05:26:58.828198randservbullet-proofcloud-66.localdomain sshd[20689]: Failed password for root from 185.239.242.142 port 52700 ssh2 2020-10-09T05:26:59.056587randservbullet-proofcloud-66.localdomain sshd[20692]: Invalid user admin from 185.239.242.142 port 55192 ... |
2020-10-09 13:41:27 |
| 69.11.155.118 | attackbotsspam | Automatic report - Port Scan Attack |
2020-10-09 13:39:01 |
| 81.68.125.65 | attack | SSH login attempts. |
2020-10-09 13:30:27 |
| 51.37.149.242 | attack | Oct 6 17:25:46 lola sshd[5014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.37.149.242 user=r.r Oct 6 17:25:49 lola sshd[5014]: Failed password for r.r from 51.37.149.242 port 58200 ssh2 Oct 6 17:25:49 lola sshd[5014]: Received disconnect from 51.37.149.242: 11: Bye Bye [preauth] Oct 6 17:42:55 lola sshd[5742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.37.149.242 user=r.r Oct 6 17:42:56 lola sshd[5742]: Failed password for r.r from 51.37.149.242 port 60050 ssh2 Oct 6 17:42:56 lola sshd[5742]: Received disconnect from 51.37.149.242: 11: Bye Bye [preauth] Oct 6 17:46:48 lola sshd[5928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.37.149.242 user=r.r Oct 6 17:46:50 lola sshd[5928]: Failed password for r.r from 51.37.149.242 port 39238 ssh2 Oct 6 17:46:50 lola sshd[5928]: Received disconnect from 51.37.149.242: 11: Bye By........ ------------------------------- |
2020-10-09 13:52:33 |
| 138.204.24.67 | attackspam | Oct 8 20:24:22 logopedia-1vcpu-1gb-nyc1-01 sshd[226296]: Invalid user oracle from 138.204.24.67 port 54720 ... |
2020-10-09 13:55:54 |