City: unknown
Region: unknown
Country: Singapore
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 43.2.74.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35045
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;43.2.74.94. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 17:37:37 CST 2025
;; MSG SIZE rcvd: 103Host 94.74.2.43.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 94.74.2.43.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 129.211.125.167 | attackspambots | $f2bV_matches_ltvn |
2020-01-04 17:21:10 |
| 45.136.108.124 | attackspambots | Jan 4 09:38:34 h2177944 kernel: \[1325706.139760\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.124 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=36078 PROTO=TCP SPT=41385 DPT=8432 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 4 09:38:34 h2177944 kernel: \[1325706.139775\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.124 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=36078 PROTO=TCP SPT=41385 DPT=8432 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 4 10:16:32 h2177944 kernel: \[1327983.640619\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.124 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54377 PROTO=TCP SPT=41385 DPT=7408 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 4 10:35:36 h2177944 kernel: \[1329127.277076\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.124 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=5062 PROTO=TCP SPT=41385 DPT=7791 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 4 10:35:36 h2177944 kernel: \[1329127.277091\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.124 DST=85.214.1 |
2020-01-04 17:48:09 |
| 88.218.2.105 | attackbots | Honeypot attack, port: 23, PTR: client-88-218-2-105.pronetit.ro. |
2020-01-04 17:18:02 |
| 185.176.27.118 | attack | Jan 4 10:32:55 mc1 kernel: \[2289148.796741\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=29417 PROTO=TCP SPT=50222 DPT=51599 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 4 10:33:00 mc1 kernel: \[2289153.202145\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=39349 PROTO=TCP SPT=46752 DPT=37686 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 4 10:34:40 mc1 kernel: \[2289253.331162\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=7158 PROTO=TCP SPT=50222 DPT=13122 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2020-01-04 17:37:31 |
| 62.165.30.221 | attackspambots | Jan 4 04:17:42 debian sshd[27780]: Unable to negotiate with 62.165.30.221 port 32718: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jan 4 04:20:46 debian sshd[27902]: Unable to negotiate with 62.165.30.221 port 51711: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2020-01-04 17:35:11 |
| 183.129.141.30 | attackbotsspam | Jan 4 09:52:18 [host] sshd[9250]: Invalid user xmuser from 183.129.141.30 Jan 4 09:52:18 [host] sshd[9250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.129.141.30 Jan 4 09:52:21 [host] sshd[9250]: Failed password for invalid user xmuser from 183.129.141.30 port 35012 ssh2 |
2020-01-04 17:40:21 |
| 102.182.255.108 | attackspam | invalid user |
2020-01-04 17:07:13 |
| 183.238.53.242 | attackspambots | 2020-01-04 dovecot_login authenticator failed for \(**REMOVED**\) \[183.238.53.242\]: 535 Incorrect authentication data \(set_id=nologin\) 2020-01-04 dovecot_login authenticator failed for \(**REMOVED**\) \[183.238.53.242\]: 535 Incorrect authentication data \(set_id=admin@**REMOVED**\) 2020-01-04 dovecot_login authenticator failed for \(**REMOVED**\) \[183.238.53.242\]: 535 Incorrect authentication data \(set_id=admin\) |
2020-01-04 17:45:47 |
| 165.22.112.45 | attackspambots | Jan 4 05:49:18 nextcloud sshd\[7273\]: Invalid user mwc from 165.22.112.45 Jan 4 05:49:18 nextcloud sshd\[7273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.112.45 Jan 4 05:49:20 nextcloud sshd\[7273\]: Failed password for invalid user mwc from 165.22.112.45 port 49444 ssh2 ... |
2020-01-04 17:24:40 |
| 40.67.213.174 | attackbotsspam | Jan 1 15:58:52 mailserver sshd[22391]: Did not receive identification string from 40.67.213.174 Jan 1 15:59:19 mailserver sshd[22528]: Invalid user kiuchi from 40.67.213.174 Jan 1 15:59:19 mailserver sshd[22528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.67.213.174 Jan 1 15:59:21 mailserver sshd[22528]: Failed password for invalid user kiuchi from 40.67.213.174 port 32926 ssh2 Jan 1 15:59:21 mailserver sshd[22528]: Received disconnect from 40.67.213.174 port 32926:11: Bye Bye [preauth] Jan 1 15:59:21 mailserver sshd[22528]: Disconnected from 40.67.213.174 port 32926 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=40.67.213.174 |
2020-01-04 17:37:59 |
| 185.49.86.54 | attack | Jan 4 09:06:40 meumeu sshd[23466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.49.86.54 Jan 4 09:06:42 meumeu sshd[23466]: Failed password for invalid user wt from 185.49.86.54 port 34246 ssh2 Jan 4 09:07:59 meumeu sshd[23615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.49.86.54 ... |
2020-01-04 17:21:53 |
| 110.169.65.35 | attack | Honeypot attack, port: 23, PTR: cm-110-169-65-35.revip16.asianet.co.th. |
2020-01-04 17:23:57 |
| 89.231.163.9 | attackbotsspam | Honeypot attack, port: 23, PTR: host-89-231-163-9.dynamic.mm.pl. |
2020-01-04 17:26:20 |
| 60.246.186.91 | attack | Honeypot attack, port: 5555, PTR: nz186l91.bb60246.ctm.net. |
2020-01-04 17:09:06 |
| 92.74.47.131 | attack | Lines containing failures of 92.74.47.131 Jan 4 05:46:51 shared04 sshd[2501]: Invalid user admin from 92.74.47.131 port 44842 Jan 4 05:46:51 shared04 sshd[2501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.74.47.131 Jan 4 05:46:53 shared04 sshd[2501]: Failed password for invalid user admin from 92.74.47.131 port 44842 ssh2 Jan 4 05:46:53 shared04 sshd[2501]: Received disconnect from 92.74.47.131 port 44842:11: Bye Bye [preauth] Jan 4 05:46:53 shared04 sshd[2501]: Disconnected from invalid user admin 92.74.47.131 port 44842 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=92.74.47.131 |
2020-01-04 17:19:37 |