City: Cape Town
Region: Western Cape
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.160.18.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9550
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;44.160.18.66. IN A
;; AUTHORITY SECTION:
. 434 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019110100 1800 900 604800 86400
;; Query time: 475 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 02 00:52:01 CST 2019
;; MSG SIZE rcvd: 116Host 66.18.160.44.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 66.18.160.44.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.85.42.172 | attack | Jul 11 21:25:35 sd-69548 sshd[167972]: Unable to negotiate with 112.85.42.172 port 26826: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Jul 11 22:19:00 sd-69548 sshd[172032]: Unable to negotiate with 112.85.42.172 port 22688: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... |
2020-07-12 04:21:59 |
| 46.182.19.49 | attackspambots | Invalid user duncan from 46.182.19.49 port 58472 |
2020-07-12 04:01:36 |
| 185.143.73.103 | attackspambots | 2020-07-11T14:13:46.152519linuxbox-skyline auth[865351]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=ae rhost=185.143.73.103 ... |
2020-07-12 04:16:24 |
| 207.154.215.119 | attackbots | Jul 12 02:06:19 localhost sshd[3221307]: Invalid user youhong from 207.154.215.119 port 43262 ... |
2020-07-12 04:08:56 |
| 51.38.130.205 | attack | Jul 11 10:29:02 dignus sshd[22185]: Failed password for invalid user reed from 51.38.130.205 port 36814 ssh2 Jul 11 10:32:00 dignus sshd[22426]: Invalid user wangyu from 51.38.130.205 port 33102 Jul 11 10:32:00 dignus sshd[22426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.130.205 Jul 11 10:32:03 dignus sshd[22426]: Failed password for invalid user wangyu from 51.38.130.205 port 33102 ssh2 Jul 11 10:35:09 dignus sshd[22672]: Invalid user asterisk from 51.38.130.205 port 57616 ... |
2020-07-12 04:00:29 |
| 98.126.83.178 | attackspam | Jul 10 03:52:13 our-server-hostname sshd[3617]: Invalid user test from 98.126.83.178 Jul 10 03:52:13 our-server-hostname sshd[3617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.126.83.178 Jul 10 03:52:14 our-server-hostname sshd[3617]: Failed password for invalid user test from 98.126.83.178 port 52874 ssh2 Jul 10 04:12:41 our-server-hostname sshd[6349]: Invalid user annemarie from 98.126.83.178 Jul 10 04:12:41 our-server-hostname sshd[6349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.126.83.178 Jul 10 04:12:43 our-server-hostname sshd[6349]: Failed password for invalid user annemarie from 98.126.83.178 port 42328 ssh2 Jul 10 04:16:01 our-server-hostname sshd[6818]: Invalid user bong from 98.126.83.178 Jul 10 04:16:01 our-server-hostname sshd[6818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.126.83.178 ........ ----------------------------------------------- https |
2020-07-12 04:21:13 |
| 51.91.96.96 | attackbotsspam | 3x Failed Password |
2020-07-12 03:59:37 |
| 212.237.56.214 | attack | 2020-07-11T14:25:05.599629sorsha.thespaminator.com sshd[25733]: Invalid user juliette from 212.237.56.214 port 36622 2020-07-11T14:25:07.754313sorsha.thespaminator.com sshd[25733]: Failed password for invalid user juliette from 212.237.56.214 port 36622 ssh2 ... |
2020-07-12 04:06:57 |
| 87.173.197.161 | attack | Invalid user pi from 87.173.197.161 port 37154 |
2020-07-12 03:55:59 |
| 82.65.27.68 | attackbots | SSH Brute-Force Attack |
2020-07-12 03:56:49 |
| 46.161.27.75 | attackspam | Jul 11 22:08:30 debian-2gb-nbg1-2 kernel: \[16756692.528086\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=46.161.27.75 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=14368 PROTO=TCP SPT=40618 DPT=2525 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-12 04:22:46 |
| 49.232.168.32 | attackbots | Jul 11 19:50:37 scw-tender-jepsen sshd[32117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.168.32 Jul 11 19:50:40 scw-tender-jepsen sshd[32117]: Failed password for invalid user remote from 49.232.168.32 port 45946 ssh2 |
2020-07-12 04:01:11 |
| 222.239.124.19 | attackspambots | 2020-07-11T10:37:42.8185491495-001 sshd[11384]: Failed password for invalid user cyrus from 222.239.124.19 port 58394 ssh2 2020-07-11T10:41:08.6432261495-001 sshd[11500]: Invalid user wlj from 222.239.124.19 port 54462 2020-07-11T10:41:08.6483711495-001 sshd[11500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.239.124.19 2020-07-11T10:41:08.6432261495-001 sshd[11500]: Invalid user wlj from 222.239.124.19 port 54462 2020-07-11T10:41:10.4640321495-001 sshd[11500]: Failed password for invalid user wlj from 222.239.124.19 port 54462 ssh2 2020-07-11T10:44:38.5151411495-001 sshd[11594]: Invalid user globalflash from 222.239.124.19 port 50536 ... |
2020-07-12 04:05:32 |
| 216.151.180.148 | attack | WordPress Bruteforce on Authentication page |
2020-07-12 04:11:15 |
| 51.158.124.238 | attack | $f2bV_matches |
2020-07-12 04:27:19 |