City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.42.203.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17993
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.42.203.254. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020300 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 03 19:15:29 CST 2025
;; MSG SIZE rcvd: 106Host 254.203.42.54.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 254.203.42.54.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.3.249 | attack | Oct 29 10:08:05 sauna sshd[69722]: Failed password for root from 222.186.3.249 port 22614 ssh2 ... |
2019-10-29 16:15:53 |
| 178.128.90.40 | attack | Oct 28 13:43:53 venus sshd[12337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.90.40 user=r.r Oct 28 13:43:55 venus sshd[12337]: Failed password for r.r from 178.128.90.40 port 47168 ssh2 Oct 28 13:48:28 venus sshd[12978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.90.40 user=r.r Oct 28 13:48:30 venus sshd[12978]: Failed password for r.r from 178.128.90.40 port 58110 ssh2 Oct 28 13:52:58 venus sshd[13721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.90.40 user=r.r Oct 28 13:53:00 venus sshd[13721]: Failed password for r.r from 178.128.90.40 port 40824 ssh2 Oct 28 13:57:29 venus sshd[14359]: Invalid user prs from 178.128.90.40 port 51766 Oct 28 13:57:29 venus sshd[14359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.90.40 Oct 28 13:57:31 venus sshd[14359]: Failed p........ ------------------------------ |
2019-10-29 16:14:53 |
| 58.87.77.250 | attackspambots | [Aegis] @ 2019-10-29 04:50:57 0000 -> Attempted User Privilege Gain: SERVER-WEBAPP Joomla JDatabaseDriverMysqli unserialize code execution attempt |
2019-10-29 16:10:06 |
| 182.219.172.224 | attackspambots | Oct 29 07:57:42 MK-Soft-Root2 sshd[22905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.219.172.224 Oct 29 07:57:44 MK-Soft-Root2 sshd[22905]: Failed password for invalid user admin from 182.219.172.224 port 37644 ssh2 ... |
2019-10-29 15:47:37 |
| 134.175.141.166 | attackspambots | Fail2Ban - SSH Bruteforce Attempt |
2019-10-29 16:02:27 |
| 123.207.40.70 | attackbots | Oct 29 00:47:19 home sshd[21693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.40.70 user=root Oct 29 00:47:21 home sshd[21693]: Failed password for root from 123.207.40.70 port 40326 ssh2 Oct 29 01:02:25 home sshd[21833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.40.70 user=root Oct 29 01:02:27 home sshd[21833]: Failed password for root from 123.207.40.70 port 39360 ssh2 Oct 29 01:08:26 home sshd[21873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.40.70 user=root Oct 29 01:08:28 home sshd[21873]: Failed password for root from 123.207.40.70 port 49142 ssh2 Oct 29 01:14:32 home sshd[21902]: Invalid user rtkit from 123.207.40.70 port 58940 Oct 29 01:14:32 home sshd[21902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.40.70 Oct 29 01:14:32 home sshd[21902]: Invalid user rtkit from 123.207.40.70 port 58940 |
2019-10-29 16:22:52 |
| 72.167.190.164 | attack | xmlrpc attack |
2019-10-29 16:03:53 |
| 119.200.186.168 | attackbots | Oct 29 07:58:47 hcbbdb sshd\[7570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.200.186.168 user=root Oct 29 07:58:50 hcbbdb sshd\[7570\]: Failed password for root from 119.200.186.168 port 34348 ssh2 Oct 29 08:03:35 hcbbdb sshd\[8063\]: Invalid user 14 from 119.200.186.168 Oct 29 08:03:35 hcbbdb sshd\[8063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.200.186.168 Oct 29 08:03:36 hcbbdb sshd\[8063\]: Failed password for invalid user 14 from 119.200.186.168 port 45416 ssh2 |
2019-10-29 16:15:20 |
| 114.234.147.26 | attackspambots | port scan and connect, tcp 23 (telnet) |
2019-10-29 16:07:21 |
| 190.121.195.219 | attackbotsspam | namecheap spam |
2019-10-29 16:05:03 |
| 139.155.112.94 | attackspambots | Oct 28 21:42:32 web1 sshd\[6614\]: Invalid user lukasz from 139.155.112.94 Oct 28 21:42:32 web1 sshd\[6614\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.112.94 Oct 28 21:42:34 web1 sshd\[6614\]: Failed password for invalid user lukasz from 139.155.112.94 port 47810 ssh2 Oct 28 21:52:06 web1 sshd\[7398\]: Invalid user hu890614 from 139.155.112.94 Oct 28 21:52:06 web1 sshd\[7398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.112.94 |
2019-10-29 16:01:33 |
| 37.49.231.121 | attackspambots | Scanning (more than 2 packets) random ports - tries to find possible vulnerable services |
2019-10-29 16:24:53 |
| 63.125.10.149 | attack | RDP Bruteforce |
2019-10-29 16:09:39 |
| 14.227.168.154 | attack | Automatic report - Port Scan Attack |
2019-10-29 16:16:45 |
| 119.27.170.64 | attackbots | Oct 29 05:26:41 markkoudstaal sshd[12953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.170.64 Oct 29 05:26:43 markkoudstaal sshd[12953]: Failed password for invalid user liyuzhen from 119.27.170.64 port 46712 ssh2 Oct 29 05:31:52 markkoudstaal sshd[13502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.170.64 |
2019-10-29 15:54:53 |