City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 72.42.20.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15666
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;72.42.20.44. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021000 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 14:00:55 CST 2025
;; MSG SIZE rcvd: 104Host 44.20.42.72.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 44.20.42.72.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 192.241.199.239 | attackspambots | scanner |
2020-04-03 19:01:29 |
| 106.12.155.162 | attack | SSH login attempts. |
2020-04-03 19:11:19 |
| 210.22.151.39 | attackbotsspam | Apr 3 11:53:14 dev0-dcde-rnet sshd[15271]: Failed password for root from 210.22.151.39 port 58294 ssh2 Apr 3 12:02:46 dev0-dcde-rnet sshd[15325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.22.151.39 Apr 3 12:02:48 dev0-dcde-rnet sshd[15325]: Failed password for invalid user zhushaopei from 210.22.151.39 port 48480 ssh2 |
2020-04-03 19:35:47 |
| 159.65.181.225 | attackbots | Automatic report - SSH Brute-Force Attack |
2020-04-03 18:58:40 |
| 109.111.183.80 | attack | $f2bV_matches | Triggered by Fail2Ban at Vostok web server |
2020-04-03 19:43:44 |
| 158.69.243.108 | attack | 20 attempts against mh-misbehave-ban on twig |
2020-04-03 19:31:52 |
| 159.89.194.160 | attackbotsspam | Apr 3 10:48:14 host5 sshd[3071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.194.160 user=root Apr 3 10:48:16 host5 sshd[3071]: Failed password for root from 159.89.194.160 port 52134 ssh2 ... |
2020-04-03 19:44:54 |
| 112.3.25.139 | attack | Lines containing failures of 112.3.25.139 Apr 1 09:33:38 shared04 sshd[5145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.3.25.139 user=r.r Apr 1 09:33:40 shared04 sshd[5145]: Failed password for r.r from 112.3.25.139 port 43770 ssh2 Apr 1 09:33:46 shared04 sshd[5145]: Received disconnect from 112.3.25.139 port 43770:11: Bye Bye [preauth] Apr 1 09:33:46 shared04 sshd[5145]: Disconnected from authenticating user r.r 112.3.25.139 port 43770 [preauth] Apr 1 09:40:41 shared04 sshd[8057]: Connection closed by 112.3.25.139 port 45777 [preauth] Apr 1 09:46:18 shared04 sshd[10146]: Connection closed by 112.3.25.139 port 46398 [preauth] Apr 1 09:51:51 shared04 sshd[12010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.3.25.139 user=r.r Apr 1 09:51:53 shared04 sshd[12010]: Failed password for r.r from 112.3.25.139 port 47017 ssh2 Apr 1 09:51:53 shared04 sshd[12010]: Received di........ ------------------------------ |
2020-04-03 19:18:55 |
| 190.85.71.129 | attackspam | Apr 3 13:03:13 vpn01 sshd[11691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.85.71.129 Apr 3 13:03:15 vpn01 sshd[11691]: Failed password for invalid user www from 190.85.71.129 port 58885 ssh2 ... |
2020-04-03 19:23:56 |
| 171.94.236.135 | attack | IP reached maximum auth failures |
2020-04-03 19:14:48 |
| 45.143.220.249 | attack | 45.143.220.249 was recorded 6 times by 2 hosts attempting to connect to the following ports: 8060,1999,49060,5062,5999. Incident counter (4h, 24h, all-time): 6, 27, 274 |
2020-04-03 19:39:32 |
| 207.154.193.178 | attackbotsspam | k+ssh-bruteforce |
2020-04-03 19:24:50 |
| 218.3.44.195 | attackspam | SSH brute force attempt |
2020-04-03 19:29:29 |
| 45.76.216.48 | attack | Apr 1 03:15:08 cumulus sshd[10224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.76.216.48 user=r.r Apr 1 03:15:10 cumulus sshd[10224]: Failed password for r.r from 45.76.216.48 port 52640 ssh2 Apr 1 03:15:10 cumulus sshd[10224]: Received disconnect from 45.76.216.48 port 52640:11: Bye Bye [preauth] Apr 1 03:15:10 cumulus sshd[10224]: Disconnected from 45.76.216.48 port 52640 [preauth] Apr 1 03:28:02 cumulus sshd[10904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.76.216.48 user=r.r Apr 1 03:28:04 cumulus sshd[10904]: Failed password for r.r from 45.76.216.48 port 57414 ssh2 Apr 1 03:28:04 cumulus sshd[10904]: Received disconnect from 45.76.216.48 port 57414:11: Bye Bye [preauth] Apr 1 03:28:04 cumulus sshd[10904]: Disconnected from 45.76.216.48 port 57414 [preauth] Apr 1 03:33:40 cumulus sshd[11222]: Invalid user admin from 45.76.216.48 port 52302 Apr 1 03:33:40 cum........ ------------------------------- |
2020-04-03 19:22:59 |
| 104.168.28.195 | attackbotsspam | Apr 3 11:30:01 haigwepa sshd[29968]: Failed password for root from 104.168.28.195 port 54067 ssh2 ... |
2020-04-03 19:12:37 |