City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 74.106.168.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29488
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;74.106.168.92. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025011301 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 14 13:08:43 CST 2025
;; MSG SIZE rcvd: 106Host 92.168.106.74.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 92.168.106.74.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 58.186.97.43 | attackbotsspam | Brute force SMTP login attempts. |
2019-10-22 01:29:51 |
| 52.172.44.97 | attack | Oct 21 03:48:57 kapalua sshd\[3072\]: Invalid user xfs from 52.172.44.97 Oct 21 03:48:57 kapalua sshd\[3072\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.44.97 Oct 21 03:49:00 kapalua sshd\[3072\]: Failed password for invalid user xfs from 52.172.44.97 port 56170 ssh2 Oct 21 03:53:21 kapalua sshd\[3382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.44.97 user=root Oct 21 03:53:23 kapalua sshd\[3382\]: Failed password for root from 52.172.44.97 port 40586 ssh2 |
2019-10-22 01:07:54 |
| 220.160.55.76 | attackbotsspam | SSH Scan |
2019-10-22 01:31:09 |
| 116.111.126.69 | attack | " " |
2019-10-22 01:00:44 |
| 148.70.3.199 | attackspam | Automatic report - Banned IP Access |
2019-10-22 00:54:54 |
| 138.99.22.179 | attack | Portscan or hack attempt detected by psad/fwsnort |
2019-10-22 01:10:03 |
| 51.68.115.235 | attackspambots | Oct 20 21:22:26 server sshd\[1943\]: Failed password for root from 51.68.115.235 port 57849 ssh2 Oct 21 19:26:00 server sshd\[7658\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.115.235 user=root Oct 21 19:26:02 server sshd\[7658\]: Failed password for root from 51.68.115.235 port 47815 ssh2 Oct 21 19:42:33 server sshd\[13037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.115.235 user=root Oct 21 19:42:36 server sshd\[13037\]: Failed password for root from 51.68.115.235 port 55400 ssh2 ... |
2019-10-22 01:31:43 |
| 45.136.109.237 | attack | Oct 21 15:09:32 mc1 kernel: \[2949726.486053\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.237 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=50419 PROTO=TCP SPT=53705 DPT=9651 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 15:10:51 mc1 kernel: \[2949804.708547\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.237 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=18010 PROTO=TCP SPT=53705 DPT=8970 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 15:10:55 mc1 kernel: \[2949808.984009\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.237 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=60593 PROTO=TCP SPT=53705 DPT=9783 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-22 00:58:46 |
| 164.8.132.62 | attackbotsspam | 2019-10-21T23:28:00.160905enmeeting.mahidol.ac.th sshd\[28406\]: User root from fl02.fl.uni-mb.si not allowed because not listed in AllowUsers 2019-10-21T23:28:00.285458enmeeting.mahidol.ac.th sshd\[28406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=fl02.fl.uni-mb.si user=root 2019-10-21T23:28:03.113905enmeeting.mahidol.ac.th sshd\[28406\]: Failed password for invalid user root from 164.8.132.62 port 39828 ssh2 ... |
2019-10-22 01:23:30 |
| 106.13.32.56 | attackspambots | Invalid user resumes from 106.13.32.56 port 36750 |
2019-10-22 01:33:31 |
| 208.109.54.127 | attackspam | 208.109.54.127 - - [21/Oct/2019:16:14:18 +0200] "POST /wp-login.php HTTP/1.0" 200 2180 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 208.109.54.127 - - [21/Oct/2019:16:14:20 +0200] "POST /wp-login.php HTTP/1.0" 200 2189 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-10-22 01:25:34 |
| 218.86.123.242 | attack | Oct 21 17:29:07 anodpoucpklekan sshd[8575]: Invalid user postgres from 218.86.123.242 port 34016 ... |
2019-10-22 01:37:04 |
| 88.218.16.240 | attackspam | Oct 21 13:35:53 mc1 kernel: \[2944107.348982\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=88.218.16.240 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=58429 PROTO=TCP SPT=56880 DPT=3480 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 13:38:06 mc1 kernel: \[2944240.423870\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=88.218.16.240 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=18333 PROTO=TCP SPT=56880 DPT=3706 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 13:39:47 mc1 kernel: \[2944341.108665\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=88.218.16.240 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=41007 PROTO=TCP SPT=56880 DPT=4964 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-22 01:18:08 |
| 92.222.90.130 | attackspam | (sshd) Failed SSH login from 92.222.90.130 (FR/France/130.ip-92-222-90.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 21 13:24:37 server2 sshd[3746]: Failed password for root from 92.222.90.130 port 46674 ssh2 Oct 21 13:32:33 server2 sshd[3993]: Invalid user lucas from 92.222.90.130 port 52690 Oct 21 13:32:35 server2 sshd[3993]: Failed password for invalid user lucas from 92.222.90.130 port 52690 ssh2 Oct 21 13:36:14 server2 sshd[4072]: Failed password for root from 92.222.90.130 port 35612 ssh2 Oct 21 13:39:49 server2 sshd[4137]: Failed password for root from 92.222.90.130 port 46752 ssh2 |
2019-10-22 01:15:24 |
| 79.25.101.74 | attackspam | Automatic report - Port Scan Attack |
2019-10-22 01:37:59 |