City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.48.12.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9614
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;1.48.12.49. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400
;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 15:24:24 CST 2022
;; MSG SIZE rcvd: 103Host 49.12.48.1.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 49.12.48.1.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 191.53.236.102 | attackbots | Brute force attempt |
2020-09-06 16:04:40 |
| 156.197.91.10 | attack | Attempted connection to port 445. |
2020-09-06 16:41:06 |
| 60.52.69.27 | attackspambots | Lines containing failures of 60.52.69.27 Aug 31 00:42:49 newdogma sshd[16619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.52.69.27 user=r.r Aug 31 00:42:51 newdogma sshd[16619]: Failed password for r.r from 60.52.69.27 port 29501 ssh2 Aug 31 00:42:56 newdogma sshd[16619]: Received disconnect from 60.52.69.27 port 29501:11: Bye Bye [preauth] Aug 31 00:42:56 newdogma sshd[16619]: Disconnected from authenticating user r.r 60.52.69.27 port 29501 [preauth] Aug 31 01:05:24 newdogma sshd[23386]: Connection reset by 60.52.69.27 port 21209 [preauth] Aug 31 01:08:49 newdogma sshd[24205]: Connection closed by 60.52.69.27 port 29491 [preauth] Aug 31 01:12:18 newdogma sshd[24937]: Invalid user francois from 60.52.69.27 port 50588 Aug 31 01:12:18 newdogma sshd[24937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.52.69.27 Aug 31 01:12:20 newdogma sshd[24937]: Failed password for invalid user........ ------------------------------ |
2020-09-06 16:01:32 |
| 114.219.90.252 | attackspam | Aug 31 07:42:30 georgia postfix/smtpd[36598]: connect from unknown[114.219.90.252] Aug 31 07:42:32 georgia postfix/smtpd[36598]: warning: unknown[114.219.90.252]: SASL LOGIN authentication failed: authentication failure Aug 31 07:42:32 georgia postfix/smtpd[36598]: lost connection after AUTH from unknown[114.219.90.252] Aug 31 07:42:32 georgia postfix/smtpd[36598]: disconnect from unknown[114.219.90.252] ehlo=1 auth=0/1 commands=1/2 Aug 31 07:42:33 georgia postfix/smtpd[36598]: connect from unknown[114.219.90.252] Aug 31 07:42:43 georgia postfix/smtpd[36598]: warning: unknown[114.219.90.252]: SASL LOGIN authentication failed: authentication failure Aug 31 07:42:43 georgia postfix/smtpd[36598]: lost connection after AUTH from unknown[114.219.90.252] Aug 31 07:42:43 georgia postfix/smtpd[36598]: disconnect from unknown[114.219.90.252] ehlo=1 auth=0/1 commands=1/2 Aug 31 07:42:44 georgia postfix/smtpd[36598]: connect from unknown[114.219.90.252] Aug 31 07:42:53 georgia pos........ ------------------------------- |
2020-09-06 16:12:54 |
| 74.120.14.19 | attackbots | ET DROP Dshield Block Listed Source group 1 - port: 6379 proto: tcp cat: Misc Attackbytes: 60 |
2020-09-06 16:33:04 |
| 182.61.12.9 | attack | Sep 6 04:42:55 jumpserver sshd[8774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.12.9 Sep 6 04:42:55 jumpserver sshd[8774]: Invalid user damri from 182.61.12.9 port 57188 Sep 6 04:42:57 jumpserver sshd[8774]: Failed password for invalid user damri from 182.61.12.9 port 57188 ssh2 ... |
2020-09-06 16:16:49 |
| 74.220.169.212 | attack | Honeypot attack, port: 5555, PTR: dhcp-b0-4e-26-7b-b9-88.cpe.wightman.ca. |
2020-09-06 16:18:23 |
| 179.247.178.221 | attackbots | Attempted connection to port 445. |
2020-09-06 16:39:39 |
| 141.98.9.166 | attackspambots | Sep 6 07:42:55 scw-6657dc sshd[6178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.166 Sep 6 07:42:55 scw-6657dc sshd[6178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.166 Sep 6 07:42:57 scw-6657dc sshd[6178]: Failed password for invalid user admin from 141.98.9.166 port 40693 ssh2 ... |
2020-09-06 16:21:34 |
| 45.130.97.87 | attackspam | Attempted connection to port 445. |
2020-09-06 16:34:37 |
| 116.109.234.188 | attackbots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-09-06 16:22:23 |
| 170.83.189.195 | attack | Brute force attempt |
2020-09-06 16:28:01 |
| 37.139.7.127 | attackbots | 2020-09-06T00:54:59.916282server.mjenks.net sshd[2282516]: Failed password for root from 37.139.7.127 port 42554 ssh2 2020-09-06T00:57:58.263562server.mjenks.net sshd[2282881]: Invalid user usuario from 37.139.7.127 port 51436 2020-09-06T00:57:58.269944server.mjenks.net sshd[2282881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.7.127 2020-09-06T00:57:58.263562server.mjenks.net sshd[2282881]: Invalid user usuario from 37.139.7.127 port 51436 2020-09-06T00:58:00.052571server.mjenks.net sshd[2282881]: Failed password for invalid user usuario from 37.139.7.127 port 51436 ssh2 ... |
2020-09-06 16:00:35 |
| 124.128.158.37 | attackbots | ... |
2020-09-06 15:59:09 |
| 45.129.33.147 | attackspambots | [H1.VM6] Blocked by UFW |
2020-09-06 16:17:23 |