City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.149.75.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23996
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.149.75.48. IN A
;; AUTHORITY SECTION:
. 155 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030302 1800 900 604800 86400
;; Query time: 127 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 11:46:04 CST 2022
;; MSG SIZE rcvd: 106
Host 48.75.149.104.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 48.75.149.104.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.85.42.180 | attackbotsspam | Dec 4 21:23:55 nextcloud sshd\[18579\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180 user=root Dec 4 21:23:57 nextcloud sshd\[18579\]: Failed password for root from 112.85.42.180 port 15374 ssh2 Dec 4 21:24:01 nextcloud sshd\[18579\]: Failed password for root from 112.85.42.180 port 15374 ssh2 ... |
2019-12-05 04:26:07 |
| 177.85.116.242 | attackbotsspam | Dec 4 21:07:05 [host] sshd[16822]: Invalid user szaplonczay from 177.85.116.242 Dec 4 21:07:05 [host] sshd[16822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.85.116.242 Dec 4 21:07:07 [host] sshd[16822]: Failed password for invalid user szaplonczay from 177.85.116.242 port 14609 ssh2 |
2019-12-05 04:21:31 |
| 101.83.157.194 | attack | Dec 4 22:12:13 server sshd\[17441\]: Invalid user litt from 101.83.157.194 Dec 4 22:12:13 server sshd\[17441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.83.157.194 Dec 4 22:12:14 server sshd\[17441\]: Failed password for invalid user litt from 101.83.157.194 port 39496 ssh2 Dec 4 22:27:07 server sshd\[21664\]: Invalid user admin from 101.83.157.194 Dec 4 22:27:07 server sshd\[21664\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.83.157.194 ... |
2019-12-05 04:39:53 |
| 3.135.195.28 | attackspam | Fail2Ban Ban Triggered HTTP SQL Injection Attempt |
2019-12-05 04:37:36 |
| 120.71.145.189 | attack | Dec 4 10:17:42 hpm sshd\[21300\]: Invalid user skate from 120.71.145.189 Dec 4 10:17:42 hpm sshd\[21300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.71.145.189 Dec 4 10:17:44 hpm sshd\[21300\]: Failed password for invalid user skate from 120.71.145.189 port 48526 ssh2 Dec 4 10:23:33 hpm sshd\[21892\]: Invalid user Dallas123 from 120.71.145.189 Dec 4 10:23:33 hpm sshd\[21892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.71.145.189 |
2019-12-05 04:30:11 |
| 117.144.188.235 | attackspam | Dec 4 20:48:56 v22018076622670303 sshd\[15939\]: Invalid user ubnt from 117.144.188.235 port 41304 Dec 4 20:48:56 v22018076622670303 sshd\[15939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.144.188.235 Dec 4 20:48:58 v22018076622670303 sshd\[15939\]: Failed password for invalid user ubnt from 117.144.188.235 port 41304 ssh2 ... |
2019-12-05 04:47:26 |
| 123.206.47.228 | attackbots | Lines containing failures of 123.206.47.228 Dec 3 09:41:57 nextcloud sshd[15897]: Invalid user serverhostnameez from 123.206.47.228 port 59368 Dec 3 09:41:57 nextcloud sshd[15897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.47.228 Dec 3 09:42:00 nextcloud sshd[15897]: Failed password for invalid user serverhostnameez from 123.206.47.228 port 59368 ssh2 Dec 3 09:42:00 nextcloud sshd[15897]: Received disconnect from 123.206.47.228 port 59368:11: Bye Bye [preauth] Dec 3 09:42:00 nextcloud sshd[15897]: Disconnected from invalid user serverhostnameez 123.206.47.228 port 59368 [preauth] Dec 3 09:59:00 nextcloud sshd[19550]: Invalid user server from 123.206.47.228 port 44654 Dec 3 09:59:00 nextcloud sshd[19550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.47.228 Dec 3 09:59:02 nextcloud sshd[19550]: Failed password for invalid user server from 123.206.47.228 port 446........ ------------------------------ |
2019-12-05 04:42:15 |
| 118.89.165.245 | attack | Dec 4 21:19:38 legacy sshd[7378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.165.245 Dec 4 21:19:40 legacy sshd[7378]: Failed password for invalid user cynthia from 118.89.165.245 port 44306 ssh2 Dec 4 21:26:19 legacy sshd[7736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.165.245 ... |
2019-12-05 04:30:23 |
| 111.231.32.127 | attack | Dec 3 14:49:03 kmh-wmh-003-nbg03 sshd[16042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.32.127 user=r.r Dec 3 14:49:05 kmh-wmh-003-nbg03 sshd[16042]: Failed password for r.r from 111.231.32.127 port 47576 ssh2 Dec 3 14:49:05 kmh-wmh-003-nbg03 sshd[16042]: Received disconnect from 111.231.32.127 port 47576:11: Bye Bye [preauth] Dec 3 14:49:05 kmh-wmh-003-nbg03 sshd[16042]: Disconnected from 111.231.32.127 port 47576 [preauth] Dec 3 15:03:27 kmh-wmh-003-nbg03 sshd[17220]: Invalid user metra from 111.231.32.127 port 59792 Dec 3 15:03:27 kmh-wmh-003-nbg03 sshd[17220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.32.127 Dec 3 15:03:29 kmh-wmh-003-nbg03 sshd[17220]: Failed password for invalid user metra from 111.231.32.127 port 59792 ssh2 Dec 3 15:03:29 kmh-wmh-003-nbg03 sshd[17220]: Received disconnect from 111.231.32.127 port 59792:11: Bye Bye [preauth] Dec 3 ........ ------------------------------- |
2019-12-05 04:39:34 |
| 52.32.115.8 | attackspambots | 12/04/2019-21:14:02.495062 52.32.115.8 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-12-05 04:28:48 |
| 185.17.41.198 | attack | Dec 4 21:28:50 ns381471 sshd[24133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.17.41.198 Dec 4 21:28:52 ns381471 sshd[24133]: Failed password for invalid user vvvv from 185.17.41.198 port 42460 ssh2 |
2019-12-05 04:45:20 |
| 147.135.163.83 | attack | Dec 4 21:27:56 SilenceServices sshd[19624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.163.83 Dec 4 21:27:58 SilenceServices sshd[19624]: Failed password for invalid user ts3 from 147.135.163.83 port 55313 ssh2 Dec 4 21:29:11 SilenceServices sshd[20023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.163.83 |
2019-12-05 04:35:45 |
| 188.68.56.117 | attack | Dec 4 20:21:16 mail1 sshd\[3970\]: Invalid user administrator from 188.68.56.117 port 43788 Dec 4 20:21:16 mail1 sshd\[3970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.68.56.117 Dec 4 20:21:18 mail1 sshd\[3970\]: Failed password for invalid user administrator from 188.68.56.117 port 43788 ssh2 Dec 4 20:27:28 mail1 sshd\[6824\]: Invalid user host from 188.68.56.117 port 45054 Dec 4 20:27:28 mail1 sshd\[6824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.68.56.117 ... |
2019-12-05 04:25:05 |
| 197.156.72.154 | attackspam | Dec 4 15:01:52 linuxvps sshd\[49854\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.156.72.154 user=root Dec 4 15:01:53 linuxvps sshd\[49854\]: Failed password for root from 197.156.72.154 port 35010 ssh2 Dec 4 15:10:34 linuxvps sshd\[54897\]: Invalid user annemone from 197.156.72.154 Dec 4 15:10:34 linuxvps sshd\[54897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.156.72.154 Dec 4 15:10:36 linuxvps sshd\[54897\]: Failed password for invalid user annemone from 197.156.72.154 port 41332 ssh2 |
2019-12-05 04:43:22 |
| 92.118.38.38 | attackbotsspam | Dec 4 21:50:43 andromeda postfix/smtpd\[11823\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Dec 4 21:50:47 andromeda postfix/smtpd\[11863\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Dec 4 21:50:59 andromeda postfix/smtpd\[13236\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Dec 4 21:51:18 andromeda postfix/smtpd\[11823\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Dec 4 21:51:22 andromeda postfix/smtpd\[12747\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure |
2019-12-05 04:57:01 |