City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.16.199.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37708
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.16.199.48. IN A
;; AUTHORITY SECTION:
. 291 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022031100 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 11 18:18:09 CST 2022
;; MSG SIZE rcvd: 106Host 48.199.16.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 48.199.16.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 183.51.120.115 | attack | Icarus honeypot on github |
2020-08-11 02:51:40 |
| 61.154.97.203 | attackbots | Automatic report - Port Scan Attack |
2020-08-11 02:49:33 |
| 51.178.50.20 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-11 03:02:10 |
| 113.88.13.164 | attackbotsspam | Unauthorized connection attempt from IP address 113.88.13.164 on Port 445(SMB) |
2020-08-11 02:37:44 |
| 142.93.49.38 | attack | familiengesundheitszentrum-fulda.de 142.93.49.38 [10/Aug/2020:19:57:19 +0200] "POST /wp-login.php HTTP/1.1" 200 6074 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" familiengesundheitszentrum-fulda.de 142.93.49.38 [10/Aug/2020:19:57:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4119 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-11 03:07:38 |
| 14.160.110.130 | attackspam | Unauthorized connection attempt from IP address 14.160.110.130 on Port 445(SMB) |
2020-08-11 02:43:39 |
| 157.230.241.22 | attackspam | Aug 10 14:05:00 abendstille sshd\[19665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.241.22 user=root Aug 10 14:05:02 abendstille sshd\[19665\]: Failed password for root from 157.230.241.22 port 59530 ssh2 Aug 10 14:09:56 abendstille sshd\[24110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.241.22 user=root Aug 10 14:09:58 abendstille sshd\[24110\]: Failed password for root from 157.230.241.22 port 57714 ssh2 Aug 10 14:14:40 abendstille sshd\[28914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.241.22 user=root ... |
2020-08-11 02:56:34 |
| 183.166.171.101 | attackbots | MAIL: User Login Brute Force Attempt |
2020-08-11 02:51:16 |
| 51.137.89.155 | attack | 2020-08-10T18:58:04.183671hostname sshd[14338]: Failed password for root from 51.137.89.155 port 51302 ssh2 2020-08-10T19:02:25.318056hostname sshd[16083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.137.89.155 user=root 2020-08-10T19:02:26.922592hostname sshd[16083]: Failed password for root from 51.137.89.155 port 58932 ssh2 ... |
2020-08-11 02:40:05 |
| 20.49.2.187 | attackspam | Aug 10 19:28:21 ajax sshd[13151]: Failed password for root from 20.49.2.187 port 34716 ssh2 |
2020-08-11 03:13:01 |
| 60.216.220.126 | attackspambots | 20 attempts against mh-ssh on maple |
2020-08-11 02:57:16 |
| 50.7.178.54 | attackbots |
|
2020-08-11 03:15:06 |
| 163.172.42.123 | attackbots | 163.172.42.123 - - [10/Aug/2020:15:13:23 +0100] "POST /wp-login.php HTTP/1.1" 200 1948 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 163.172.42.123 - - [10/Aug/2020:15:13:29 +0100] "POST /wp-login.php HTTP/1.1" 200 1912 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 163.172.42.123 - - [10/Aug/2020:15:13:30 +0100] "POST /wp-login.php HTTP/1.1" 200 1949 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-11 02:55:22 |
| 191.234.163.104 | attack | Aug 10 19:54:59 rotator sshd\[1792\]: Failed password for root from 191.234.163.104 port 46136 ssh2Aug 10 19:57:52 rotator sshd\[2583\]: Failed password for root from 191.234.163.104 port 50902 ssh2Aug 10 19:58:55 rotator sshd\[2600\]: Failed password for root from 191.234.163.104 port 36190 ssh2Aug 10 19:59:58 rotator sshd\[2609\]: Failed password for root from 191.234.163.104 port 49696 ssh2Aug 10 20:01:09 rotator sshd\[3402\]: Failed password for root from 191.234.163.104 port 35004 ssh2Aug 10 20:02:16 rotator sshd\[3418\]: Failed password for root from 191.234.163.104 port 48530 ssh2 ... |
2020-08-11 03:06:16 |
| 104.131.39.193 | attackspam | Aug 10 20:42:06 inter-technics sshd[16964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.39.193 user=root Aug 10 20:42:08 inter-technics sshd[16964]: Failed password for root from 104.131.39.193 port 33052 ssh2 Aug 10 20:45:54 inter-technics sshd[17156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.39.193 user=root Aug 10 20:45:55 inter-technics sshd[17156]: Failed password for root from 104.131.39.193 port 44554 ssh2 Aug 10 20:49:38 inter-technics sshd[17333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.39.193 user=root Aug 10 20:49:40 inter-technics sshd[17333]: Failed password for root from 104.131.39.193 port 56048 ssh2 ... |
2020-08-11 02:59:04 |