City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.13.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39186
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.18.13.14. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 14:05:25 CST 2022
;; MSG SIZE rcvd: 105Host 14.13.18.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 14.13.18.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 220.156.172.49 | attackbots | Nov 30 01:11:14 penfold postfix/smtpd[2863]: connect from unknown[220.156.172.49] Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov 30 01:11:31 penfold postfix/smtpd[2863]: too many errors after RCPT from unknown[220.156.172.49] Nov 30 01:11:31 penfold postfix/smtpd[2863]: disconnect from unknown[220.156.172.49] ehlo=1 mail=2 rcpt=0/12 eclipset=1 commands=4/16 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=220.156.172.49 |
2019-11-30 21:41:03 |
| 189.59.33.238 | attackbots | Nov 30 13:19:50 server sshd\[32333\]: Invalid user ubnt from 189.59.33.238 Nov 30 13:19:50 server sshd\[32333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.59.33.238.dynamic.adsl.gvt.net.br Nov 30 13:19:52 server sshd\[32333\]: Failed password for invalid user ubnt from 189.59.33.238 port 49624 ssh2 Nov 30 13:39:29 server sshd\[4763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.59.33.238.dynamic.adsl.gvt.net.br user=root Nov 30 13:39:31 server sshd\[4763\]: Failed password for root from 189.59.33.238 port 46206 ssh2 ... |
2019-11-30 21:38:09 |
| 103.58.250.137 | attack | Telnet/23 MH Probe, BF, Hack - |
2019-11-30 21:56:47 |
| 43.243.75.14 | attackbotsspam | Nov 30 12:42:23 work-partkepr sshd\[25587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.243.75.14 user=root Nov 30 12:42:25 work-partkepr sshd\[25587\]: Failed password for root from 43.243.75.14 port 48996 ssh2 ... |
2019-11-30 21:40:03 |
| 88.247.161.188 | attack | Automatic report - Port Scan Attack |
2019-11-30 22:00:28 |
| 165.227.46.221 | attackspambots | Nov 30 13:51:09 ns382633 sshd\[25669\]: Invalid user weikert from 165.227.46.221 port 38976 Nov 30 13:51:09 ns382633 sshd\[25669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.46.221 Nov 30 13:51:11 ns382633 sshd\[25669\]: Failed password for invalid user weikert from 165.227.46.221 port 38976 ssh2 Nov 30 14:16:23 ns382633 sshd\[30292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.46.221 user=root Nov 30 14:16:25 ns382633 sshd\[30292\]: Failed password for root from 165.227.46.221 port 37752 ssh2 |
2019-11-30 22:09:27 |
| 113.179.133.34 | attackbots | Unauthorised access (Nov 30) SRC=113.179.133.34 LEN=52 TTL=116 ID=11270 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-30 21:59:57 |
| 175.166.177.68 | attackbots | SSH brute-force: detected 8 distinct usernames within a 24-hour window. |
2019-11-30 21:48:08 |
| 122.224.19.21 | attackbotsspam | Unauthorized connection attempt from IP address 122.224.19.21 on Port 445(SMB) |
2019-11-30 21:56:01 |
| 211.254.213.18 | attackbotsspam | Nov 30 08:06:37 Tower sshd[32892]: Connection from 211.254.213.18 port 47446 on 192.168.10.220 port 22 Nov 30 08:06:38 Tower sshd[32892]: Invalid user kimeleen from 211.254.213.18 port 47446 Nov 30 08:06:38 Tower sshd[32892]: error: Could not get shadow information for NOUSER Nov 30 08:06:38 Tower sshd[32892]: Failed password for invalid user kimeleen from 211.254.213.18 port 47446 ssh2 Nov 30 08:06:38 Tower sshd[32892]: Received disconnect from 211.254.213.18 port 47446:11: Bye Bye [preauth] Nov 30 08:06:38 Tower sshd[32892]: Disconnected from invalid user kimeleen 211.254.213.18 port 47446 [preauth] |
2019-11-30 21:54:55 |
| 125.124.70.22 | attackbots | Invalid user desknorm from 125.124.70.22 port 38700 |
2019-11-30 21:50:33 |
| 61.74.118.139 | attackbotsspam | Nov 30 07:14:48 ns3042688 sshd\[24762\]: Invalid user update from 61.74.118.139 Nov 30 07:14:48 ns3042688 sshd\[24762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.74.118.139 Nov 30 07:14:50 ns3042688 sshd\[24762\]: Failed password for invalid user update from 61.74.118.139 port 54278 ssh2 Nov 30 07:18:22 ns3042688 sshd\[26363\]: Invalid user christos from 61.74.118.139 Nov 30 07:18:22 ns3042688 sshd\[26363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.74.118.139 ... |
2019-11-30 21:44:51 |
| 178.128.246.123 | attackspambots | Nov 29 21:58:59 php1 sshd\[1729\]: Invalid user girl from 178.128.246.123 Nov 29 21:58:59 php1 sshd\[1729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.246.123 Nov 29 21:59:01 php1 sshd\[1729\]: Failed password for invalid user girl from 178.128.246.123 port 48704 ssh2 Nov 29 22:02:01 php1 sshd\[2110\]: Invalid user malaika from 178.128.246.123 Nov 29 22:02:01 php1 sshd\[2110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.246.123 |
2019-11-30 21:45:36 |
| 78.23.69.42 | attackspam | SSH Brute Force, server-1 sshd[11251]: Failed password for invalid user user from 78.23.69.42 port 57700 ssh2 |
2019-11-30 22:07:20 |
| 116.55.227.209 | attackspambots | Unauthorised access (Nov 30) SRC=116.55.227.209 LEN=40 TTL=242 ID=57515 TCP DPT=1433 WINDOW=1024 SYN |
2019-11-30 21:59:29 |