City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.48.196.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48050
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;107.48.196.248. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012901 1800 900 604800 86400
;; Query time: 281 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 04:51:58 CST 2025
;; MSG SIZE rcvd: 107Host 248.196.48.107.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 248.196.48.107.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.236.129.32 | attack | Oct 18 04:48:47 vz239 sshd[6723]: reveeclipse mapping checking getaddrinfo for technicpro.cl [45.236.129.32] failed - POSSIBLE BREAK-IN ATTEMPT! Oct 18 04:48:47 vz239 sshd[6714]: reveeclipse mapping checking getaddrinfo for technicpro.cl [45.236.129.32] failed - POSSIBLE BREAK-IN ATTEMPT! Oct 18 04:48:47 vz239 sshd[6723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.236.129.32 user=r.r Oct 18 04:48:47 vz239 sshd[6714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.236.129.32 user=r.r Oct 18 04:48:48 vz239 sshd[6725]: reveeclipse mapping checking getaddrinfo for technicpro.cl [45.236.129.32] failed - POSSIBLE BREAK-IN ATTEMPT! Oct 18 04:48:48 vz239 sshd[6715]: reveeclipse mapping checking getaddrinfo for technicpro.cl [45.236.129.32] failed - POSSIBLE BREAK-IN ATTEMPT! Oct 18 04:48:48 vz239 sshd[6722]: reveeclipse mapping checking getaddrinfo for technicpro.cl [45.236.129.32] fai........ ------------------------------- |
2019-10-18 12:57:15 |
| 218.92.0.208 | attack | Oct 18 07:09:17 eventyay sshd[27963]: Failed password for root from 218.92.0.208 port 52234 ssh2 Oct 18 07:09:55 eventyay sshd[27977]: Failed password for root from 218.92.0.208 port 49663 ssh2 ... |
2019-10-18 13:12:31 |
| 142.93.109.129 | attackspambots | Oct 18 10:51:27 lcl-usvr-02 sshd[4027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.109.129 user=root Oct 18 10:51:29 lcl-usvr-02 sshd[4027]: Failed password for root from 142.93.109.129 port 49616 ssh2 Oct 18 10:54:45 lcl-usvr-02 sshd[4799]: Invalid user emc from 142.93.109.129 port 60928 Oct 18 10:54:45 lcl-usvr-02 sshd[4799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.109.129 Oct 18 10:54:45 lcl-usvr-02 sshd[4799]: Invalid user emc from 142.93.109.129 port 60928 Oct 18 10:54:47 lcl-usvr-02 sshd[4799]: Failed password for invalid user emc from 142.93.109.129 port 60928 ssh2 ... |
2019-10-18 13:45:01 |
| 163.172.93.13 | attack | www.fahrschule-mihm.de 163.172.93.13 \[18/Oct/2019:05:54:55 +0200\] "POST /wp-login.php HTTP/1.1" 200 5756 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.fahrschule-mihm.de 163.172.93.13 \[18/Oct/2019:05:54:55 +0200\] "POST /wp-login.php HTTP/1.1" 200 5656 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-18 13:41:27 |
| 192.241.175.250 | attack | Oct 17 19:39:03 eddieflores sshd\[32244\]: Invalid user wpvideo from 192.241.175.250 Oct 17 19:39:03 eddieflores sshd\[32244\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.175.250 Oct 17 19:39:05 eddieflores sshd\[32244\]: Failed password for invalid user wpvideo from 192.241.175.250 port 58176 ssh2 Oct 17 19:45:06 eddieflores sshd\[402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.175.250 user=root Oct 17 19:45:09 eddieflores sshd\[402\]: Failed password for root from 192.241.175.250 port 49648 ssh2 |
2019-10-18 13:46:04 |
| 27.111.43.195 | attack | xmlrpc attack |
2019-10-18 13:13:11 |
| 123.25.238.108 | attackspambots | SSH Bruteforce |
2019-10-18 13:09:40 |
| 101.96.113.50 | attack | Oct 18 08:03:12 server sshd\[31364\]: User root from 101.96.113.50 not allowed because listed in DenyUsers Oct 18 08:03:12 server sshd\[31364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.96.113.50 user=root Oct 18 08:03:14 server sshd\[31364\]: Failed password for invalid user root from 101.96.113.50 port 35364 ssh2 Oct 18 08:08:02 server sshd\[23600\]: User root from 101.96.113.50 not allowed because listed in DenyUsers Oct 18 08:08:02 server sshd\[23600\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.96.113.50 user=root |
2019-10-18 13:23:48 |
| 92.119.160.80 | attackbotsspam | Portscan or hack attempt detected by psad/fwsnort |
2019-10-18 13:29:55 |
| 188.166.172.189 | attackbots | Unauthorized SSH login attempts |
2019-10-18 13:24:50 |
| 47.74.245.7 | attack | Oct 17 18:24:15 friendsofhawaii sshd\[30732\]: Invalid user take from 47.74.245.7 Oct 17 18:24:15 friendsofhawaii sshd\[30732\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.74.245.7 Oct 17 18:24:17 friendsofhawaii sshd\[30732\]: Failed password for invalid user take from 47.74.245.7 port 42096 ssh2 Oct 17 18:28:26 friendsofhawaii sshd\[31087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.74.245.7 user=root Oct 17 18:28:29 friendsofhawaii sshd\[31087\]: Failed password for root from 47.74.245.7 port 53842 ssh2 |
2019-10-18 13:43:44 |
| 51.38.49.140 | attack | Oct 18 06:40:54 bouncer sshd\[7336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.49.140 user=root Oct 18 06:40:57 bouncer sshd\[7336\]: Failed password for root from 51.38.49.140 port 35308 ssh2 Oct 18 07:00:51 bouncer sshd\[7415\]: Invalid user ftp from 51.38.49.140 port 48542 ... |
2019-10-18 13:23:29 |
| 41.204.161.161 | attack | Oct 17 18:46:34 hanapaa sshd\[6878\]: Invalid user cfg from 41.204.161.161 Oct 17 18:46:34 hanapaa sshd\[6878\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.204.161.161 Oct 17 18:46:36 hanapaa sshd\[6878\]: Failed password for invalid user cfg from 41.204.161.161 port 45296 ssh2 Oct 17 18:51:02 hanapaa sshd\[7223\]: Invalid user attack from 41.204.161.161 Oct 17 18:51:03 hanapaa sshd\[7223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.204.161.161 |
2019-10-18 13:03:24 |
| 175.143.127.73 | attackspam | Oct 18 07:06:22 host sshd[51905]: Invalid user sinusbot from 175.143.127.73 port 41470 Oct 18 07:06:22 host sshd[51905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.143.127.73 Oct 18 07:06:22 host sshd[51905]: Invalid user sinusbot from 175.143.127.73 port 41470 Oct 18 07:06:24 host sshd[51905]: Failed password for invalid user sinusbot from 175.143.127.73 port 41470 ssh2 ... |
2019-10-18 13:14:09 |
| 14.142.94.222 | attackbotsspam | Oct 17 18:57:33 auw2 sshd\[30021\]: Invalid user hcaeb from 14.142.94.222 Oct 17 18:57:33 auw2 sshd\[30021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.142.94.222 Oct 17 18:57:35 auw2 sshd\[30021\]: Failed password for invalid user hcaeb from 14.142.94.222 port 40064 ssh2 Oct 17 19:01:51 auw2 sshd\[30398\]: Invalid user snowboar from 14.142.94.222 Oct 17 19:01:51 auw2 sshd\[30398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.142.94.222 |
2019-10-18 13:16:18 |