City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.55.52.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3547
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;114.55.52.49. IN A
;; AUTHORITY SECTION:
. 484 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020601 1800 900 604800 86400
;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 12:29:09 CST 2022
;; MSG SIZE rcvd: 105Host 49.52.55.114.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 49.52.55.114.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.91.79.232 | attack | May 4 14:43:31 meumeu sshd[28852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.79.232 May 4 14:43:33 meumeu sshd[28852]: Failed password for invalid user smitty from 51.91.79.232 port 36180 ssh2 May 4 14:47:40 meumeu sshd[29475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.79.232 ... |
2020-05-04 21:54:14 |
| 91.121.164.188 | attack | May 4 15:28:51 markkoudstaal sshd[14025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.164.188 May 4 15:28:53 markkoudstaal sshd[14025]: Failed password for invalid user applprod from 91.121.164.188 port 47168 ssh2 May 4 15:32:36 markkoudstaal sshd[14680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.164.188 |
2020-05-04 21:32:52 |
| 206.189.173.137 | attackbots | May 4 14:14:49 debian-2gb-nbg1-2 kernel: \[10853388.662747\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=206.189.173.137 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=35819 PROTO=TCP SPT=41701 DPT=5050 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-04 21:39:37 |
| 122.51.25.250 | attackbots | Repeated brute force against a port |
2020-05-04 21:36:49 |
| 188.254.0.112 | attackbots | May 4 15:33:04 markkoudstaal sshd[14765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.112 May 4 15:33:07 markkoudstaal sshd[14765]: Failed password for invalid user nagios from 188.254.0.112 port 37246 ssh2 May 4 15:38:25 markkoudstaal sshd[15856]: Failed password for root from 188.254.0.112 port 44470 ssh2 |
2020-05-04 21:52:26 |
| 217.182.73.36 | attackspam | Automatic report - Banned IP Access |
2020-05-04 22:01:10 |
| 222.186.30.76 | attackbots | May 4 15:30:49 plex sshd[10929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76 user=root May 4 15:30:51 plex sshd[10929]: Failed password for root from 222.186.30.76 port 63570 ssh2 |
2020-05-04 21:36:22 |
| 1.1.129.160 | attackspambots | SMB Server BruteForce Attack |
2020-05-04 21:34:25 |
| 103.115.255.102 | attackspam | proto=tcp . spt=40185 . dpt=25 . Found on Dark List de (221) |
2020-05-04 21:43:29 |
| 201.57.40.70 | attackbotsspam | May 4 14:10:41 ns382633 sshd\[11319\]: Invalid user sql from 201.57.40.70 port 52436 May 4 14:10:41 ns382633 sshd\[11319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.57.40.70 May 4 14:10:42 ns382633 sshd\[11319\]: Failed password for invalid user sql from 201.57.40.70 port 52436 ssh2 May 4 14:14:22 ns382633 sshd\[11783\]: Invalid user soc from 201.57.40.70 port 42898 May 4 14:14:22 ns382633 sshd\[11783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.57.40.70 |
2020-05-04 22:05:12 |
| 106.12.97.46 | attackbotsspam | 2020-05-04T15:15:54.783824vps773228.ovh.net sshd[28955]: Failed password for invalid user backup from 106.12.97.46 port 43014 ssh2 2020-05-04T15:17:45.426641vps773228.ovh.net sshd[28989]: Invalid user dpi from 106.12.97.46 port 35736 2020-05-04T15:17:45.445350vps773228.ovh.net sshd[28989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.97.46 2020-05-04T15:17:45.426641vps773228.ovh.net sshd[28989]: Invalid user dpi from 106.12.97.46 port 35736 2020-05-04T15:17:47.138277vps773228.ovh.net sshd[28989]: Failed password for invalid user dpi from 106.12.97.46 port 35736 ssh2 ... |
2020-05-04 22:03:42 |
| 194.26.29.13 | attackspam | May 4 15:28:22 debian-2gb-nbg1-2 kernel: \[10857801.146418\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.29.13 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=22679 PROTO=TCP SPT=43332 DPT=13334 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-04 21:55:06 |
| 116.231.73.26 | attackbotsspam | SSH/22 MH Probe, BF, Hack - |
2020-05-04 22:00:41 |
| 41.41.66.176 | attackspam | 1588594499 - 05/04/2020 14:14:59 Host: 41.41.66.176/41.41.66.176 Port: 445 TCP Blocked |
2020-05-04 21:29:45 |
| 178.73.215.171 | attackbots | May 4 15:34:06 debian-2gb-nbg1-2 kernel: \[10858145.642835\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=178.73.215.171 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=TCP SPT=48437 DPT=4505 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-05-04 22:03:22 |