City: unknown
Region: unknown
Country: Sweden
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.106.48.144
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55719
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.106.48.144. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 08:30:12 CST 2025
;; MSG SIZE rcvd: 107Host 144.48.106.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 144.48.106.138.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.227.254.103 | attackbotsspam | Port scan on 6 port(s): 3514 3523 3670 3756 3866 3905 |
2019-06-22 21:49:42 |
| 85.237.44.125 | attackspam | proto=tcp . spt=58778 . dpt=25 . (listed on Blocklist de Jun 21) (180) |
2019-06-22 21:29:33 |
| 199.249.230.112 | attackspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.249.230.112 user=root Failed password for root from 199.249.230.112 port 23803 ssh2 Failed password for root from 199.249.230.112 port 23803 ssh2 Failed password for root from 199.249.230.112 port 23803 ssh2 Failed password for root from 199.249.230.112 port 23803 ssh2 |
2019-06-22 21:24:52 |
| 106.12.36.98 | attack | 2019-06-22T04:14:04.299763abusebot-4.cloudsearch.cf sshd\[1462\]: Invalid user upload from 106.12.36.98 port 57150 |
2019-06-22 22:22:34 |
| 72.28.160.74 | attackbots | Jun 20 16:03:00 localhost kernel: [12305173.769272] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=72.28.160.74 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=28268 PROTO=TCP SPT=49732 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 20 16:03:00 localhost kernel: [12305173.769294] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=72.28.160.74 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=28268 PROTO=TCP SPT=49732 DPT=445 SEQ=976382692 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 22 00:16:41 localhost kernel: [12421194.964129] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=72.28.160.74 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=52288 PROTO=TCP SPT=52219 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 22 00:16:41 localhost kernel: [12421194.964157] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=72.28.160.74 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x2 |
2019-06-22 21:23:02 |
| 62.147.254.185 | attackspambots | He got into my spotify and gmail account i have no idea how. |
2019-06-22 21:35:27 |
| 170.0.125.2 | attackspam | proto=tcp . spt=47004 . dpt=25 . (listed on 170.0.125.0/24 Dark List de Jun 22 03:55) (165) |
2019-06-22 22:14:20 |
| 42.51.39.56 | attack | Blocked user enumeration attempt |
2019-06-22 21:35:55 |
| 162.241.141.143 | attack | *Port Scan* detected from 162.241.141.143 (US/United States/162-241-141-143.unifiedlayer.com). 4 hits in the last 231 seconds |
2019-06-22 21:40:15 |
| 203.156.216.202 | attackbots | Lines containing failures of 203.156.216.202 Jun 21 16:26:36 mail03 sshd[12579]: Bad protocol version identification '' from 203.156.216.202 port 36348 Jun 21 16:26:41 mail03 sshd[12580]: Invalid user support from 203.156.216.202 port 36708 Jun 21 16:26:42 mail03 sshd[12580]: Connection closed by invalid user support 203.156.216.202 port 36708 [preauth] Jun 21 16:31:37 mail03 sshd[12613]: Invalid user pi from 203.156.216.202 port 45467 Jun 21 16:31:37 mail03 sshd[12613]: Connection closed by invalid user pi 203.156.216.202 port 45467 [preauth] Jun 21 16:31:43 mail03 sshd[12617]: Connection closed by authenticating user r.r 203.156.216.202 port 43423 [preauth] Jun 21 16:31:57 mail03 sshd[12619]: Connection closed by authenticating user r.r 203.156.216.202 port 47135 [preauth] Jun 21 16:32:12 mail03 sshd[12621]: Connection closed by authenticating user r.r 203.156.216.202 port 56082 [preauth] Jun 21 16:32:22 mail03 sshd[12624]: Connection closed by authenticating user r.r ........ ------------------------------ |
2019-06-22 21:21:46 |
| 144.217.164.104 | attackbotsspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.164.104 user=root Failed password for root from 144.217.164.104 port 60290 ssh2 Failed password for root from 144.217.164.104 port 60290 ssh2 Failed password for root from 144.217.164.104 port 60290 ssh2 Failed password for root from 144.217.164.104 port 60290 ssh2 |
2019-06-22 22:11:21 |
| 85.105.22.199 | attackbots | 19/6/22@00:15:00: FAIL: Alarm-Intrusion address from=85.105.22.199 ... |
2019-06-22 21:53:55 |
| 68.183.84.15 | attackbotsspam | Jun 22 06:15:32 ArkNodeAT sshd\[781\]: Invalid user developer from 68.183.84.15 Jun 22 06:15:32 ArkNodeAT sshd\[781\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.84.15 Jun 22 06:15:34 ArkNodeAT sshd\[781\]: Failed password for invalid user developer from 68.183.84.15 port 36200 ssh2 |
2019-06-22 21:46:13 |
| 109.80.207.223 | attack | TCP port 23 (Telnet) attempt blocked by firewall. [2019-06-22 06:13:32] |
2019-06-22 22:11:53 |
| 123.206.217.59 | attackbots | Jun 22 13:08:05 h2177944 sshd\[11956\]: Invalid user mo from 123.206.217.59 port 40958 Jun 22 13:08:05 h2177944 sshd\[11956\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.217.59 Jun 22 13:08:07 h2177944 sshd\[11956\]: Failed password for invalid user mo from 123.206.217.59 port 40958 ssh2 Jun 22 13:12:36 h2177944 sshd\[12088\]: Invalid user labuser from 123.206.217.59 port 60258 Jun 22 13:12:36 h2177944 sshd\[12088\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.217.59 ... |
2019-06-22 22:16:40 |