City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.168.46.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25658
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.168.46.204. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022802 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 13:21:52 CST 2025
;; MSG SIZE rcvd: 107Host 204.46.168.138.in-addr.arpa not found: 2(SERVFAIL)
server can't find 138.168.46.204.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.85.42.232 | attack | Sep 2 05:56:14 debian sshd\[2060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.232 user=root Sep 2 05:56:16 debian sshd\[2060\]: Failed password for root from 112.85.42.232 port 28037 ssh2 ... |
2019-09-02 13:07:51 |
| 222.154.238.59 | attackspam | Sep 2 06:53:01 www5 sshd\[17663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.154.238.59 user=root Sep 2 06:53:03 www5 sshd\[17663\]: Failed password for root from 222.154.238.59 port 43212 ssh2 Sep 2 06:57:59 www5 sshd\[18493\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.154.238.59 user=messagebus ... |
2019-09-02 13:05:03 |
| 206.189.134.83 | attack | DATE:2019-09-02 05:15:09, IP:206.189.134.83, PORT:ssh SSH brute force auth on honeypot server (honey-neo-dc-bis) |
2019-09-02 12:42:24 |
| 116.226.204.115 | attack | Unauthorised access (Sep 2) SRC=116.226.204.115 LEN=52 TTL=114 ID=517 DF TCP DPT=445 WINDOW=8192 SYN |
2019-09-02 12:58:06 |
| 94.23.62.187 | attackspambots | Sep 2 06:45:11 minden010 sshd[18478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.62.187 Sep 2 06:45:13 minden010 sshd[18478]: Failed password for invalid user plesk from 94.23.62.187 port 54330 ssh2 Sep 2 06:49:59 minden010 sshd[20489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.62.187 ... |
2019-09-02 13:19:52 |
| 51.83.41.120 | attackbotsspam | Sep 2 08:09:04 pkdns2 sshd\[34602\]: Invalid user build from 51.83.41.120Sep 2 08:09:06 pkdns2 sshd\[34602\]: Failed password for invalid user build from 51.83.41.120 port 39288 ssh2Sep 2 08:12:59 pkdns2 sshd\[34745\]: Invalid user elly from 51.83.41.120Sep 2 08:13:01 pkdns2 sshd\[34745\]: Failed password for invalid user elly from 51.83.41.120 port 55500 ssh2Sep 2 08:16:50 pkdns2 sshd\[34920\]: Invalid user z from 51.83.41.120Sep 2 08:16:52 pkdns2 sshd\[34920\]: Failed password for invalid user z from 51.83.41.120 port 43478 ssh2 ... |
2019-09-02 13:28:55 |
| 122.161.192.206 | attackspambots | Sep 2 06:51:07 markkoudstaal sshd[32238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.161.192.206 Sep 2 06:51:10 markkoudstaal sshd[32238]: Failed password for invalid user hadoopuser from 122.161.192.206 port 55904 ssh2 Sep 2 06:56:15 markkoudstaal sshd[370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.161.192.206 |
2019-09-02 12:57:40 |
| 187.145.210.184 | attackspam | /var/log/messages:Sep 2 03:20:04 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1567394404.020:83613): pid=20811 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=20812 suid=74 rport=54004 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.145.210.184 terminal=? res=success' /var/log/messages:Sep 2 03:20:04 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1567394404.021:83614): pid=20811 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=20812 suid=74 rport=54004 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.145.210.184 terminal=? res=success' /var/log/messages:Sep 2 03:20:17 sanyalnet-cloud-vps fail2ban.filter[1478]: INFO [sshd] F........ ------------------------------- |
2019-09-02 13:00:01 |
| 103.76.252.6 | attack | Sep 2 11:06:34 itv-usvr-01 sshd[14692]: Invalid user alpha from 103.76.252.6 Sep 2 11:06:34 itv-usvr-01 sshd[14692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.76.252.6 Sep 2 11:06:34 itv-usvr-01 sshd[14692]: Invalid user alpha from 103.76.252.6 Sep 2 11:06:37 itv-usvr-01 sshd[14692]: Failed password for invalid user alpha from 103.76.252.6 port 42017 ssh2 Sep 2 11:11:08 itv-usvr-01 sshd[14986]: Invalid user zabbix from 103.76.252.6 |
2019-09-02 13:24:41 |
| 185.94.111.1 | attackspam | 02.09.2019 04:46:03 Connection to port 11211 blocked by firewall |
2019-09-02 12:57:15 |
| 180.76.176.174 | attack | Sep 2 06:36:10 markkoudstaal sshd[30802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.176.174 Sep 2 06:36:12 markkoudstaal sshd[30802]: Failed password for invalid user sistemas from 180.76.176.174 port 50146 ssh2 Sep 2 06:41:47 markkoudstaal sshd[31386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.176.174 |
2019-09-02 12:44:05 |
| 104.144.45.176 | attackspam | (From edwardfleetwood1@gmail.com) Hello, Are you currently pleased with the number of sales your website is able to make? Is it getting enough visits from potential clients?I'm a freelance SEO specialist and I saw the potential of your website. I'm offering to help you boost the amount of traffic generated by your site so you can get more sales. If you'd like, I'll send you case studies from my previous work, so you can have an idea of what it's like before and after a website has been optimized for web searches. My services come at a cheap price that even small businesses can afford them. Please reply let me know if you're interested. Talk to you soon! Best regards, Edward Fleetwood |
2019-09-02 13:11:47 |
| 114.143.139.38 | attack | Sep 2 06:12:15 cp sshd[21401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.143.139.38 |
2019-09-02 13:23:00 |
| 156.218.86.127 | attackspam | ssh failed login |
2019-09-02 12:44:43 |
| 218.29.42.219 | attackspam | Automatic report - Banned IP Access |
2019-09-02 13:18:34 |