City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.50.78.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8738
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.50.78.147. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 08:24:29 CST 2025
;; MSG SIZE rcvd: 106Host 147.78.50.138.in-addr.arpa not found: 2(SERVFAIL)
server can't find 138.50.78.147.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.134.179.57 | attack | Jan 2 07:47:23 debian-2gb-nbg1-2 kernel: \[206973.313557\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.134.179.57 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=12675 PROTO=TCP SPT=45581 DPT=9312 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-01-02 15:32:50 |
| 187.63.73.56 | attackspam | $f2bV_matches |
2020-01-02 15:20:02 |
| 222.186.169.194 | attack | Jan 2 08:27:05 root sshd[30694]: Failed password for root from 222.186.169.194 port 16876 ssh2 Jan 2 08:27:08 root sshd[30694]: Failed password for root from 222.186.169.194 port 16876 ssh2 Jan 2 08:27:12 root sshd[30694]: Failed password for root from 222.186.169.194 port 16876 ssh2 Jan 2 08:27:15 root sshd[30694]: Failed password for root from 222.186.169.194 port 16876 ssh2 ... |
2020-01-02 15:37:42 |
| 178.33.185.70 | attack | Jan 2 06:29:51 IngegnereFirenze sshd[21884]: Failed password for invalid user wuertele from 178.33.185.70 port 22468 ssh2 ... |
2020-01-02 15:28:52 |
| 190.5.242.114 | attack | Jan 2 07:13:37 km20725 sshd[15167]: Invalid user joe.kajmowicz from 190.5.242.114 Jan 2 07:13:37 km20725 sshd[15167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.5.242.114 Jan 2 07:13:38 km20725 sshd[15167]: Failed password for invalid user joe.kajmowicz from 190.5.242.114 port 49965 ssh2 Jan 2 07:13:39 km20725 sshd[15167]: Received disconnect from 190.5.242.114: 11: Bye Bye [preauth] Jan 2 07:25:55 km20725 sshd[15704]: Invalid user kajmowicz from 190.5.242.114 Jan 2 07:25:55 km20725 sshd[15704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.5.242.114 Jan 2 07:25:57 km20725 sshd[15704]: Failed password for invalid user kajmowicz from 190.5.242.114 port 59836 ssh2 Jan 2 07:25:57 km20725 sshd[15704]: Received disconnect from 190.5.242.114: 11: Bye Bye [preauth] Jan 2 07:29:19 km20725 sshd[15892]: Invalid user password from 190.5.242.114 Jan 2 07:29:19 km20725 sshd[15892........ ------------------------------- |
2020-01-02 15:53:18 |
| 103.100.169.251 | attack | IP: 103.100.169.251
Ports affected
Simple Mail Transfer (25)
Found in DNSBL('s)
ASN Details
AS133320 Alpha Infolab Private limited
India (IN)
CIDR 103.100.168.0/22
Log Date: 2/01/2020 6:57:15 AM UTC |
2020-01-02 15:18:12 |
| 138.197.5.191 | attackspam | Jan 2 09:40:02 server sshd\[7674\]: Invalid user wwwrun from 138.197.5.191 Jan 2 09:40:02 server sshd\[7674\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.5.191 Jan 2 09:40:05 server sshd\[7674\]: Failed password for invalid user wwwrun from 138.197.5.191 port 34840 ssh2 Jan 2 09:46:10 server sshd\[9212\]: Invalid user marcus from 138.197.5.191 Jan 2 09:46:10 server sshd\[9212\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.5.191 ... |
2020-01-02 15:49:30 |
| 45.123.110.2 | attackspambots | $f2bV_matches |
2020-01-02 15:34:59 |
| 221.195.1.201 | attack | Jan 2 04:28:01 firewall sshd[7443]: Invalid user delneste from 221.195.1.201 Jan 2 04:28:03 firewall sshd[7443]: Failed password for invalid user delneste from 221.195.1.201 port 49376 ssh2 Jan 2 04:31:19 firewall sshd[7512]: Invalid user server from 221.195.1.201 ... |
2020-01-02 15:52:05 |
| 54.37.159.50 | attackbots | no |
2020-01-02 15:44:07 |
| 140.143.142.190 | attack | Jan 2 07:29:53 sxvn sshd[3079284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.142.190 |
2020-01-02 15:24:34 |
| 106.13.224.130 | attackspambots | $f2bV_matches |
2020-01-02 15:51:43 |
| 37.49.230.102 | attackbotsspam | 37.49.230.102 was recorded 5 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 6, 72 |
2020-01-02 15:48:00 |
| 49.255.20.158 | attackspambots | Jan 2 09:07:42 www sshd\[12648\]: Invalid user bbbbbbbb from 49.255.20.158Jan 2 09:07:43 www sshd\[12648\]: Failed password for invalid user bbbbbbbb from 49.255.20.158 port 2500 ssh2Jan 2 09:11:42 www sshd\[12706\]: Invalid user 00000 from 49.255.20.158Jan 2 09:11:44 www sshd\[12706\]: Failed password for invalid user 00000 from 49.255.20.158 port 2872 ssh2 ... |
2020-01-02 15:14:53 |
| 112.119.242.121 | attack | Port Scan |
2020-01-02 15:31:20 |