City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.98.44.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14289
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.98.44.211. IN A
;; AUTHORITY SECTION:
. 297 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023010900 1800 900 604800 86400
;; Query time: 138 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 09 22:10:43 CST 2023
;; MSG SIZE rcvd: 106Host 211.44.98.138.in-addr.arpa not found: 2(SERVFAIL)
server can't find 138.98.44.211.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.246.250.202 | attackbotsspam | Aug 6 08:59:11 cosmoit sshd[15980]: Failed password for root from 106.246.250.202 port 13220 ssh2 |
2020-08-06 16:16:35 |
| 194.26.25.20 | attackspam | Aug 6 10:49:36 mertcangokgoz-v4-main kernel: [317116.292633] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:5a:6b:04:d2:74:7f:6e:37:e3:08:00 SRC=194.26.25.20 DST=94.130.96.165 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=9162 PROTO=TCP SPT=55785 DPT=8920 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-08-06 15:52:25 |
| 31.129.173.162 | attackbots | SSH Brute Force |
2020-08-06 16:02:48 |
| 180.76.52.161 | attackspam | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-08-06 16:32:56 |
| 106.75.12.247 | attackspam | Lines containing failures of 106.75.12.247 Aug 5 23:01:15 icinga sshd[26629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.12.247 user=r.r Aug 5 23:01:17 icinga sshd[26629]: Failed password for r.r from 106.75.12.247 port 57766 ssh2 Aug 5 23:01:18 icinga sshd[26629]: Received disconnect from 106.75.12.247 port 57766:11: Bye Bye [preauth] Aug 5 23:01:18 icinga sshd[26629]: Disconnected from authenticating user r.r 106.75.12.247 port 57766 [preauth] Aug 5 23:11:49 icinga sshd[29549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.12.247 user=r.r Aug 5 23:11:51 icinga sshd[29549]: Failed password for r.r from 106.75.12.247 port 41100 ssh2 Aug 5 23:11:51 icinga sshd[29549]: Received disconnect from 106.75.12.247 port 41100:11: Bye Bye [preauth] Aug 5 23:11:51 icinga sshd[29549]: Disconnected from authenticating user r.r 106.75.12.247 port 41100 [preauth] Aug 5 23:15:5........ ------------------------------ |
2020-08-06 15:56:31 |
| 106.12.122.138 | attackspambots | Aug 6 07:39:45 sshgateway sshd\[24007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.122.138 user=root Aug 6 07:39:47 sshgateway sshd\[24007\]: Failed password for root from 106.12.122.138 port 36562 ssh2 Aug 6 07:44:23 sshgateway sshd\[24026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.122.138 user=root |
2020-08-06 16:17:54 |
| 185.243.180.13 | attack | From rsistema-contato=alkosa.com.br@megamaster.live Thu Aug 06 02:22:36 2020 Received: from mzm0y2flzgu1.megamaster.live ([185.243.180.13]:43215) |
2020-08-06 16:08:15 |
| 112.85.42.185 | attackbotsspam | Aug 6 08:21:15 ift sshd\[21464\]: Failed password for root from 112.85.42.185 port 55377 ssh2Aug 6 08:21:16 ift sshd\[21464\]: Failed password for root from 112.85.42.185 port 55377 ssh2Aug 6 08:21:19 ift sshd\[21464\]: Failed password for root from 112.85.42.185 port 55377 ssh2Aug 6 08:22:07 ift sshd\[21510\]: Failed password for root from 112.85.42.185 port 59010 ssh2Aug 6 08:22:58 ift sshd\[21587\]: Failed password for root from 112.85.42.185 port 41333 ssh2 ... |
2020-08-06 15:51:41 |
| 186.16.161.112 | attack | Aug 6 07:04:57 h2646465 sshd[31415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.16.161.112 user=root Aug 6 07:04:59 h2646465 sshd[31415]: Failed password for root from 186.16.161.112 port 41796 ssh2 Aug 6 07:16:41 h2646465 sshd[854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.16.161.112 user=root Aug 6 07:16:43 h2646465 sshd[854]: Failed password for root from 186.16.161.112 port 35220 ssh2 Aug 6 07:21:37 h2646465 sshd[1635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.16.161.112 user=root Aug 6 07:21:39 h2646465 sshd[1635]: Failed password for root from 186.16.161.112 port 39566 ssh2 Aug 6 07:26:33 h2646465 sshd[2271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.16.161.112 user=root Aug 6 07:26:35 h2646465 sshd[2271]: Failed password for root from 186.16.161.112 port 43920 ssh2 Aug 6 07:31:24 h2646465 ssh |
2020-08-06 16:25:44 |
| 180.76.249.74 | attack | IP blocked |
2020-08-06 16:09:02 |
| 94.74.188.45 | attack | (smtpauth) Failed SMTP AUTH login from 94.74.188.45 (IR/Iran/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-08-06 09:52:18 plain authenticator failed for ([94.74.188.45]) [94.74.188.45]: 535 Incorrect authentication data (set_id=peter@fmc-co.com) |
2020-08-06 16:29:21 |
| 183.82.97.36 | attack | Port probing on unauthorized port 445 |
2020-08-06 16:10:37 |
| 49.235.64.227 | attackspam | Aug 6 10:33:53 gw1 sshd[14960]: Failed password for root from 49.235.64.227 port 34406 ssh2 ... |
2020-08-06 16:10:15 |
| 58.186.50.12 | attackspambots | Unauthorised access (Aug 6) SRC=58.186.50.12 LEN=52 TOS=0x10 PREC=0x40 TTL=111 ID=22519 DF TCP DPT=445 WINDOW=8192 SYN |
2020-08-06 16:02:01 |
| 45.225.92.93 | attack | Aug 6 06:40:06 IngegnereFirenze sshd[2140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.225.92.93 user=root ... |
2020-08-06 16:09:32 |