City: Cascavel
Region: Parana
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.99.248.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14148
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.99.248.2. IN A
;; AUTHORITY SECTION:
. 540 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400
;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:01:47 CST 2022
;; MSG SIZE rcvd: 105Host 2.248.99.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 2.248.99.138.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.38.129.74 | attack | Aug 14 21:34:41 server sshd[25229]: Failed password for root from 51.38.129.74 port 41350 ssh2 Aug 14 21:38:13 server sshd[29968]: Failed password for root from 51.38.129.74 port 42824 ssh2 Aug 14 21:41:47 server sshd[2246]: Failed password for root from 51.38.129.74 port 44297 ssh2 |
2020-08-15 04:26:38 |
| 178.62.108.111 | attack | firewall-block, port(s): 9711/tcp |
2020-08-15 04:41:14 |
| 124.93.222.211 | attackspambots | Aug 14 21:43:07 ajax sshd[14033]: Failed password for root from 124.93.222.211 port 46164 ssh2 |
2020-08-15 04:48:00 |
| 49.32.56.57 | attackbots | 20/8/14@08:17:54: FAIL: Alarm-Intrusion address from=49.32.56.57 ... |
2020-08-15 04:44:22 |
| 222.186.175.148 | attackbotsspam | Aug 14 22:32:34 PorscheCustomer sshd[28555]: Failed password for root from 222.186.175.148 port 20304 ssh2 Aug 14 22:32:48 PorscheCustomer sshd[28555]: error: maximum authentication attempts exceeded for root from 222.186.175.148 port 20304 ssh2 [preauth] Aug 14 22:32:54 PorscheCustomer sshd[28561]: Failed password for root from 222.186.175.148 port 31746 ssh2 ... |
2020-08-15 04:41:49 |
| 165.22.33.32 | attack | Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-08-15 04:45:10 |
| 218.92.0.175 | attack | [ssh] SSH attack |
2020-08-15 04:40:48 |
| 138.59.82.5 | attackbotsspam | 1597407499 - 08/14/2020 14:18:19 Host: 138.59.82.5/138.59.82.5 Port: 445 TCP Blocked |
2020-08-15 04:29:14 |
| 187.85.61.121 | attack | bruteforce detected |
2020-08-15 04:23:55 |
| 68.168.142.91 | attackspambots | Aug 9 22:27:51 host sshd[26889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.168.142.91.16clouds.com user=r.r Aug 9 22:27:53 host sshd[26889]: Failed password for r.r from 68.168.142.91 port 45312 ssh2 Aug 9 22:27:53 host sshd[26889]: Received disconnect from 68.168.142.91: 11: Bye Bye [preauth] Aug 9 22:33:51 host sshd[16383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.168.142.91.16clouds.com user=r.r Aug 9 22:33:53 host sshd[16383]: Failed password for r.r from 68.168.142.91 port 40190 ssh2 Aug 9 22:33:53 host sshd[16383]: Received disconnect from 68.168.142.91: 11: Bye Bye [preauth] Aug 9 22:35:52 host sshd[23296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.168.142.91.16clouds.com user=r.r Aug 9 22:35:54 host sshd[23296]: Failed password for r.r from 68.168.142.91 port 53716 ssh2 Aug 9 22:35:54 host sshd[23296]: Re........ ------------------------------- |
2020-08-15 04:32:05 |
| 185.191.126.241 | attack | SSH login attempts brute force. |
2020-08-15 04:36:35 |
| 153.101.167.242 | attack | Aug 14 19:42:37 server sshd[1904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.101.167.242 user=root Aug 14 19:42:39 server sshd[1904]: Failed password for invalid user root from 153.101.167.242 port 60876 ssh2 Aug 14 19:56:49 server sshd[2462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.101.167.242 user=root Aug 14 19:56:51 server sshd[2462]: Failed password for invalid user root from 153.101.167.242 port 55668 ssh2 |
2020-08-15 04:37:50 |
| 31.29.212.240 | attack | Unauthorised access (Aug 14) SRC=31.29.212.240 LEN=48 TTL=113 ID=1800 DF TCP DPT=445 WINDOW=65535 SYN |
2020-08-15 04:35:29 |
| 104.236.151.120 | attackspam | SSH invalid-user multiple login attempts |
2020-08-15 04:40:29 |
| 92.222.70.236 | attackspambots | nginx/honey/a4a6f |
2020-08-15 04:50:31 |