City: unknown
Region: unknown
Country: Korea (the Republic of)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.59.248.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22255
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.59.248.48. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400
;; Query time: 49 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 22 21:23:09 CST 2025
;; MSG SIZE rcvd: 105Host 48.248.59.14.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 48.248.59.14.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 125.137.191.215 | attack | Jun 25 14:44:46 NPSTNNYC01T sshd[21801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.137.191.215 Jun 25 14:44:48 NPSTNNYC01T sshd[21801]: Failed password for invalid user rodney from 125.137.191.215 port 32806 ssh2 Jun 25 14:48:14 NPSTNNYC01T sshd[22119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.137.191.215 ... |
2020-06-26 03:42:42 |
| 144.172.79.5 | attackspam | fail2ban -- 144.172.79.5 ... |
2020-06-26 03:53:43 |
| 49.235.218.147 | attackspam | 2020-06-25T14:19:32.919765centos sshd[30430]: Invalid user paj from 49.235.218.147 port 51552 2020-06-25T14:19:34.280885centos sshd[30430]: Failed password for invalid user paj from 49.235.218.147 port 51552 ssh2 2020-06-25T14:21:26.757587centos sshd[30544]: Invalid user style from 49.235.218.147 port 41048 ... |
2020-06-26 03:40:12 |
| 175.118.126.99 | attackspambots | (sshd) Failed SSH login from 175.118.126.99 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 25 20:33:41 amsweb01 sshd[31446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.118.126.99 user=root Jun 25 20:33:44 amsweb01 sshd[31446]: Failed password for root from 175.118.126.99 port 33567 ssh2 Jun 25 20:38:29 amsweb01 sshd[32479]: User mysql from 175.118.126.99 not allowed because not listed in AllowUsers Jun 25 20:38:29 amsweb01 sshd[32479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.118.126.99 user=mysql Jun 25 20:38:31 amsweb01 sshd[32479]: Failed password for invalid user mysql from 175.118.126.99 port 45010 ssh2 |
2020-06-26 03:42:00 |
| 58.57.0.98 | attack | Port probing on unauthorized port 445 |
2020-06-26 04:06:58 |
| 222.186.180.8 | attackspambots | Jun 25 21:58:44 server sshd[8549]: Failed none for root from 222.186.180.8 port 8904 ssh2 Jun 25 21:58:47 server sshd[8549]: Failed password for root from 222.186.180.8 port 8904 ssh2 Jun 25 21:58:50 server sshd[8549]: Failed password for root from 222.186.180.8 port 8904 ssh2 |
2020-06-26 04:01:56 |
| 106.13.126.15 | attack | Jun 25 18:33:59 ns392434 sshd[13475]: Invalid user cdm from 106.13.126.15 port 60864 Jun 25 18:33:59 ns392434 sshd[13475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.126.15 Jun 25 18:33:59 ns392434 sshd[13475]: Invalid user cdm from 106.13.126.15 port 60864 Jun 25 18:34:00 ns392434 sshd[13475]: Failed password for invalid user cdm from 106.13.126.15 port 60864 ssh2 Jun 25 18:52:09 ns392434 sshd[14029]: Invalid user laurent from 106.13.126.15 port 50970 Jun 25 18:52:09 ns392434 sshd[14029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.126.15 Jun 25 18:52:09 ns392434 sshd[14029]: Invalid user laurent from 106.13.126.15 port 50970 Jun 25 18:52:11 ns392434 sshd[14029]: Failed password for invalid user laurent from 106.13.126.15 port 50970 ssh2 Jun 25 18:56:30 ns392434 sshd[14096]: Invalid user admin from 106.13.126.15 port 43266 |
2020-06-26 03:47:05 |
| 46.38.148.2 | attackspambots | 2020-06-25 19:45:09 auth_plain authenticator failed for (User) [46.38.148.2]: 535 Incorrect authentication data (set_id=sex@csmailer.org) 2020-06-25 19:45:32 auth_plain authenticator failed for (User) [46.38.148.2]: 535 Incorrect authentication data (set_id=ekb@csmailer.org) 2020-06-25 19:45:53 auth_plain authenticator failed for (User) [46.38.148.2]: 535 Incorrect authentication data (set_id=dev9@csmailer.org) 2020-06-25 19:46:14 auth_plain authenticator failed for (User) [46.38.148.2]: 535 Incorrect authentication data (set_id=essen@csmailer.org) 2020-06-25 19:46:38 auth_plain authenticator failed for (User) [46.38.148.2]: 535 Incorrect authentication data (set_id=b6@csmailer.org) ... |
2020-06-26 03:53:01 |
| 140.249.18.118 | attackbotsspam | $f2bV_matches |
2020-06-26 04:02:16 |
| 123.235.18.142 | attackspambots | 2020/6/24 14:05:53 Firewall[240]: DoS Attack - TCP SYN Flooding IN=erouter0 OUT= MAC=48:1d:70:de:3a:51:00:17:10:9d:38:90:08:00 SRC=123.235.18.142 DST= LEN=44 TOS=00 PREC=0x00 TTL=101 ID=256 PROTO=TCP SPT=45014 DPT=14336 SEQ=685572096 A FW.WANATTACK DROP, 10 Attempts. 2020/6/24 14:58:01 Firewall Blocked |
2020-06-26 03:47:34 |
| 47.56.139.102 | attackbots | bruteforce detected |
2020-06-26 03:48:45 |
| 206.189.124.254 | attackspam | 2020-06-25T18:43:51.792620shield sshd\[8697\]: Invalid user ftpdata from 206.189.124.254 port 53936 2020-06-25T18:43:51.796254shield sshd\[8697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.124.254 2020-06-25T18:43:53.753870shield sshd\[8697\]: Failed password for invalid user ftpdata from 206.189.124.254 port 53936 ssh2 2020-06-25T18:47:17.127894shield sshd\[8970\]: Invalid user staff from 206.189.124.254 port 54218 2020-06-25T18:47:17.132040shield sshd\[8970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.124.254 |
2020-06-26 03:44:58 |
| 167.71.88.180 | attackbotsspam | (sshd) Failed SSH login from 167.71.88.180 (US/United States/-): 12 in the last 3600 secs |
2020-06-26 03:59:23 |
| 191.95.150.196 | attack | [25/Jun/2020 x@x [25/Jun/2020 x@x [25/Jun/2020 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=191.95.150.196 |
2020-06-26 04:08:13 |
| 193.27.229.69 | attackspambots | Brute forcing RDP port 3389 |
2020-06-26 03:51:27 |