City: Dongen
Region: Noord Brabant
Country: The Netherlands
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.49.21.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9523
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;145.49.21.152. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021300 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 01:16:26 CST 2025
;; MSG SIZE rcvd: 106Host 152.21.49.145.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 152.21.49.145.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 67.191.194.94 | attackspambots | $f2bV_matches |
2019-09-06 14:16:47 |
| 49.88.112.90 | attackspam | 2019-09-06T02:04:29.183618Z \[cowrie.ssh.factory.CowrieSSHFactory\] New connection: 49.88.112.90:63616 \(107.175.91.48:22\) \[session: 0bc425418dfc\] 2019-09-06T06:30:42.269003Z \[cowrie.ssh.factory.CowrieSSHFactory\] New connection: 49.88.112.90:38497 \(107.175.91.48:22\) \[session: b7f0a003fff4\] ... |
2019-09-06 14:39:37 |
| 138.68.1.18 | attack | Sep 6 06:29:21 MK-Soft-VM4 sshd\[30132\]: Invalid user qwe123 from 138.68.1.18 port 42442 Sep 6 06:29:21 MK-Soft-VM4 sshd\[30132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.1.18 Sep 6 06:29:24 MK-Soft-VM4 sshd\[30132\]: Failed password for invalid user qwe123 from 138.68.1.18 port 42442 ssh2 ... |
2019-09-06 14:45:10 |
| 152.136.33.30 | attack | Sep 5 20:04:24 php1 sshd\[24304\]: Invalid user oracle from 152.136.33.30 Sep 5 20:04:24 php1 sshd\[24304\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.33.30 Sep 5 20:04:26 php1 sshd\[24304\]: Failed password for invalid user oracle from 152.136.33.30 port 48278 ssh2 Sep 5 20:09:51 php1 sshd\[25000\]: Invalid user test from 152.136.33.30 Sep 5 20:09:51 php1 sshd\[25000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.33.30 |
2019-09-06 14:20:16 |
| 163.172.13.168 | attack | F2B jail: sshd. Time: 2019-09-06 08:00:54, Reported by: VKReport |
2019-09-06 14:16:25 |
| 104.131.14.14 | attackspambots | SSH Brute Force, server-1 sshd[6618]: Failed password for invalid user alex from 104.131.14.14 port 57300 ssh2 |
2019-09-06 14:37:31 |
| 168.243.232.149 | attackspambots | SSH Brute Force, server-1 sshd[6704]: Failed password for invalid user test from 168.243.232.149 port 51936 ssh2 |
2019-09-06 14:32:12 |
| 167.71.237.250 | attack | Sep 6 06:47:20 pkdns2 sshd\[21843\]: Invalid user testing from 167.71.237.250Sep 6 06:47:23 pkdns2 sshd\[21843\]: Failed password for invalid user testing from 167.71.237.250 port 54506 ssh2Sep 6 06:51:55 pkdns2 sshd\[22013\]: Invalid user diradmin from 167.71.237.250Sep 6 06:51:56 pkdns2 sshd\[22013\]: Failed password for invalid user diradmin from 167.71.237.250 port 42250 ssh2Sep 6 06:56:32 pkdns2 sshd\[22213\]: Invalid user webadmin from 167.71.237.250Sep 6 06:56:34 pkdns2 sshd\[22213\]: Failed password for invalid user webadmin from 167.71.237.250 port 58224 ssh2 ... |
2019-09-06 14:22:14 |
| 103.207.38.152 | attackbots | Sep 6 07:17:09 andromeda postfix/smtpd\[48758\]: warning: unknown\[103.207.38.152\]: SASL LOGIN authentication failed: authentication failure Sep 6 07:17:10 andromeda postfix/smtpd\[48754\]: warning: unknown\[103.207.38.152\]: SASL LOGIN authentication failed: authentication failure Sep 6 07:17:11 andromeda postfix/smtpd\[48711\]: warning: unknown\[103.207.38.152\]: SASL LOGIN authentication failed: authentication failure Sep 6 07:17:12 andromeda postfix/smtpd\[48758\]: warning: unknown\[103.207.38.152\]: SASL LOGIN authentication failed: authentication failure Sep 6 07:17:13 andromeda postfix/smtpd\[48711\]: warning: unknown\[103.207.38.152\]: SASL LOGIN authentication failed: authentication failure |
2019-09-06 14:17:17 |
| 153.36.242.143 | attackspambots | Sep 5 20:22:04 eddieflores sshd\[6815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.242.143 user=root Sep 5 20:22:06 eddieflores sshd\[6815\]: Failed password for root from 153.36.242.143 port 31409 ssh2 Sep 5 20:22:13 eddieflores sshd\[6833\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.242.143 user=root Sep 5 20:22:15 eddieflores sshd\[6833\]: Failed password for root from 153.36.242.143 port 17551 ssh2 Sep 5 20:22:23 eddieflores sshd\[6843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.242.143 user=root |
2019-09-06 14:25:02 |
| 209.97.161.46 | attackbotsspam | Jul 29 01:16:51 microserver sshd[5073]: Invalid user iamcool from 209.97.161.46 port 46138 Jul 29 01:16:51 microserver sshd[5073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.161.46 Jul 29 01:16:53 microserver sshd[5073]: Failed password for invalid user iamcool from 209.97.161.46 port 46138 ssh2 Jul 29 01:22:01 microserver sshd[6029]: Invalid user gunawan from 209.97.161.46 port 41132 Jul 29 01:22:01 microserver sshd[6029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.161.46 Jul 29 01:37:04 microserver sshd[8277]: Invalid user Qwer@1234 from 209.97.161.46 port 54338 Jul 29 01:37:04 microserver sshd[8277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.161.46 Jul 29 01:37:06 microserver sshd[8277]: Failed password for invalid user Qwer@1234 from 209.97.161.46 port 54338 ssh2 Jul 29 01:42:11 microserver sshd[9152]: Invalid user records from 209.97.161.46 port 4932 |
2019-09-06 14:22:39 |
| 222.186.42.94 | attackbots | Sep 6 02:08:53 TORMINT sshd\[32259\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.94 user=root Sep 6 02:08:56 TORMINT sshd\[32259\]: Failed password for root from 222.186.42.94 port 45738 ssh2 Sep 6 02:09:03 TORMINT sshd\[32268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.94 user=root ... |
2019-09-06 14:27:18 |
| 106.75.210.147 | attackbots | Sep 6 06:30:12 hb sshd\[15050\]: Invalid user ts from 106.75.210.147 Sep 6 06:30:12 hb sshd\[15050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.210.147 Sep 6 06:30:14 hb sshd\[15050\]: Failed password for invalid user ts from 106.75.210.147 port 42154 ssh2 Sep 6 06:33:50 hb sshd\[15345\]: Invalid user dev from 106.75.210.147 Sep 6 06:33:50 hb sshd\[15345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.210.147 |
2019-09-06 14:36:14 |
| 138.186.1.26 | attackspam | SSH Brute Force, server-1 sshd[6694]: Failed password for invalid user tempftp from 138.186.1.26 port 34447 ssh2 |
2019-09-06 14:43:02 |
| 122.161.192.206 | attackbots | [Aegis] @ 2019-09-06 07:23:45 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack |
2019-09-06 14:34:04 |