City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.104.245.234
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18039
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;148.104.245.234. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012501 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 26 05:22:13 CST 2025
;; MSG SIZE rcvd: 108
Host 234.245.104.148.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 234.245.104.148.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 46.38.145.249 | attackbotsspam | 2020-07-07T23:06:14.302314linuxbox-skyline auth[714539]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=erna rhost=46.38.145.249 ... |
2020-07-08 13:28:09 |
| 165.22.40.147 | attackbotsspam | Jul 8 05:55:50 debian-2gb-nbg1-2 kernel: \[16439150.720505\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=165.22.40.147 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=59197 PROTO=TCP SPT=47663 DPT=4646 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-08 13:34:50 |
| 201.140.213.91 | attackspam | Unauthorized connection attempt from IP address 201.140.213.91 on Port 445(SMB) |
2020-07-08 13:41:55 |
| 14.232.205.201 | attack | 20/7/7@23:45:32: FAIL: Alarm-Network address from=14.232.205.201 20/7/7@23:45:32: FAIL: Alarm-Network address from=14.232.205.201 ... |
2020-07-08 13:58:35 |
| 203.195.204.106 | attack | 20 attempts against mh-ssh on pluto |
2020-07-08 13:59:31 |
| 49.234.5.62 | attackspam | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-07-08T03:40:57Z and 2020-07-08T03:45:49Z |
2020-07-08 13:32:25 |
| 103.145.12.199 | attackspambots | [2020-07-08 01:29:24] NOTICE[1150][C-000006c9] chan_sip.c: Call from '' (103.145.12.199:64281) to extension '011442037699492' rejected because extension not found in context 'public'. [2020-07-08 01:29:24] SECURITY[1167] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-08T01:29:24.427-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442037699492",SessionID="0x7fcb4c099738",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.199/64281",ACLName="no_extension_match" [2020-07-08 01:29:29] NOTICE[1150][C-000006ca] chan_sip.c: Call from '' (103.145.12.199:61228) to extension '901146812400621' rejected because extension not found in context 'public'. [2020-07-08 01:29:29] SECURITY[1167] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-08T01:29:29.654-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="901146812400621",SessionID="0x7fcb4c16aa68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/U ... |
2020-07-08 13:38:25 |
| 113.141.166.197 | attackspam | ssh brute force |
2020-07-08 13:25:07 |
| 1.1.242.100 | attack | Unauthorized connection attempt from IP address 1.1.242.100 on Port 445(SMB) |
2020-07-08 13:35:35 |
| 49.232.5.122 | attackbots | Jul 8 06:52:14 home sshd[10945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.5.122 Jul 8 06:52:16 home sshd[10945]: Failed password for invalid user yaysa from 49.232.5.122 port 37366 ssh2 Jul 8 06:56:45 home sshd[11389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.5.122 ... |
2020-07-08 13:29:35 |
| 95.129.183.71 | attack | Automatic report - Banned IP Access |
2020-07-08 13:18:54 |
| 51.75.140.153 | attackbotsspam | 2020-07-08T07:01:24.415803lavrinenko.info sshd[6509]: Invalid user www from 51.75.140.153 port 33748 2020-07-08T07:01:24.427621lavrinenko.info sshd[6509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.140.153 2020-07-08T07:01:24.415803lavrinenko.info sshd[6509]: Invalid user www from 51.75.140.153 port 33748 2020-07-08T07:01:26.475494lavrinenko.info sshd[6509]: Failed password for invalid user www from 51.75.140.153 port 33748 ssh2 2020-07-08T07:04:44.843971lavrinenko.info sshd[6753]: Invalid user wangli from 51.75.140.153 port 59356 ... |
2020-07-08 13:32:57 |
| 196.52.43.53 | attackspam |
|
2020-07-08 14:00:52 |
| 49.233.145.188 | attack | Jul 8 06:46:48 santamaria sshd\[20711\]: Invalid user shupin from 49.233.145.188 Jul 8 06:46:48 santamaria sshd\[20711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.145.188 Jul 8 06:46:49 santamaria sshd\[20711\]: Failed password for invalid user shupin from 49.233.145.188 port 36706 ssh2 ... |
2020-07-08 13:41:37 |
| 123.185.26.243 | attackbots | Unauthorized connection attempt from IP address 123.185.26.243 on Port 445(SMB) |
2020-07-08 13:49:31 |