City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.152.243.108
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64387
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;148.152.243.108. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012802 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 06:56:54 CST 2025
;; MSG SIZE rcvd: 108b'Host 108.243.152.148.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 148.152.243.108.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.169.194 | attackbots | SSH Brute Force, server-1 sshd[31159]: Failed password for root from 222.186.169.194 port 30902 ssh2 |
2019-10-07 20:57:03 |
| 181.48.116.50 | attackbots | 2019-10-07T13:21:23.414677abusebot-7.cloudsearch.cf sshd\[10223\]: Invalid user Contrasena@ABC from 181.48.116.50 port 40284 |
2019-10-07 21:30:20 |
| 109.242.38.138 | attackspam | Automatic report - Port Scan Attack |
2019-10-07 21:18:04 |
| 177.85.70.42 | attackbotsspam | postfix (unknown user, SPF fail or relay access denied) |
2019-10-07 21:27:05 |
| 178.128.59.109 | attackspambots | SSH/22 MH Probe, BF, Hack - |
2019-10-07 21:01:39 |
| 150.66.84.218 | attackbots | Oct 7 15:15:27 our-server-hostname postfix/smtpd[7310]: connect from unknown[150.66.84.218] Oct 7 15:15:29 our-server-hostname sqlgrey: grey: new: 150.66.84.218(150.66.84.218), x@x -> x@x Oct 7 15:15:30 our-server-hostname postfix/policy-spf[24368]: : Policy action=550 Please see hxxp://www.openspf.org/Why?s=mfrom;id=clutz%40apex.net.au;ip=150.66.84.218;r=mx1.cbr.spam-filtering-appliance Oct x@x Oct 7 15:15:30 our-server-hostname postfix/smtpd[7310]: lost connection after DATA from unknown[150.66.84.218] Oct 7 15:15:30 our-server-hostname postfix/smtpd[7310]: disconnect from unknown[150.66.84.218] Oct 7 15:15:59 our-server-hostname postfix/smtpd[23819]: connect from unknown[150.66.84.218] Oct 7 15:15:59 our-server-hostname sqlgrey: grey: new: 150.66.84.218(150.66.84.218), x@x -> x@x Oct 7 15:15:59 our-server-hostname postfix/policy-spf[24657]: : Policy action=550 Please see hxxp://www.openspf.org/Why?s=mfrom;id=coachee%40apex.net.au;ip=150.66.84.218;r=mx1.cbr.s........ ------------------------------- |
2019-10-07 21:03:13 |
| 222.186.175.183 | attack | 2019-10-07T13:29:56.133131hub.schaetter.us sshd\[2706\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root 2019-10-07T13:29:58.318670hub.schaetter.us sshd\[2706\]: Failed password for root from 222.186.175.183 port 31982 ssh2 2019-10-07T13:30:02.299783hub.schaetter.us sshd\[2706\]: Failed password for root from 222.186.175.183 port 31982 ssh2 2019-10-07T13:30:07.138520hub.schaetter.us sshd\[2706\]: Failed password for root from 222.186.175.183 port 31982 ssh2 2019-10-07T13:30:12.023784hub.schaetter.us sshd\[2706\]: Failed password for root from 222.186.175.183 port 31982 ssh2 ... |
2019-10-07 21:33:38 |
| 222.98.37.25 | attackspambots | Oct 7 12:38:08 game-panel sshd[7230]: Failed password for root from 222.98.37.25 port 40096 ssh2 Oct 7 12:42:29 game-panel sshd[7413]: Failed password for root from 222.98.37.25 port 39131 ssh2 |
2019-10-07 21:05:33 |
| 103.216.0.93 | attack | Automatic report - Port Scan Attack |
2019-10-07 21:37:45 |
| 165.22.46.4 | attack | Oct 7 12:14:11 venus sshd\[20346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.46.4 user=root Oct 7 12:14:12 venus sshd\[20346\]: Failed password for root from 165.22.46.4 port 57749 ssh2 Oct 7 12:18:00 venus sshd\[20385\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.46.4 user=root ... |
2019-10-07 21:13:05 |
| 78.158.193.110 | attack | Oct 7 14:35:02 our-server-hostname postfix/smtpd[19600]: connect from unknown[78.158.193.110] Oct 7 14:35:06 our-server-hostname sqlgrey: grey: new: 78.158.193.110(78.158.193.110), x@x -> x@x Oct 7 14:35:06 our-server-hostname postfix/policy-spf[30638]: : Policy action=550 Please see hxxp://www.openspf.org/Why?s=mfrom;id=amtrak%40apex.net.au;ip=78.158.193.110;r=mx1.cbr.spam-filtering-appliance Oct x@x Oct 7 14:35:07 our-server-hostname postfix/smtpd[19600]: lost connection after DATA from unknown[78.158.193.110] Oct 7 14:35:07 our-server-hostname postfix/smtpd[19600]: disconnect from unknown[78.158.193.110] Oct 7 14:35:47 our-server-hostname postfix/smtpd[28824]: connect from unknown[78.158.193.110] Oct 7 14:35:48 our-server-hostname sqlgrey: grey: new: 78.158.193.110(78.158.193.110), x@x -> x@x Oct 7 14:35:48 our-server-hostname postfix/policy-spf[30053]: : Policy action=550 Please see hxxp://www.openspf.org/Why?s=mfrom;id=amlath%40apex.net.au;ip=78.158.193.11........ ------------------------------- |
2019-10-07 21:40:25 |
| 189.109.247.150 | attackbotsspam | SSH invalid-user multiple login attempts |
2019-10-07 21:04:08 |
| 176.77.209.246 | attackbotsspam | Oct 7 15:24:26 our-server-hostname postfix/smtpd[8017]: connect from unknown[176.77.209.246] Oct 7 15:24:28 our-server-hostname sqlgrey: grey: new: 176.77.209.246(176.77.209.246), x@x -> x@x Oct 7 15:24:29 our-server-hostname postfix/policy-spf[26847]: : Policy action=550 Please see hxxp://www.openspf.org/Why?s=mfrom;id=cugini%40apex.net.au;ip=176.77.209.246;r=mx1.cbr.spam-filtering-appliance Oct x@x Oct 7 15:24:29 our-server-hostname postfix/smtpd[8017]: lost connection after DATA from unknown[176.77.209.246] Oct 7 15:24:29 our-server-hostname postfix/smtpd[8017]: disconnect from unknown[176.77.209.246] Oct 7 15:24:59 our-server-hostname postfix/smtpd[7063]: connect from unknown[176.77.209.246] Oct 7 15:25:00 our-server-hostname sqlgrey: grey: new: 176.77.209.246(176.77.209.246), x@x -> x@x Oct 7 15:25:00 our-server-hostname postfix/policy-spf[29676]: : Policy action=550 Please see hxxp://www.openspf.org/Why?s=mfrom;id=dbce1%40apex.net.au;ip=176.77.209.246;r=m........ ------------------------------- |
2019-10-07 21:26:06 |
| 188.49.16.238 | attackspam | Lines containing failures of 188.49.16.238 Oct 7 13:31:13 omfg postfix/smtpd[20801]: connect from unknown[188.49.16.238] Oct x@x Oct 7 13:31:24 omfg postfix/smtpd[20801]: lost connection after DATA from unknown[188.49.16.238] Oct 7 13:31:24 omfg postfix/smtpd[20801]: disconnect from unknown[188.49.16.238] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=188.49.16.238 |
2019-10-07 21:23:12 |
| 119.29.242.48 | attackspambots | Oct 7 12:35:00 work-partkepr sshd\[29708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.242.48 user=root Oct 7 12:35:02 work-partkepr sshd\[29708\]: Failed password for root from 119.29.242.48 port 50388 ssh2 ... |
2019-10-07 21:00:30 |