City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.4.52.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50504
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;148.4.52.157. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022201 1800 900 604800 86400
;; Query time: 138 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 23 03:25:45 CST 2025
;; MSG SIZE rcvd: 105Host 157.52.4.148.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 157.52.4.148.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 79.7.202.177 | attack | Jul 9 09:37:48 localhost sshd[30007]: Invalid user carmel from 79.7.202.177 port 54517 Jul 9 09:37:48 localhost sshd[30007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-79-7-202-177.business.telecomitalia.it Jul 9 09:37:48 localhost sshd[30007]: Invalid user carmel from 79.7.202.177 port 54517 Jul 9 09:37:50 localhost sshd[30007]: Failed password for invalid user carmel from 79.7.202.177 port 54517 ssh2 Jul 9 09:41:54 localhost sshd[30516]: Invalid user tomo from 79.7.202.177 port 50351 ... |
2020-07-09 17:47:25 |
| 118.165.130.97 | attack | Honeypot attack, port: 445, PTR: 118-165-130-97.dynamic-ip.hinet.net. |
2020-07-09 17:52:57 |
| 106.12.196.118 | attack | Jul 9 11:31:47 PorscheCustomer sshd[27396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.196.118 Jul 9 11:31:50 PorscheCustomer sshd[27396]: Failed password for invalid user gmodserver from 106.12.196.118 port 59818 ssh2 Jul 9 11:34:44 PorscheCustomer sshd[27433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.196.118 ... |
2020-07-09 17:41:32 |
| 43.249.140.98 | attackspam | Fail2Ban Ban Triggered |
2020-07-09 17:28:34 |
| 112.85.42.181 | attack | Jul 9 12:19:50 ift sshd\[39038\]: Failed password for root from 112.85.42.181 port 5750 ssh2Jul 9 12:20:00 ift sshd\[39038\]: Failed password for root from 112.85.42.181 port 5750 ssh2Jul 9 12:20:04 ift sshd\[39038\]: Failed password for root from 112.85.42.181 port 5750 ssh2Jul 9 12:20:11 ift sshd\[39288\]: Failed password for root from 112.85.42.181 port 39506 ssh2Jul 9 12:20:35 ift sshd\[39310\]: Failed password for root from 112.85.42.181 port 10593 ssh2 ... |
2020-07-09 17:25:35 |
| 41.165.88.132 | attack | Jul 9 05:44:10 web8 sshd\[3507\]: Invalid user rajmund from 41.165.88.132 Jul 9 05:44:10 web8 sshd\[3507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.165.88.132 Jul 9 05:44:12 web8 sshd\[3507\]: Failed password for invalid user rajmund from 41.165.88.132 port 59504 ssh2 Jul 9 05:51:27 web8 sshd\[7517\]: Invalid user chendongmei from 41.165.88.132 Jul 9 05:51:27 web8 sshd\[7517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.165.88.132 |
2020-07-09 17:23:00 |
| 122.14.208.63 | attackbotsspam | php vulnerability probing |
2020-07-09 17:25:06 |
| 37.237.152.204 | attackspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-07-09 17:54:23 |
| 129.204.245.6 | attack | Unauthorized access to SSH at 9/Jul/2020:09:40:16 +0000. |
2020-07-09 17:58:44 |
| 2001:bc8:6005:131:208:a2ff:fe0c:5dac | attack | 2001:bc8:6005:131:208:a2ff:fe0c:5dac - - [09/Jul/2020:04:52:30 +0100] "POST /wp-login.php HTTP/1.1" 200 2433 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2001:bc8:6005:131:208:a2ff:fe0c:5dac - - [09/Jul/2020:04:52:30 +0100] "POST /wp-login.php HTTP/1.1" 200 2390 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2001:bc8:6005:131:208:a2ff:fe0c:5dac - - [09/Jul/2020:04:52:31 +0100] "POST /wp-login.php HTTP/1.1" 200 2438 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-07-09 17:44:09 |
| 125.215.207.44 | attackspam | <6 unauthorized SSH connections |
2020-07-09 17:23:47 |
| 122.51.222.42 | attackbots | 2020-07-09T11:15:03.217694amanda2.illicoweb.com sshd\[27312\]: Invalid user maureen from 122.51.222.42 port 38444 2020-07-09T11:15:03.221013amanda2.illicoweb.com sshd\[27312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.222.42 2020-07-09T11:15:05.340677amanda2.illicoweb.com sshd\[27312\]: Failed password for invalid user maureen from 122.51.222.42 port 38444 ssh2 2020-07-09T11:19:46.510492amanda2.illicoweb.com sshd\[27511\]: Invalid user xuyz from 122.51.222.42 port 57996 2020-07-09T11:19:46.513227amanda2.illicoweb.com sshd\[27511\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.222.42 ... |
2020-07-09 17:43:35 |
| 138.186.227.250 | attackbots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-07-09 17:51:16 |
| 198.211.116.79 | attackspambots | 2020-07-09T09:50:24.451113shield sshd\[21854\]: Invalid user nlopez from 198.211.116.79 port 43684 2020-07-09T09:50:24.454852shield sshd\[21854\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.116.79 2020-07-09T09:50:26.750176shield sshd\[21854\]: Failed password for invalid user nlopez from 198.211.116.79 port 43684 ssh2 2020-07-09T09:53:54.199946shield sshd\[22406\]: Invalid user fengyasen from 198.211.116.79 port 47926 2020-07-09T09:53:54.203366shield sshd\[22406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.116.79 |
2020-07-09 18:01:12 |
| 116.0.58.218 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-07-09 17:45:31 |