City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.73.245.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55861
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;148.73.245.74. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012801 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 04:01:31 CST 2025
;; MSG SIZE rcvd: 106Host 74.245.73.148.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 74.245.73.148.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.139.236.20 | attackbotsspam | Dec 6 09:48:08 pi sshd\[10911\]: Failed password for invalid user 012345 from 185.139.236.20 port 53292 ssh2 Dec 6 09:53:44 pi sshd\[11222\]: Invalid user sanitary from 185.139.236.20 port 35218 Dec 6 09:53:44 pi sshd\[11222\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.139.236.20 Dec 6 09:53:46 pi sshd\[11222\]: Failed password for invalid user sanitary from 185.139.236.20 port 35218 ssh2 Dec 6 09:59:16 pi sshd\[11557\]: Invalid user hibbs from 185.139.236.20 port 44684 ... |
2019-12-06 19:48:13 |
| 123.207.126.39 | attackspambots | Dec 6 07:55:03 firewall sshd[2861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.126.39 Dec 6 07:55:03 firewall sshd[2861]: Invalid user build from 123.207.126.39 Dec 6 07:55:05 firewall sshd[2861]: Failed password for invalid user build from 123.207.126.39 port 60036 ssh2 ... |
2019-12-06 20:01:55 |
| 51.15.207.74 | attack | 2019-12-06T11:59:33.221968abusebot-6.cloudsearch.cf sshd\[4713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.207.74 user=root |
2019-12-06 20:05:43 |
| 49.235.76.69 | attackspambots | Dec 6 07:24:42 h2177944 kernel: \[8488656.019133\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=49.235.76.69 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=109 ID=1608 DF PROTO=TCP SPT=59761 DPT=40 WINDOW=8192 RES=0x00 SYN URGP=0 Dec 6 07:24:42 h2177944 kernel: \[8488656.060932\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=49.235.76.69 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=109 ID=1615 DF PROTO=TCP SPT=59765 DPT=40 WINDOW=8192 RES=0x00 SYN URGP=0 Dec 6 07:24:42 h2177944 kernel: \[8488656.083372\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=49.235.76.69 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=1624 DF PROTO=TCP SPT=59810 DPT=248 WINDOW=8192 RES=0x00 SYN URGP=0 Dec 6 07:24:42 h2177944 kernel: \[8488656.097555\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=49.235.76.69 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=1633 DF PROTO=TCP SPT=59814 DPT=248 WINDOW=8192 RES=0x00 SYN URGP=0 Dec 6 07:24:42 h2177944 kernel: \[8488656.113718\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=49.235.76.69 DST=85.214.117.9 LE |
2019-12-06 20:07:50 |
| 106.54.106.194 | attack | Dec 6 07:14:04 mail sshd[18827]: Failed password for backup from 106.54.106.194 port 52098 ssh2 Dec 6 07:21:14 mail sshd[21615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.106.194 Dec 6 07:21:16 mail sshd[21615]: Failed password for invalid user test2 from 106.54.106.194 port 58908 ssh2 |
2019-12-06 20:05:17 |
| 45.119.212.14 | attackspam | fail2ban honeypot |
2019-12-06 20:07:32 |
| 218.92.0.180 | attackspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.180 user=root Failed password for root from 218.92.0.180 port 33413 ssh2 Failed password for root from 218.92.0.180 port 33413 ssh2 Failed password for root from 218.92.0.180 port 33413 ssh2 Failed password for root from 218.92.0.180 port 33413 ssh2 |
2019-12-06 19:48:38 |
| 152.67.67.89 | attack | Dec 6 07:14:13 mail1 sshd\[28313\]: Invalid user tn from 152.67.67.89 port 57422 Dec 6 07:14:13 mail1 sshd\[28313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.67.89 Dec 6 07:14:15 mail1 sshd\[28313\]: Failed password for invalid user tn from 152.67.67.89 port 57422 ssh2 Dec 6 07:25:06 mail1 sshd\[767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.67.89 user=daemon Dec 6 07:25:08 mail1 sshd\[767\]: Failed password for daemon from 152.67.67.89 port 59336 ssh2 ... |
2019-12-06 19:40:57 |
| 222.252.45.133 | attack | Port 1433 Scan |
2019-12-06 19:37:52 |
| 104.45.148.101 | attackbotsspam | Dec 6 12:34:14 herz-der-gamer sshd[2444]: Invalid user ariaantje from 104.45.148.101 port 53766 ... |
2019-12-06 20:01:22 |
| 218.92.0.198 | attack | Dec 6 12:01:34 amit sshd\[21887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.198 user=root Dec 6 12:01:36 amit sshd\[21887\]: Failed password for root from 218.92.0.198 port 21456 ssh2 Dec 6 12:02:35 amit sshd\[7809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.198 user=root ... |
2019-12-06 19:38:04 |
| 101.109.0.106 | attackbotsspam | Automatic report - Port Scan Attack |
2019-12-06 19:33:14 |
| 141.62.172.2 | attackbots | Dec 3 23:15:20 cumulus sshd[24168]: Invalid user apache from 141.62.172.2 port 44695 Dec 3 23:15:20 cumulus sshd[24168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.62.172.2 Dec 3 23:15:22 cumulus sshd[24168]: Failed password for invalid user apache from 141.62.172.2 port 44695 ssh2 Dec 3 23:15:23 cumulus sshd[24168]: Received disconnect from 141.62.172.2 port 44695:11: Bye Bye [preauth] Dec 3 23:15:23 cumulus sshd[24168]: Disconnected from 141.62.172.2 port 44695 [preauth] Dec 3 23:23:28 cumulus sshd[24382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.62.172.2 user=r.r Dec 3 23:23:30 cumulus sshd[24382]: Failed password for r.r from 141.62.172.2 port 46133 ssh2 Dec 3 23:23:30 cumulus sshd[24382]: Received disconnect from 141.62.172.2 port 46133:11: Bye Bye [preauth] Dec 3 23:23:30 cumulus sshd[24382]: Disconnected from 141.62.172.2 port 46133 [preauth] ........ ----------------------------------------- |
2019-12-06 19:32:00 |
| 185.143.223.145 | attack | Dec 6 11:22:45 h2177944 kernel: \[8502935.900293\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.145 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=47842 PROTO=TCP SPT=48838 DPT=36367 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 6 11:30:31 h2177944 kernel: \[8503401.862700\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.145 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=40564 PROTO=TCP SPT=48838 DPT=477 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 6 11:56:52 h2177944 kernel: \[8504982.452099\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.145 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=36841 PROTO=TCP SPT=48838 DPT=515 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 6 11:59:16 h2177944 kernel: \[8505127.378967\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.145 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=17676 PROTO=TCP SPT=48838 DPT=59039 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 6 12:00:01 h2177944 kernel: \[8505171.523526\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.145 DST=85 |
2019-12-06 19:35:18 |
| 49.235.92.101 | attackbots | Port scan on 2 port(s): 2375 2376 |
2019-12-06 19:50:57 |