City: unknown
Region: unknown
Country: Saudi Arabia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.109.50.89
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29082
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.109.50.89. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 21:12:03 CST 2025
;; MSG SIZE rcvd: 106
Host 89.50.109.149.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 89.50.109.149.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 62.234.80.115 | attackspam | 2020-08-12T16:22:46.998549snf-827550 sshd[21830]: Failed password for root from 62.234.80.115 port 43848 ssh2 2020-08-12T16:26:44.356653snf-827550 sshd[22430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.80.115 user=root 2020-08-12T16:26:46.230733snf-827550 sshd[22430]: Failed password for root from 62.234.80.115 port 55926 ssh2 ... |
2020-08-12 22:24:38 |
| 111.74.11.85 | attackspam | Lines containing failures of 111.74.11.85 Aug 11 23:55:30 penfold sshd[12948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.74.11.85 user=r.r Aug 11 23:55:32 penfold sshd[12948]: Failed password for r.r from 111.74.11.85 port 25092 ssh2 Aug 11 23:55:33 penfold sshd[12948]: Received disconnect from 111.74.11.85 port 25092:11: Bye Bye [preauth] Aug 11 23:55:33 penfold sshd[12948]: Disconnected from authenticating user r.r 111.74.11.85 port 25092 [preauth] Aug 12 00:09:51 penfold sshd[13874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.74.11.85 user=r.r Aug 12 00:09:53 penfold sshd[13874]: Failed password for r.r from 111.74.11.85 port 65422 ssh2 Aug 12 00:09:53 penfold sshd[13874]: Received disconnect from 111.74.11.85 port 65422:11: Bye Bye [preauth] Aug 12 00:09:53 penfold sshd[13874]: Disconnected from authenticating user r.r 111.74.11.85 port 65422 [preauth] Aug 12 00:14:24........ ------------------------------ |
2020-08-12 22:09:37 |
| 60.167.180.216 | attack | $f2bV_matches |
2020-08-12 22:41:18 |
| 139.198.177.151 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-12 22:23:11 |
| 46.99.162.166 | attack | Password spray |
2020-08-12 22:45:15 |
| 68.183.82.97 | attackspambots | Aug 12 13:50:01 jumpserver sshd[123576]: Failed password for root from 68.183.82.97 port 53164 ssh2 Aug 12 13:54:32 jumpserver sshd[123612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.82.97 user=root Aug 12 13:54:34 jumpserver sshd[123612]: Failed password for root from 68.183.82.97 port 34312 ssh2 ... |
2020-08-12 22:20:26 |
| 58.187.167.160 | attackbotsspam | Lines containing failures of 58.187.167.160 Aug 12 14:25:20 omfg postfix/smtpd[5531]: connect from unknown[58.187.167.160] Aug x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=58.187.167.160 |
2020-08-12 22:50:28 |
| 112.85.42.89 | attack | Aug 12 20:01:11 dhoomketu sshd[2317816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root Aug 12 20:01:13 dhoomketu sshd[2317816]: Failed password for root from 112.85.42.89 port 19779 ssh2 Aug 12 20:01:11 dhoomketu sshd[2317816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root Aug 12 20:01:13 dhoomketu sshd[2317816]: Failed password for root from 112.85.42.89 port 19779 ssh2 Aug 12 20:01:16 dhoomketu sshd[2317816]: Failed password for root from 112.85.42.89 port 19779 ssh2 ... |
2020-08-12 22:33:05 |
| 68.116.41.6 | attack | Aug 12 16:02:21 cosmoit sshd[17303]: Failed password for root from 68.116.41.6 port 45060 ssh2 |
2020-08-12 22:21:33 |
| 157.245.101.31 | attackspambots | fail2ban/Aug 12 14:32:37 h1962932 sshd[6802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.101.31 user=root Aug 12 14:32:40 h1962932 sshd[6802]: Failed password for root from 157.245.101.31 port 41332 ssh2 Aug 12 14:37:36 h1962932 sshd[7018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.101.31 user=root Aug 12 14:37:38 h1962932 sshd[7018]: Failed password for root from 157.245.101.31 port 52068 ssh2 Aug 12 14:42:34 h1962932 sshd[7181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.101.31 user=root Aug 12 14:42:37 h1962932 sshd[7181]: Failed password for root from 157.245.101.31 port 34556 ssh2 |
2020-08-12 22:14:06 |
| 112.45.120.82 | attackspambots | Fail2Ban Ban Triggered |
2020-08-12 22:14:55 |
| 91.106.193.72 | attackbots | Aug 12 15:11:30 ajax sshd[9213]: Failed password for root from 91.106.193.72 port 42736 ssh2 |
2020-08-12 22:32:26 |
| 139.180.213.55 | attackbots | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-08-12T12:21:22Z and 2020-08-12T12:42:19Z |
2020-08-12 22:27:44 |
| 167.99.75.240 | attackspambots | Aug 12 16:14:03 home sshd[2522778]: Failed password for root from 167.99.75.240 port 47196 ssh2 Aug 12 16:14:49 home sshd[2522861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.75.240 user=root Aug 12 16:14:51 home sshd[2522861]: Failed password for root from 167.99.75.240 port 57242 ssh2 Aug 12 16:15:37 home sshd[2523217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.75.240 user=root Aug 12 16:15:39 home sshd[2523217]: Failed password for root from 167.99.75.240 port 38994 ssh2 ... |
2020-08-12 22:19:28 |
| 118.24.106.210 | attackbots | Aug 12 15:44:40 vpn01 sshd[390]: Failed password for root from 118.24.106.210 port 36772 ssh2 ... |
2020-08-12 22:13:02 |