City: unknown
Region: unknown
Country: Reserved
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.112.45.84
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58815
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.112.45.84. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020302 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 13:49:47 CST 2025
;; MSG SIZE rcvd: 106Host 84.45.112.149.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 84.45.112.149.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 80.82.64.127 | attackspambots | Dec 21 07:10:15 h2177944 kernel: \[107424.141563\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=80.82.64.127 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=40254 PROTO=TCP SPT=8080 DPT=9000 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 21 07:10:15 h2177944 kernel: \[107424.141576\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=80.82.64.127 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=40254 PROTO=TCP SPT=8080 DPT=9000 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 21 07:26:01 h2177944 kernel: \[108370.127733\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=80.82.64.127 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=37937 PROTO=TCP SPT=8080 DPT=4865 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 21 07:26:01 h2177944 kernel: \[108370.127749\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=80.82.64.127 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=37937 PROTO=TCP SPT=8080 DPT=4865 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 21 07:30:45 h2177944 kernel: \[108654.170959\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=80.82.64.127 DST=85.214.117.9 LEN=40 TOS=0x |
2019-12-21 15:06:53 |
| 51.77.200.243 | attack | Dec 10 05:46:19 vtv3 sshd[23954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.200.243 Dec 10 05:46:21 vtv3 sshd[23954]: Failed password for invalid user mysql from 51.77.200.243 port 51628 ssh2 Dec 10 06:00:47 vtv3 sshd[31614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.200.243 Dec 10 06:00:49 vtv3 sshd[31614]: Failed password for invalid user mihail from 51.77.200.243 port 40436 ssh2 Dec 10 06:07:54 vtv3 sshd[2652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.200.243 Dec 10 06:22:14 vtv3 sshd[9364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.200.243 Dec 10 06:22:16 vtv3 sshd[9364]: Failed password for invalid user demo from 51.77.200.243 port 37768 ssh2 Dec 10 06:29:30 vtv3 sshd[12612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.200.243 Dec 10 06:43:54 vt |
2019-12-21 15:08:21 |
| 103.101.52.48 | attackspam | Dec 21 07:49:24 sso sshd[7857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.52.48 Dec 21 07:49:26 sso sshd[7857]: Failed password for invalid user postgres from 103.101.52.48 port 46376 ssh2 ... |
2019-12-21 15:05:16 |
| 51.38.236.221 | attack | Dec 20 21:05:36 hpm sshd\[14937\]: Invalid user yaser from 51.38.236.221 Dec 20 21:05:36 hpm sshd\[14937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.ip-51-38-236.eu Dec 20 21:05:38 hpm sshd\[14937\]: Failed password for invalid user yaser from 51.38.236.221 port 33242 ssh2 Dec 20 21:12:41 hpm sshd\[15704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.ip-51-38-236.eu user=sync Dec 20 21:12:44 hpm sshd\[15704\]: Failed password for sync from 51.38.236.221 port 38650 ssh2 |
2019-12-21 15:16:03 |
| 218.232.135.95 | attackbots | Dec 21 06:29:54 unicornsoft sshd\[27943\]: User root from 218.232.135.95 not allowed because not listed in AllowUsers Dec 21 06:29:54 unicornsoft sshd\[27943\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.232.135.95 user=root Dec 21 06:29:57 unicornsoft sshd\[27943\]: Failed password for invalid user root from 218.232.135.95 port 57504 ssh2 |
2019-12-21 15:13:18 |
| 222.186.173.154 | attackbots | Dec 21 07:50:28 vpn01 sshd[25836]: Failed password for root from 222.186.173.154 port 25910 ssh2 Dec 21 07:50:40 vpn01 sshd[25836]: error: maximum authentication attempts exceeded for root from 222.186.173.154 port 25910 ssh2 [preauth] ... |
2019-12-21 14:52:04 |
| 177.8.244.97 | attack | 400 BAD REQUEST |
2019-12-21 14:58:20 |
| 182.191.179.135 | attackspambots | port scan and connect, tcp 22 (ssh) |
2019-12-21 15:30:47 |
| 175.25.27.135 | attackbotsspam | Jun 11 18:14:21 microserver sshd[19969]: Invalid user new from 175.25.27.135 port 48360 Jun 11 18:14:21 microserver sshd[19969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.25.27.135 Jun 11 18:14:23 microserver sshd[19969]: Failed password for invalid user new from 175.25.27.135 port 48360 ssh2 Jun 11 18:15:20 microserver sshd[20378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.25.27.135 user=root Jun 11 18:15:22 microserver sshd[20378]: Failed password for root from 175.25.27.135 port 51981 ssh2 Dec 21 08:09:07 microserver sshd[42583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.25.27.135 user=root Dec 21 08:09:09 microserver sshd[42583]: Failed password for root from 175.25.27.135 port 55416 ssh2 Dec 21 08:14:06 microserver sshd[43296]: Invalid user ftpuser from 175.25.27.135 port 47005 Dec 21 08:14:06 microserver sshd[43296]: pam_unix(sshd:auth): authentication f |
2019-12-21 15:31:47 |
| 92.63.194.90 | attackbots | Dec 21 08:00:02 localhost sshd\[8731\]: Invalid user admin from 92.63.194.90 port 52554 Dec 21 08:00:02 localhost sshd\[8731\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.90 Dec 21 08:00:04 localhost sshd\[8731\]: Failed password for invalid user admin from 92.63.194.90 port 52554 ssh2 |
2019-12-21 15:06:00 |
| 165.22.144.206 | attack | Dec 21 13:30:34 webhost01 sshd[23170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.144.206 Dec 21 13:30:36 webhost01 sshd[23170]: Failed password for invalid user test from 165.22.144.206 port 51908 ssh2 ... |
2019-12-21 14:59:30 |
| 159.203.201.66 | attack | firewall-block, port(s): 2095/tcp |
2019-12-21 15:00:18 |
| 54.224.163.162 | attackspambots | Triggered: repeated knocking on closed ports. |
2019-12-21 15:07:27 |
| 172.105.4.227 | attack | W 31101,/var/log/nginx/access.log,-,- |
2019-12-21 15:22:11 |
| 90.84.232.4 | attackbots | "SERVER-WEBAPP Shenzhen TVT Digital Technology API OS command injection attempt" |
2019-12-21 15:06:14 |