City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.18.57.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9122
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.18.57.44. IN A
;; AUTHORITY SECTION:
. 448 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022101100 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 11 21:04:05 CST 2022
;; MSG SIZE rcvd: 105Host 44.57.18.149.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 44.57.18.149.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.12.4.158 | attackspambots | Invalid user bitnami from 106.12.4.158 port 50092 |
2020-10-03 00:07:24 |
| 222.186.30.76 | attack | Oct 2 15:28:06 localhost sshd[9131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76 user=root Oct 2 15:28:09 localhost sshd[9131]: Failed password for root from 222.186.30.76 port 14832 ssh2 Oct 2 15:28:11 localhost sshd[9131]: Failed password for root from 222.186.30.76 port 14832 ssh2 Oct 2 15:28:06 localhost sshd[9131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76 user=root Oct 2 15:28:09 localhost sshd[9131]: Failed password for root from 222.186.30.76 port 14832 ssh2 Oct 2 15:28:11 localhost sshd[9131]: Failed password for root from 222.186.30.76 port 14832 ssh2 Oct 2 15:28:06 localhost sshd[9131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76 user=root Oct 2 15:28:09 localhost sshd[9131]: Failed password for root from 222.186.30.76 port 14832 ssh2 Oct 2 15:28:11 localhost sshd[9131]: Failed password for ... |
2020-10-02 23:34:51 |
| 91.229.112.17 | attack | [MK-VM6] Blocked by UFW |
2020-10-03 00:05:44 |
| 117.5.152.161 | attack | Oct 1 20:33:40 XXX sshd[13822]: Did not receive identification string from 117.5.152.161 Oct 1 20:33:40 XXX sshd[13824]: Did not receive identification string from 117.5.152.161 Oct 1 20:33:40 XXX sshd[13823]: Did not receive identification string from 117.5.152.161 Oct 1 20:33:40 XXX sshd[13825]: Did not receive identification string from 117.5.152.161 Oct 1 20:33:40 XXX sshd[13826]: Did not receive identification string from 117.5.152.161 Oct 1 20:33:40 XXX sshd[13827]: Did not receive identification string from 117.5.152.161 Oct 1 20:33:44 XXX sshd[13845]: Address 117.5.152.161 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 1 20:33:44 XXX sshd[13845]: Invalid user nagesh from 117.5.152.161 Oct 1 20:33:44 XXX sshd[13844]: Address 117.5.152.161 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 1 20:33:44 XXX sshd[13844]: Invalid user nagesh from 117.5.152.161 Oct 1 20:........ ------------------------------- |
2020-10-02 23:40:34 |
| 64.227.37.95 | attackspam | 20 attempts against mh-ssh on leaf |
2020-10-03 00:08:50 |
| 161.132.100.84 | attack | ssh brute force |
2020-10-02 23:51:22 |
| 182.121.96.204 | attack | " " |
2020-10-03 00:04:44 |
| 118.25.150.183 | attackbots | Oct 2 15:02:48 rush sshd[16039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.150.183 Oct 2 15:02:50 rush sshd[16039]: Failed password for invalid user sampserver from 118.25.150.183 port 48784 ssh2 Oct 2 15:08:18 rush sshd[16190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.150.183 ... |
2020-10-02 23:48:02 |
| 177.106.21.117 | attack | 1601584836 - 10/01/2020 22:40:36 Host: 177.106.21.117/177.106.21.117 Port: 445 TCP Blocked |
2020-10-03 00:06:11 |
| 104.206.128.6 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-10-03 00:05:15 |
| 36.91.97.122 | attackspam | SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2020-10-02 23:58:58 |
| 213.39.55.13 | attackspam | Invalid user nagios from 213.39.55.13 port 51144 |
2020-10-02 23:54:27 |
| 203.213.66.170 | attackspam | Oct 2 15:55:32 localhost sshd[12087]: Invalid user router from 203.213.66.170 port 33016 Oct 2 15:55:32 localhost sshd[12087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203-213-66-170.static.tpgi.com.au Oct 2 15:55:32 localhost sshd[12087]: Invalid user router from 203.213.66.170 port 33016 Oct 2 15:55:35 localhost sshd[12087]: Failed password for invalid user router from 203.213.66.170 port 33016 ssh2 Oct 2 16:01:41 localhost sshd[12842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203-213-66-170.static.tpgi.com.au user=root Oct 2 16:01:43 localhost sshd[12842]: Failed password for root from 203.213.66.170 port 34687 ssh2 ... |
2020-10-03 00:07:06 |
| 94.102.49.137 | attack | Oct 2 15:35:22 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=42330 PROTO=TCP SPT=45720 DPT=11117 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:22 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=28079 PROTO=TCP SPT=45720 DPT=11218 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=3153 PROTO=TCP SPT=45720 DPT=11222 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=16947 PROTO=TCP SPT=45720 DPT=11215 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15: ... |
2020-10-02 23:52:54 |
| 119.45.122.102 | attackbots | (sshd) Failed SSH login from 119.45.122.102 (CN/China/-): 5 in the last 3600 secs |
2020-10-02 23:56:04 |