City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.213.69.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43900
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.213.69.196. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025030101 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 02 04:59:16 CST 2025
;; MSG SIZE rcvd: 107
Host 196.69.213.149.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 196.69.213.149.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.12.148.74 | attack | Jun 22 15:22:25 vps687878 sshd\[26296\]: Failed password for invalid user obama from 106.12.148.74 port 56876 ssh2 Jun 22 15:24:45 vps687878 sshd\[26419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.74 user=root Jun 22 15:24:46 vps687878 sshd\[26419\]: Failed password for root from 106.12.148.74 port 53804 ssh2 Jun 22 15:27:03 vps687878 sshd\[26720\]: Invalid user zym from 106.12.148.74 port 50724 Jun 22 15:27:03 vps687878 sshd\[26720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.74 ... |
2020-06-22 22:10:23 |
| 111.161.74.106 | attackbotsspam | Jun 22 14:14:43 django-0 sshd[5004]: Failed password for invalid user aml from 111.161.74.106 port 40379 ssh2 Jun 22 14:17:27 django-0 sshd[5086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.74.106 user=daemon Jun 22 14:17:30 django-0 sshd[5086]: Failed password for daemon from 111.161.74.106 port 57475 ssh2 ... |
2020-06-22 22:30:56 |
| 212.159.100.58 | attack | Jun 22 13:57:34 ns382633 sshd\[19272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.159.100.58 user=root Jun 22 13:57:36 ns382633 sshd\[19272\]: Failed password for root from 212.159.100.58 port 43798 ssh2 Jun 22 14:12:20 ns382633 sshd\[21807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.159.100.58 user=root Jun 22 14:12:23 ns382633 sshd\[21807\]: Failed password for root from 212.159.100.58 port 37144 ssh2 Jun 22 14:15:20 ns382633 sshd\[22493\]: Invalid user zeyu from 212.159.100.58 port 37204 Jun 22 14:15:20 ns382633 sshd\[22493\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.159.100.58 |
2020-06-22 22:16:34 |
| 106.54.128.79 | attackbots | Jun 22 14:06:07 host sshd[30171]: Invalid user docker from 106.54.128.79 port 33452 ... |
2020-06-22 22:24:45 |
| 167.99.202.143 | attackbotsspam | Jun 22 15:22:16 journals sshd\[57549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.202.143 user=root Jun 22 15:22:18 journals sshd\[57549\]: Failed password for root from 167.99.202.143 port 50114 ssh2 Jun 22 15:30:32 journals sshd\[58476\]: Invalid user upgrade from 167.99.202.143 Jun 22 15:30:32 journals sshd\[58476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.202.143 Jun 22 15:30:35 journals sshd\[58476\]: Failed password for invalid user upgrade from 167.99.202.143 port 48606 ssh2 ... |
2020-06-22 22:29:34 |
| 113.172.17.34 | attackspambots | Lines containing failures of 113.172.17.34 Jun 22 13:43:37 keyhelp sshd[12018]: Invalid user admin from 113.172.17.34 port 41643 Jun 22 13:43:37 keyhelp sshd[12018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.172.17.34 Jun 22 13:43:39 keyhelp sshd[12018]: Failed password for invalid user admin from 113.172.17.34 port 41643 ssh2 Jun 22 13:43:39 keyhelp sshd[12018]: Connection closed by invalid user admin 113.172.17.34 port 41643 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.172.17.34 |
2020-06-22 22:39:18 |
| 2.42.196.30 | attackspambots | DATE:2020-06-22 14:05:46, IP:2.42.196.30, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-06-22 22:41:51 |
| 51.222.16.194 | attack | " " |
2020-06-22 22:26:35 |
| 45.138.74.161 | attack | SpamScore above: 10.0 |
2020-06-22 22:46:16 |
| 113.75.24.59 | attackbots | Unauthorized connection attempt detected from IP address 113.75.24.59 to port 8080 |
2020-06-22 22:20:50 |
| 49.235.91.145 | attack | Jun 22 15:57:32 vpn01 sshd[5320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.91.145 Jun 22 15:57:34 vpn01 sshd[5320]: Failed password for invalid user hws from 49.235.91.145 port 49636 ssh2 ... |
2020-06-22 22:28:41 |
| 106.13.37.213 | attackspambots | Jun 22 15:19:15 gestao sshd[28564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.37.213 Jun 22 15:19:17 gestao sshd[28564]: Failed password for invalid user qyl from 106.13.37.213 port 54600 ssh2 Jun 22 15:23:15 gestao sshd[28680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.37.213 ... |
2020-06-22 22:25:26 |
| 180.183.55.13 | attackspambots | Honeypot attack, port: 445, PTR: mx-ll-180.183.55-13.dynamic.3bb.co.th. |
2020-06-22 22:34:03 |
| 38.84.76.16 | attackspambots | Jun 22 13:36:03 m3 sshd[7831]: Invalid user fernando from 38.84.76.16 Jun 22 13:36:05 m3 sshd[7831]: Failed password for invalid user fernando from 38.84.76.16 port 60000 ssh2 Jun 22 13:40:41 m3 sshd[8367]: Invalid user magento from 38.84.76.16 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=38.84.76.16 |
2020-06-22 22:27:40 |
| 88.88.40.133 | attackbots | Jun 22 15:09:49 odroid64 sshd\[10069\]: User root from 88.88.40.133 not allowed because not listed in AllowUsers Jun 22 15:09:49 odroid64 sshd\[10069\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.88.40.133 user=root ... |
2020-06-22 22:43:46 |