City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 150.222.242.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64350
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;150.222.242.1. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 19:42:00 CST 2025
;; MSG SIZE rcvd: 106Host 1.242.222.150.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 1.242.222.150.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.191.64.59 | attack | $f2bV_matches |
2020-04-12 00:45:46 |
| 151.80.144.39 | attackspambots | Apr 11 17:12:22 gw1 sshd[19463]: Failed password for root from 151.80.144.39 port 45810 ssh2 Apr 11 17:16:34 gw1 sshd[19649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.144.39 ... |
2020-04-12 00:39:53 |
| 165.227.179.138 | attackspam | $f2bV_matches |
2020-04-12 00:44:22 |
| 105.112.60.110 | attackspam | Icarus honeypot on github |
2020-04-12 00:41:54 |
| 104.152.52.38 | attackspam | 11.04.2020 14.25.19;The network attack Scan.Generic.PortScan.TCP has been blocked.;Tcp from 104.152.52.38 to port 27017;Tcp;104.152.52.38;27017;04/11/2020 14:25:19 11.04.2020 14.25.17;The network attack Scan.Generic.PortScan.TCP has been blocked.;Tcp from 104.152.52.38 to port 8092;Tcp;104.152.52.38;8092;04/11/2020 14:25:17 11.04.2020 14.25.16;The network attack Scan.Generic.PortScan.TCP has been blocked.;Tcp from 104.152.52.38 to port 264;Tcp;104.152.52.38;264;04/11/2020 14:25:16 |
2020-04-12 00:11:01 |
| 51.255.173.41 | attackspambots | Apr 11 16:13:46 vps sshd[452971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.ip-51-255-173.eu user=root Apr 11 16:13:47 vps sshd[452971]: Failed password for root from 51.255.173.41 port 54810 ssh2 Apr 11 16:17:27 vps sshd[474446]: Invalid user airwolf from 51.255.173.41 port 34362 Apr 11 16:17:27 vps sshd[474446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.ip-51-255-173.eu Apr 11 16:17:29 vps sshd[474446]: Failed password for invalid user airwolf from 51.255.173.41 port 34362 ssh2 ... |
2020-04-12 00:22:04 |
| 42.113.90.187 | attackspambots | Unauthorized connection attempt detected from IP address 42.113.90.187 to port 5555 [T] |
2020-04-12 00:24:31 |
| 78.140.7.9 | attackspambots | Dovecot Invalid User Login Attempt. |
2020-04-12 00:20:59 |
| 159.65.189.115 | attackbots | Bruteforce detected by fail2ban |
2020-04-12 00:16:47 |
| 115.220.3.88 | attack | Apr 11 15:34:50 meumeu sshd[13011]: Failed password for root from 115.220.3.88 port 57072 ssh2 Apr 11 15:38:17 meumeu sshd[13468]: Failed password for root from 115.220.3.88 port 34990 ssh2 ... |
2020-04-12 00:47:40 |
| 5.196.201.7 | attack | Apr 11 15:33:21 mail postfix/smtpd\[26291\]: warning: unknown\[5.196.201.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 11 16:04:15 mail postfix/smtpd\[26968\]: warning: unknown\[5.196.201.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 11 16:14:27 mail postfix/smtpd\[27368\]: warning: unknown\[5.196.201.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 11 16:24:42 mail postfix/smtpd\[27536\]: warning: unknown\[5.196.201.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2020-04-12 00:23:44 |
| 49.206.193.67 | attackbotsspam | Automatic report - Port Scan Attack |
2020-04-12 00:42:21 |
| 181.48.28.13 | attack | (sshd) Failed SSH login from 181.48.28.13 (CO/Colombia/-): 5 in the last 3600 secs |
2020-04-12 00:47:19 |
| 118.97.23.33 | attack | Apr 11 15:21:04 sso sshd[30270]: Failed password for root from 118.97.23.33 port 43294 ssh2 Apr 11 15:25:42 sso sshd[30822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.97.23.33 ... |
2020-04-11 23:57:19 |
| 104.210.58.78 | attack | 104.210.58.78 - - [11/Apr/2020:14:57:59 +0200] "POST //wp-login.php HTTP/1.0" 200 5167 "https://www.somaex.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 104.210.58.78 - - [11/Apr/2020:14:57:59 +0200] "POST //wp-login.php HTTP/1.0" 200 5167 "https://www.somaex.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" ... |
2020-04-11 23:56:22 |