City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.148.217.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5515
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;18.148.217.71. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012400 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 19:36:17 CST 2025
;; MSG SIZE rcvd: 106Host 71.217.148.18.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 71.217.148.18.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 140.143.72.21 | attackbotsspam | 2019-12-02 UTC: 1x - root |
2019-12-03 19:48:11 |
| 193.70.39.175 | attack | Dec 3 11:38:45 MK-Soft-VM5 sshd[11039]: Failed password for root from 193.70.39.175 port 39316 ssh2 Dec 3 11:44:10 MK-Soft-VM5 sshd[11122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.39.175 ... |
2019-12-03 19:56:51 |
| 154.8.185.122 | attack | Dec 3 11:29:50 ns41 sshd[14974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.185.122 |
2019-12-03 19:46:32 |
| 89.163.214.8 | attackspam | Dec 2 07:21:03 m1 sshd[2271]: Invalid user wollen from 89.163.214.8 Dec 2 07:21:05 m1 sshd[2271]: Failed password for invalid user wollen from 89.163.214.8 port 47212 ssh2 Dec 2 07:30:29 m1 sshd[6490]: Invalid user server from 89.163.214.8 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=89.163.214.8 |
2019-12-03 19:57:40 |
| 80.227.12.38 | attackspam | 2019-12-03T11:40:05.405628abusebot-3.cloudsearch.cf sshd\[5996\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.227.12.38 user=root |
2019-12-03 19:44:08 |
| 103.219.112.61 | attackbotsspam | Dec 3 01:16:59 kapalua sshd\[8390\]: Invalid user tulika from 103.219.112.61 Dec 3 01:16:59 kapalua sshd\[8390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.219.112.61 Dec 3 01:17:01 kapalua sshd\[8390\]: Failed password for invalid user tulika from 103.219.112.61 port 36402 ssh2 Dec 3 01:23:38 kapalua sshd\[9056\]: Invalid user suzie from 103.219.112.61 Dec 3 01:23:38 kapalua sshd\[9056\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.219.112.61 |
2019-12-03 19:41:39 |
| 218.92.0.181 | attack | Dec 3 12:39:22 sd-53420 sshd\[19461\]: User root from 218.92.0.181 not allowed because none of user's groups are listed in AllowGroups Dec 3 12:39:23 sd-53420 sshd\[19461\]: Failed none for invalid user root from 218.92.0.181 port 12116 ssh2 Dec 3 12:39:23 sd-53420 sshd\[19461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.181 user=root Dec 3 12:39:24 sd-53420 sshd\[19461\]: Failed password for invalid user root from 218.92.0.181 port 12116 ssh2 Dec 3 12:39:28 sd-53420 sshd\[19461\]: Failed password for invalid user root from 218.92.0.181 port 12116 ssh2 ... |
2019-12-03 19:41:06 |
| 186.249.29.163 | attackspam | " " |
2019-12-03 19:43:43 |
| 103.221.252.46 | attackspam | Dec 3 10:27:38 server sshd\[13257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.221.252.46 user=root Dec 3 10:27:39 server sshd\[13257\]: Failed password for root from 103.221.252.46 port 33712 ssh2 Dec 3 10:38:47 server sshd\[16164\]: Invalid user M from 103.221.252.46 Dec 3 10:38:47 server sshd\[16164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.221.252.46 Dec 3 10:38:50 server sshd\[16164\]: Failed password for invalid user M from 103.221.252.46 port 33158 ssh2 ... |
2019-12-03 20:10:33 |
| 134.209.64.10 | attackspambots | Dec 3 10:41:48 legacy sshd[12187]: Failed password for root from 134.209.64.10 port 49644 ssh2 Dec 3 10:47:31 legacy sshd[12435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.64.10 Dec 3 10:47:33 legacy sshd[12435]: Failed password for invalid user postgres from 134.209.64.10 port 60806 ssh2 ... |
2019-12-03 19:52:50 |
| 123.135.127.85 | attack | Port scan: Attack repeated for 24 hours |
2019-12-03 19:53:19 |
| 89.46.196.34 | attackbots | Dec 3 00:43:25 sachi sshd\[20026\]: Invalid user bernardina from 89.46.196.34 Dec 3 00:43:25 sachi sshd\[20026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.46.196.34 Dec 3 00:43:27 sachi sshd\[20026\]: Failed password for invalid user bernardina from 89.46.196.34 port 55278 ssh2 Dec 3 00:49:25 sachi sshd\[20567\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.46.196.34 user=backup Dec 3 00:49:27 sachi sshd\[20567\]: Failed password for backup from 89.46.196.34 port 37818 ssh2 |
2019-12-03 19:58:17 |
| 46.105.209.45 | attack | Dec 3 12:49:13 mail postfix/smtpd[6437]: warning: ip45.ip-46-105-209.eu[46.105.209.45]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 3 12:49:13 mail postfix/smtpd[5885]: warning: ip45.ip-46-105-209.eu[46.105.209.45]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 3 12:49:13 mail postfix/smtpd[7299]: warning: ip45.ip-46-105-209.eu[46.105.209.45]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 3 12:49:13 mail postfix/smtpd[6453]: warning: ip45.ip-46-105-209.eu[46.105.209.45]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 3 12:49:13 mail postfix/smtpd[7553]: warning: ip45.ip-46-105-209.eu[46.105.209.45]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-12-03 20:03:17 |
| 106.54.54.224 | attackbots | 2019-12-03T11:38:25.506356abusebot-2.cloudsearch.cf sshd\[4413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.54.224 user=root |
2019-12-03 19:47:12 |
| 77.247.110.161 | attack | firewall-block, port(s): 3363/tcp, 3364/tcp |
2019-12-03 19:42:41 |