City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 192.48.125.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13816
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;192.48.125.1. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021401 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 05:18:38 CST 2025
;; MSG SIZE rcvd: 105
Host 1.125.48.192.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 1.125.48.192.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 159.224.144.158 | attack | Unauthorized connection attempt from IP address 159.224.144.158 on Port 445(SMB) |
2019-10-12 08:13:27 |
| 164.132.207.231 | attack | Oct 12 01:49:32 MK-Soft-VM7 sshd[23597]: Failed password for root from 164.132.207.231 port 56888 ssh2 ... |
2019-10-12 08:17:24 |
| 222.186.15.110 | attack | Oct 11 20:32:43 plusreed sshd[30269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110 user=root Oct 11 20:32:45 plusreed sshd[30269]: Failed password for root from 222.186.15.110 port 44596 ssh2 ... |
2019-10-12 08:35:50 |
| 202.53.249.170 | attackspambots | Unauthorized connection attempt from IP address 202.53.249.170 on Port 25(SMTP) |
2019-10-12 08:44:02 |
| 222.186.175.151 | attackspambots | 2019-10-12T07:15:57.891452enmeeting.mahidol.ac.th sshd\[828\]: User root from 222.186.175.151 not allowed because not listed in AllowUsers 2019-10-12T07:15:59.152234enmeeting.mahidol.ac.th sshd\[828\]: Failed none for invalid user root from 222.186.175.151 port 3978 ssh2 2019-10-12T07:16:00.522377enmeeting.mahidol.ac.th sshd\[828\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root ... |
2019-10-12 08:31:44 |
| 68.47.224.14 | attackbots | SSH bruteforce (Triggered fail2ban) |
2019-10-12 08:40:32 |
| 39.35.127.55 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 11-10-2019 20:00:57. |
2019-10-12 08:45:02 |
| 106.13.115.197 | attackbotsspam | Oct 11 19:50:03 xtremcommunity sshd\[426711\]: Invalid user Enrique@123 from 106.13.115.197 port 47673 Oct 11 19:50:03 xtremcommunity sshd\[426711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.115.197 Oct 11 19:50:05 xtremcommunity sshd\[426711\]: Failed password for invalid user Enrique@123 from 106.13.115.197 port 47673 ssh2 Oct 11 19:53:47 xtremcommunity sshd\[426789\]: Invalid user Enrique@123 from 106.13.115.197 port 35004 Oct 11 19:53:47 xtremcommunity sshd\[426789\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.115.197 ... |
2019-10-12 08:37:44 |
| 143.189.241.76 | attackspam | Unauthorized connection attempt from IP address 143.189.241.76 on Port 445(SMB) |
2019-10-12 08:36:42 |
| 220.130.178.36 | attackbots | Oct 11 14:09:21 hanapaa sshd\[431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220-130-178-36.hinet-ip.hinet.net user=root Oct 11 14:09:23 hanapaa sshd\[431\]: Failed password for root from 220.130.178.36 port 44646 ssh2 Oct 11 14:13:54 hanapaa sshd\[854\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220-130-178-36.hinet-ip.hinet.net user=root Oct 11 14:13:56 hanapaa sshd\[854\]: Failed password for root from 220.130.178.36 port 55456 ssh2 Oct 11 14:18:21 hanapaa sshd\[1233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220-130-178-36.hinet-ip.hinet.net user=root |
2019-10-12 08:19:06 |
| 120.26.95.190 | attackspam | Automatic report - XMLRPC Attack |
2019-10-12 08:33:21 |
| 200.49.56.210 | attackbots | Unauthorized connection attempt from IP address 200.49.56.210 on Port 445(SMB) |
2019-10-12 08:29:59 |
| 164.160.34.111 | attack | detected by Fail2Ban |
2019-10-12 08:29:35 |
| 103.105.227.75 | attack | Unauthorized connection attempt from IP address 103.105.227.75 on Port 445(SMB) |
2019-10-12 08:51:07 |
| 49.145.135.102 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 11-10-2019 20:00:58. |
2019-10-12 08:42:58 |