City: unknown
Region: unknown
Country: Canada
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 198.136.45.216
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27445
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;198.136.45.216. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 09:13:00 CST 2025
;; MSG SIZE rcvd: 107
Host 216.45.136.198.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 216.45.136.198.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 114.222.121.81 | attackspam | Oct 3 11:06:16 auw2 sshd\[31213\]: Invalid user teste from 114.222.121.81 Oct 3 11:06:16 auw2 sshd\[31213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.222.121.81 Oct 3 11:06:18 auw2 sshd\[31213\]: Failed password for invalid user teste from 114.222.121.81 port 23325 ssh2 Oct 3 11:10:37 auw2 sshd\[31748\]: Invalid user geometry from 114.222.121.81 Oct 3 11:10:37 auw2 sshd\[31748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.222.121.81 |
2019-10-04 05:27:23 |
| 103.109.52.50 | attack | Oct 3 22:50:59 eventyay sshd[30575]: Failed password for root from 103.109.52.50 port 52260 ssh2 Oct 3 22:53:07 eventyay sshd[1398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.109.52.50 Oct 3 22:53:10 eventyay sshd[1398]: Failed password for invalid user P@$$w0rt!234 from 103.109.52.50 port 60102 ssh2 ... |
2019-10-04 05:31:39 |
| 160.124.48.207 | attackbotsspam | 2019-10-03T21:08:20.939431shield sshd\[5470\]: Invalid user denis from 160.124.48.207 port 45852 2019-10-03T21:08:20.942517shield sshd\[5470\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.124.48.207 2019-10-03T21:08:23.086696shield sshd\[5470\]: Failed password for invalid user denis from 160.124.48.207 port 45852 ssh2 2019-10-03T21:16:24.704585shield sshd\[6429\]: Invalid user user from 160.124.48.207 port 55948 2019-10-03T21:16:24.709128shield sshd\[6429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.124.48.207 |
2019-10-04 05:33:34 |
| 69.194.8.237 | attack | 2019-10-03T20:54:02.340556abusebot-7.cloudsearch.cf sshd\[14555\]: Invalid user xd123 from 69.194.8.237 port 43592 |
2019-10-04 04:59:11 |
| 50.64.152.76 | attackspam | Oct 3 23:23:37 eventyay sshd[11524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.64.152.76 Oct 3 23:23:39 eventyay sshd[11524]: Failed password for invalid user Lolita2017 from 50.64.152.76 port 34438 ssh2 Oct 3 23:27:34 eventyay sshd[11597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.64.152.76 ... |
2019-10-04 05:27:39 |
| 129.211.125.167 | attack | 2019-10-03T23:52:47.479541tmaserv sshd\[23389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.125.167 2019-10-03T23:52:49.541973tmaserv sshd\[23389\]: Failed password for invalid user ddd from 129.211.125.167 port 42792 ssh2 2019-10-04T00:04:28.542135tmaserv sshd\[26491\]: Invalid user weblogic from 129.211.125.167 port 44546 2019-10-04T00:04:28.548188tmaserv sshd\[26491\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.125.167 2019-10-04T00:04:30.511432tmaserv sshd\[26491\]: Failed password for invalid user weblogic from 129.211.125.167 port 44546 ssh2 2019-10-04T00:08:26.051071tmaserv sshd\[26744\]: Invalid user plex from 129.211.125.167 port 35723 ... |
2019-10-04 05:19:09 |
| 185.175.93.14 | attackbotsspam | 10/03/2019-16:53:17.777009 185.175.93.14 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-04 05:28:43 |
| 113.17.111.19 | attackspam | Oct 3 22:25:04 microserver sshd[26175]: Invalid user sienna from 113.17.111.19 port 3234 Oct 3 22:25:04 microserver sshd[26175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.17.111.19 Oct 3 22:25:06 microserver sshd[26175]: Failed password for invalid user sienna from 113.17.111.19 port 3234 ssh2 Oct 3 22:29:42 microserver sshd[26799]: Invalid user marcel from 113.17.111.19 port 3235 Oct 3 22:29:42 microserver sshd[26799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.17.111.19 Oct 3 22:43:27 microserver sshd[28647]: Invalid user webmaster from 113.17.111.19 port 3238 Oct 3 22:43:27 microserver sshd[28647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.17.111.19 Oct 3 22:43:29 microserver sshd[28647]: Failed password for invalid user webmaster from 113.17.111.19 port 3238 ssh2 Oct 3 22:48:12 microserver sshd[29237]: Invalid user Raine from 113.17.111.19 port 3239 |
2019-10-04 05:11:32 |
| 118.24.221.190 | attackspambots | Oct 4 00:09:03 server sshd\[29498\]: Invalid user lh from 118.24.221.190 port 12914 Oct 4 00:09:03 server sshd\[29498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.221.190 Oct 4 00:09:06 server sshd\[29498\]: Failed password for invalid user lh from 118.24.221.190 port 12914 ssh2 Oct 4 00:12:09 server sshd\[2795\]: Invalid user MDFCON from 118.24.221.190 port 45738 Oct 4 00:12:09 server sshd\[2795\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.221.190 |
2019-10-04 05:21:35 |
| 103.94.135.216 | attackspambots | www.lust-auf-land.com 103.94.135.216 \[03/Oct/2019:23:32:43 +0200\] "POST /wp-login.php HTTP/1.1" 200 5828 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.lust-auf-land.com 103.94.135.216 \[03/Oct/2019:23:32:45 +0200\] "POST /wp-login.php HTTP/1.1" 200 5787 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-04 05:34:10 |
| 85.113.210.58 | attackspam | Oct 3 22:53:07 vps647732 sshd[22207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.113.210.58 Oct 3 22:53:10 vps647732 sshd[22207]: Failed password for invalid user pos from 85.113.210.58 port 24385 ssh2 ... |
2019-10-04 05:32:28 |
| 139.59.84.111 | attack | Oct 3 22:45:29 lnxded63 sshd[15779]: Failed password for root from 139.59.84.111 port 42764 ssh2 Oct 3 22:49:42 lnxded63 sshd[16056]: Failed password for root from 139.59.84.111 port 55654 ssh2 |
2019-10-04 05:00:32 |
| 106.12.202.192 | attack | Oct 1 07:37:23 xb3 sshd[16591]: Failed password for invalid user lucius from 106.12.202.192 port 56716 ssh2 Oct 1 07:37:23 xb3 sshd[16591]: Received disconnect from 106.12.202.192: 11: Bye Bye [preauth] Oct 1 07:54:29 xb3 sshd[25082]: Failed password for invalid user ftpuser from 106.12.202.192 port 50444 ssh2 Oct 1 07:54:29 xb3 sshd[25082]: Received disconnect from 106.12.202.192: 11: Bye Bye [preauth] Oct 1 07:58:40 xb3 sshd[22908]: Failed password for invalid user rubystar from 106.12.202.192 port 54282 ssh2 Oct 1 07:58:40 xb3 sshd[22908]: Received disconnect from 106.12.202.192: 11: Bye Bye [preauth] Oct 1 08:02:37 xb3 sshd[21751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.202.192 user=r.r Oct 1 08:02:39 xb3 sshd[21751]: Failed password for r.r from 106.12.202.192 port 58112 ssh2 Oct 1 08:02:39 xb3 sshd[21751]: Received disconnect from 106.12.202.192: 11: Bye Bye [preauth] Oct 1 08:09:32 xb3 sshd[26113]........ ------------------------------- |
2019-10-04 05:04:05 |
| 180.168.141.246 | attack | Oct 3 11:05:26 hanapaa sshd\[25318\]: Invalid user jboss from 180.168.141.246 Oct 3 11:05:26 hanapaa sshd\[25318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.141.246 Oct 3 11:05:28 hanapaa sshd\[25318\]: Failed password for invalid user jboss from 180.168.141.246 port 56920 ssh2 Oct 3 11:09:23 hanapaa sshd\[25785\]: Invalid user dimas from 180.168.141.246 Oct 3 11:09:23 hanapaa sshd\[25785\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.141.246 |
2019-10-04 05:16:47 |
| 190.14.36.21 | attackspambots | Oct 3 16:10:31 localhost kernel: [3871250.637964] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=190.14.36.21 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=56 ID=20015 DF PROTO=TCP SPT=64890 DPT=22 SEQ=3764851407 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 3 16:54:01 localhost kernel: [3873860.167496] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=190.14.36.21 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=72 ID=15478 DF PROTO=TCP SPT=56414 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 3 16:54:01 localhost kernel: [3873860.167502] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=190.14.36.21 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=72 ID=15478 DF PROTO=TCP SPT=56414 DPT=22 SEQ=2383387088 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 |
2019-10-04 04:58:16 |