City: unknown
Region: unknown
Country: Sweden
Internet Service Provider: Orange
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.0.2.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28933
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.0.2.0. IN A
;; AUTHORITY SECTION:
. 126 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024040402 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 05 08:05:27 CST 2024
;; MSG SIZE rcvd: 100Host 0.2.0.2.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 0.2.0.2.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.59.90.31 | attackbotsspam | Aug 9 16:29:51 abendstille sshd\[24569\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.90.31 user=root Aug 9 16:29:53 abendstille sshd\[24569\]: Failed password for root from 139.59.90.31 port 48706 ssh2 Aug 9 16:32:20 abendstille sshd\[27208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.90.31 user=root Aug 9 16:32:23 abendstille sshd\[27208\]: Failed password for root from 139.59.90.31 port 52044 ssh2 Aug 9 16:34:53 abendstille sshd\[29775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.90.31 user=root ... |
2020-08-10 01:57:37 |
| 58.244.254.94 | attackspambots | SSH auth scanning - multiple failed logins |
2020-08-10 01:45:55 |
| 112.192.228.101 | attackspam | Lines containing failures of 112.192.228.101 Aug 5 05:24:08 shared05 sshd[15602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.192.228.101 user=r.r Aug 5 05:24:10 shared05 sshd[15602]: Failed password for r.r from 112.192.228.101 port 55794 ssh2 Aug 5 05:24:11 shared05 sshd[15602]: Received disconnect from 112.192.228.101 port 55794:11: Bye Bye [preauth] Aug 5 05:24:11 shared05 sshd[15602]: Disconnected from authenticating user r.r 112.192.228.101 port 55794 [preauth] Aug 5 05:32:25 shared05 sshd[19668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.192.228.101 user=r.r Aug 5 05:32:27 shared05 sshd[19668]: Failed password for r.r from 112.192.228.101 port 37308 ssh2 Aug 5 05:32:28 shared05 sshd[19668]: Received disconnect from 112.192.228.101 port 37308:11: Bye Bye [preauth] Aug 5 05:32:28 shared05 sshd[19668]: Disconnected from authenticating user r.r 112.192.228.101 p........ ------------------------------ |
2020-08-10 02:23:05 |
| 164.132.41.67 | attackbots | Aug 9 16:25:43 vpn01 sshd[27210]: Failed password for root from 164.132.41.67 port 43104 ssh2 ... |
2020-08-10 01:57:12 |
| 106.12.11.206 | attackspambots | Aug 9 15:47:47 hosting sshd[23827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.11.206 user=root Aug 9 15:47:48 hosting sshd[23827]: Failed password for root from 106.12.11.206 port 58944 ssh2 ... |
2020-08-10 01:59:43 |
| 118.24.106.210 | attackspambots | SSH Brute Force |
2020-08-10 02:07:54 |
| 64.227.99.233 | attackbotsspam | Port scan: Attack repeated for 24 hours |
2020-08-10 01:49:04 |
| 186.4.242.37 | attack | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-09T17:15:53Z and 2020-08-09T17:21:31Z |
2020-08-10 02:13:59 |
| 165.227.7.5 | attackspambots | Aug 9 19:56:49 buvik sshd[23543]: Failed password for root from 165.227.7.5 port 38326 ssh2 Aug 9 20:00:39 buvik sshd[24534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.7.5 user=root Aug 9 20:00:41 buvik sshd[24534]: Failed password for root from 165.227.7.5 port 49422 ssh2 ... |
2020-08-10 02:06:05 |
| 119.253.84.106 | attack | [N10.H1.VM1] Port Scanner Detected Blocked by UFW |
2020-08-10 02:01:45 |
| 202.153.37.194 | attackbots | Aug 9 18:06:50 jumpserver sshd[87454]: Failed password for root from 202.153.37.194 port 34556 ssh2 Aug 9 18:11:17 jumpserver sshd[87475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.153.37.194 user=root Aug 9 18:11:20 jumpserver sshd[87475]: Failed password for root from 202.153.37.194 port 28531 ssh2 ... |
2020-08-10 02:14:39 |
| 13.235.14.48 | attack | Aug 9 03:07:13 web1 sshd\[32023\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.235.14.48 user=root Aug 9 03:07:14 web1 sshd\[32023\]: Failed password for root from 13.235.14.48 port 42366 ssh2 Aug 9 03:09:59 web1 sshd\[32286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.235.14.48 user=root Aug 9 03:10:02 web1 sshd\[32286\]: Failed password for root from 13.235.14.48 port 56012 ssh2 Aug 9 03:12:47 web1 sshd\[32480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.235.14.48 user=root |
2020-08-10 02:17:27 |
| 23.97.180.45 | attackbots | Aug 9 14:08:23 db sshd[6316]: User root from 23.97.180.45 not allowed because none of user's groups are listed in AllowGroups ... |
2020-08-10 01:58:44 |
| 192.99.191.218 | attack | SpamScore above: 10.0 |
2020-08-10 02:07:13 |
| 49.51.12.221 | attack | Sent packet to closed port: 32770 |
2020-08-10 02:03:33 |