City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.104.13.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16431
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;202.104.13.52. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022800 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 22:59:30 CST 2025
;; MSG SIZE rcvd: 106Host 52.13.104.202.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 52.13.104.202.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.85.42.187 | attack | Oct 2 03:39:10 ns308116 sshd[21897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.187 user=root Oct 2 03:39:12 ns308116 sshd[21897]: Failed password for root from 112.85.42.187 port 56163 ssh2 Oct 2 03:39:14 ns308116 sshd[21897]: Failed password for root from 112.85.42.187 port 56163 ssh2 Oct 2 03:39:16 ns308116 sshd[21897]: Failed password for root from 112.85.42.187 port 56163 ssh2 Oct 2 03:43:49 ns308116 sshd[32614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.187 user=root ... |
2020-10-02 12:55:35 |
| 185.200.118.43 | attack | Found on Alienvault / proto=6 . srcport=33272 . dstport=3128 . (3846) |
2020-10-02 13:03:22 |
| 212.70.149.52 | attackspambots | Oct 2 06:18:32 srv01 postfix/smtpd\[12923\]: warning: unknown\[212.70.149.52\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 2 06:18:34 srv01 postfix/smtpd\[11626\]: warning: unknown\[212.70.149.52\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 2 06:18:39 srv01 postfix/smtpd\[23005\]: warning: unknown\[212.70.149.52\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 2 06:18:41 srv01 postfix/smtpd\[9790\]: warning: unknown\[212.70.149.52\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 2 06:18:58 srv01 postfix/smtpd\[12924\]: warning: unknown\[212.70.149.52\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-10-02 12:30:27 |
| 35.239.60.149 | attack | Oct 2 01:55:13 ns382633 sshd\[17822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.239.60.149 user=root Oct 2 01:55:15 ns382633 sshd\[17822\]: Failed password for root from 35.239.60.149 port 46446 ssh2 Oct 2 02:02:00 ns382633 sshd\[18496\]: Invalid user admin from 35.239.60.149 port 60238 Oct 2 02:02:00 ns382633 sshd\[18496\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.239.60.149 Oct 2 02:02:01 ns382633 sshd\[18496\]: Failed password for invalid user admin from 35.239.60.149 port 60238 ssh2 |
2020-10-02 13:06:37 |
| 118.40.248.20 | attackspam | $f2bV_matches |
2020-10-02 12:34:51 |
| 5.43.206.12 | attackspam | Listed on abuseat.org plus barracudaCentral and zen-spamhaus / proto=6 . srcport=36390 . dstport=8080 . (3851) |
2020-10-02 12:37:11 |
| 81.70.22.3 | attackspam | Found on CINS badguys / proto=6 . srcport=40590 . dstport=10291 . (3845) |
2020-10-02 13:06:26 |
| 113.106.8.55 | attackspam | " " |
2020-10-02 12:36:01 |
| 117.57.98.246 | attackspam | Oct 1 19:04:02 r.ca sshd[21486]: Failed password for root from 117.57.98.246 port 52496 ssh2 |
2020-10-02 12:45:44 |
| 222.185.231.246 | attackbots | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-10-01T23:14:34Z and 2020-10-01T23:17:13Z |
2020-10-02 12:41:45 |
| 177.139.194.62 | attackbotsspam | $f2bV_matches |
2020-10-02 12:43:53 |
| 40.113.85.192 | attackbotsspam | 02.10.2020 02:15:22 - SMTP Spam without Auth on hMailserver Detected by ELinOX-hMail-A2F |
2020-10-02 12:36:45 |
| 180.76.135.15 | attackbotsspam | Oct 2 03:55:46 IngegnereFirenze sshd[24550]: Failed password for invalid user marisa from 180.76.135.15 port 34686 ssh2 ... |
2020-10-02 12:44:50 |
| 62.112.11.8 | attackbotsspam | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-10-02T03:31:13Z and 2020-10-02T04:30:59Z |
2020-10-02 12:33:00 |
| 170.83.198.240 | attackbotsspam | Lines containing failures of 170.83.198.240 (max 1000) Oct 1 22:33:44 HOSTNAME sshd[22226]: Did not receive identification string from 170.83.198.240 port 18375 Oct 1 22:33:48 HOSTNAME sshd[22230]: Address 170.83.198.240 maps to 170-83-198-240.starnetbandalarga.com.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 1 22:33:48 HOSTNAME sshd[22230]: Invalid user avanthi from 170.83.198.240 port 18421 Oct 1 22:33:48 HOSTNAME sshd[22230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.83.198.240 Oct 1 22:33:50 HOSTNAME sshd[22230]: Failed password for invalid user avanthi from 170.83.198.240 port 18421 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=170.83.198.240 |
2020-10-02 12:50:04 |