City: Oakland
Region: California
Country: United States
Internet Service Provider: Verizon
Hostname: unknown
Organization: MCI Communications Services, Inc. d/b/a Verizon Business
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 209.49.70.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52346
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;209.49.70.149. IN A
;; AUTHORITY SECTION:
. 954 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019052700 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue May 28 00:19:18 CST 2019
;; MSG SIZE rcvd: 117
Host 149.70.49.209.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 149.70.49.209.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 93.131.54.221 | attackspam | SYN Flood |
2020-04-10 06:16:23 |
| 193.42.110.198 | attack | Fail2Ban Ban Triggered |
2020-04-10 06:22:08 |
| 222.186.180.17 | attackspam | Apr 10 00:04:21 vpn01 sshd[25953]: Failed password for root from 222.186.180.17 port 4788 ssh2 Apr 10 00:04:34 vpn01 sshd[25953]: error: maximum authentication attempts exceeded for root from 222.186.180.17 port 4788 ssh2 [preauth] ... |
2020-04-10 06:05:00 |
| 72.241.47.78 | attackbots | 20/4/9@17:57:06: FAIL: IoT-Telnet address from=72.241.47.78 ... |
2020-04-10 06:23:57 |
| 157.245.64.140 | attack | Apr 9 23:54:31 h1745522 sshd[16590]: Invalid user deploy from 157.245.64.140 port 58336 Apr 9 23:54:31 h1745522 sshd[16590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.64.140 Apr 9 23:54:31 h1745522 sshd[16590]: Invalid user deploy from 157.245.64.140 port 58336 Apr 9 23:54:33 h1745522 sshd[16590]: Failed password for invalid user deploy from 157.245.64.140 port 58336 ssh2 Apr 9 23:59:13 h1745522 sshd[16750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.64.140 user=root Apr 9 23:59:15 h1745522 sshd[16750]: Failed password for root from 157.245.64.140 port 40544 ssh2 Apr 10 00:03:30 h1745522 sshd[18253]: Invalid user git from 157.245.64.140 port 49004 Apr 10 00:03:30 h1745522 sshd[18253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.64.140 Apr 10 00:03:30 h1745522 sshd[18253]: Invalid user git from 157.245.64.140 port 49004 Apr ... |
2020-04-10 06:36:33 |
| 37.187.101.60 | attackbotsspam | k+ssh-bruteforce |
2020-04-10 06:18:40 |
| 107.170.99.119 | attackspam | (sshd) Failed SSH login from 107.170.99.119 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 10 00:59:59 s1 sshd[28236]: Invalid user aka from 107.170.99.119 port 49128 Apr 10 01:00:01 s1 sshd[28236]: Failed password for invalid user aka from 107.170.99.119 port 49128 ssh2 Apr 10 01:13:59 s1 sshd[28988]: Invalid user support from 107.170.99.119 port 36972 Apr 10 01:14:01 s1 sshd[28988]: Failed password for invalid user support from 107.170.99.119 port 36972 ssh2 Apr 10 01:21:12 s1 sshd[29256]: Invalid user deploy from 107.170.99.119 port 42579 |
2020-04-10 06:38:57 |
| 106.12.176.113 | attack | Apr 9 23:53:48 meumeu sshd[22188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.176.113 Apr 9 23:53:50 meumeu sshd[22188]: Failed password for invalid user weblogic from 106.12.176.113 port 64544 ssh2 Apr 9 23:57:23 meumeu sshd[22678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.176.113 ... |
2020-04-10 06:10:42 |
| 180.168.141.246 | attackbots | Too many connections or unauthorized access detected from Arctic banned ip |
2020-04-10 06:06:52 |
| 104.31.74.44 | attack | Scam website in italian language |
2020-04-10 06:13:27 |
| 164.64.28.1 | attackspambots | Apr 9 23:57:10 tuxlinux sshd[49117]: Invalid user admin from 164.64.28.1 port 43008 Apr 9 23:57:10 tuxlinux sshd[49117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.64.28.1 Apr 9 23:57:10 tuxlinux sshd[49117]: Invalid user admin from 164.64.28.1 port 43008 Apr 9 23:57:10 tuxlinux sshd[49117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.64.28.1 Apr 9 23:57:10 tuxlinux sshd[49117]: Invalid user admin from 164.64.28.1 port 43008 Apr 9 23:57:10 tuxlinux sshd[49117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.64.28.1 Apr 9 23:57:13 tuxlinux sshd[49117]: Failed password for invalid user admin from 164.64.28.1 port 43008 ssh2 ... |
2020-04-10 06:19:05 |
| 112.133.195.55 | attackspambots | Apr 9 23:56:57 |
2020-04-10 06:29:46 |
| 51.83.40.227 | attackbotsspam | Apr 9 23:53:55 localhost sshd\[29093\]: Invalid user fmaster from 51.83.40.227 Apr 9 23:53:55 localhost sshd\[29093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.40.227 Apr 9 23:53:57 localhost sshd\[29093\]: Failed password for invalid user fmaster from 51.83.40.227 port 43266 ssh2 Apr 9 23:57:19 localhost sshd\[29273\]: Invalid user jaxson from 51.83.40.227 Apr 9 23:57:19 localhost sshd\[29273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.40.227 ... |
2020-04-10 06:12:05 |
| 103.58.100.250 | attack | Apr 9 14:52:31 pixelmemory sshd[23179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.58.100.250 Apr 9 14:52:33 pixelmemory sshd[23179]: Failed password for invalid user dennis from 103.58.100.250 port 59552 ssh2 Apr 9 14:57:11 pixelmemory sshd[24189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.58.100.250 ... |
2020-04-10 06:21:44 |
| 94.102.56.215 | attackbotsspam | Apr 10 00:28:30 debian-2gb-nbg1-2 kernel: \[8730320.591696\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.56.215 DST=195.201.40.59 LEN=57 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=UDP SPT=50425 DPT=55080 LEN=37 |
2020-04-10 06:45:33 |