City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.39.149.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 414
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;21.39.149.48. IN A
;; AUTHORITY SECTION:
. 478 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021200 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 00:23:14 CST 2022
;; MSG SIZE rcvd: 105Host 48.149.39.21.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 48.149.39.21.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.174.101.6 | attackbotsspam | Unauthorized connection attempt from IP address 222.174.101.6 on Port 445(SMB) |
2020-09-08 21:06:59 |
| 168.194.13.4 | attackbotsspam | Sep 8 14:03:51 [host] sshd[3679]: Invalid user sc Sep 8 14:03:51 [host] sshd[3679]: pam_unix(sshd:a Sep 8 14:03:53 [host] sshd[3679]: Failed password |
2020-09-08 20:30:59 |
| 212.64.5.28 | attack | 2020-09-07T17:44:24.109151-07:00 suse-nuc sshd[2457]: Invalid user shader from 212.64.5.28 port 41948 ... |
2020-09-08 20:59:13 |
| 49.88.112.116 | attackspam | Sep 8 14:52:31 mail sshd[4982]: refused connect from 49.88.112.116 (49.88.112.116) Sep 8 14:53:47 mail sshd[5109]: refused connect from 49.88.112.116 (49.88.112.116) Sep 8 14:55:04 mail sshd[5194]: refused connect from 49.88.112.116 (49.88.112.116) Sep 8 14:56:24 mail sshd[5260]: refused connect from 49.88.112.116 (49.88.112.116) Sep 8 14:57:39 mail sshd[5327]: refused connect from 49.88.112.116 (49.88.112.116) ... |
2020-09-08 21:06:04 |
| 112.85.42.176 | attackspam | Sep 8 08:26:45 NPSTNNYC01T sshd[16046]: Failed password for root from 112.85.42.176 port 13205 ssh2 Sep 8 08:26:49 NPSTNNYC01T sshd[16046]: Failed password for root from 112.85.42.176 port 13205 ssh2 Sep 8 08:26:59 NPSTNNYC01T sshd[16046]: error: maximum authentication attempts exceeded for root from 112.85.42.176 port 13205 ssh2 [preauth] ... |
2020-09-08 20:49:16 |
| 128.199.239.204 | attackbotsspam | 2020-09-08T08:18:43.4874671495-001 sshd[15529]: Invalid user acharya from 128.199.239.204 port 52636 2020-09-08T08:18:43.4906261495-001 sshd[15529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.239.204 2020-09-08T08:18:43.4874671495-001 sshd[15529]: Invalid user acharya from 128.199.239.204 port 52636 2020-09-08T08:18:45.5905641495-001 sshd[15529]: Failed password for invalid user acharya from 128.199.239.204 port 52636 ssh2 2020-09-08T08:22:36.6773401495-001 sshd[15758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.239.204 user=root 2020-09-08T08:22:39.0972721495-001 sshd[15758]: Failed password for root from 128.199.239.204 port 47556 ssh2 ... |
2020-09-08 20:47:04 |
| 95.111.228.21 | attackspam | Scanning |
2020-09-08 20:32:19 |
| 142.93.100.171 | attack | Sep 8 08:51:29 *** sshd[26027]: User root from 142.93.100.171 not allowed because not listed in AllowUsers |
2020-09-08 20:52:51 |
| 51.91.157.101 | attackspambots | SSH login attempts. |
2020-09-08 20:36:13 |
| 218.92.0.249 | attackspambots | Sep 8 12:30:00 instance-2 sshd[4328]: Failed password for root from 218.92.0.249 port 63097 ssh2 Sep 8 12:30:04 instance-2 sshd[4328]: Failed password for root from 218.92.0.249 port 63097 ssh2 Sep 8 12:30:07 instance-2 sshd[4328]: Failed password for root from 218.92.0.249 port 63097 ssh2 Sep 8 12:30:12 instance-2 sshd[4328]: Failed password for root from 218.92.0.249 port 63097 ssh2 |
2020-09-08 20:51:25 |
| 88.99.240.38 | attackbots | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-09-08 20:59:57 |
| 14.142.57.66 | attack | SSH login attempts. |
2020-09-08 20:54:35 |
| 123.59.195.16 | attackbotsspam | (sshd) Failed SSH login from 123.59.195.16 (CN/China/Beijing/Beijing/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 8 06:34:07 atlas sshd[10858]: Invalid user mzv from 123.59.195.16 port 46242 Sep 8 06:34:09 atlas sshd[10858]: Failed password for invalid user mzv from 123.59.195.16 port 46242 ssh2 Sep 8 06:38:46 atlas sshd[12108]: Invalid user andra from 123.59.195.16 port 37758 Sep 8 06:38:48 atlas sshd[12108]: Failed password for invalid user andra from 123.59.195.16 port 37758 ssh2 Sep 8 06:40:28 atlas sshd[12542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.59.195.16 user=root |
2020-09-08 20:44:16 |
| 181.174.144.169 | attackspambots | Aug 31 16:09:08 mail.srvfarm.net postfix/smtps/smtpd[367734]: warning: unknown[181.174.144.169]: SASL PLAIN authentication failed: Aug 31 16:09:09 mail.srvfarm.net postfix/smtps/smtpd[367734]: lost connection after AUTH from unknown[181.174.144.169] Aug 31 16:13:29 mail.srvfarm.net postfix/smtps/smtpd[354177]: warning: unknown[181.174.144.169]: SASL PLAIN authentication failed: Aug 31 16:13:30 mail.srvfarm.net postfix/smtps/smtpd[354177]: lost connection after AUTH from unknown[181.174.144.169] Aug 31 16:16:44 mail.srvfarm.net postfix/smtps/smtpd[370291]: warning: unknown[181.174.144.169]: SASL PLAIN authentication failed: |
2020-09-08 20:31:49 |
| 58.187.9.166 | attack | Unauthorised access (Sep 7) SRC=58.187.9.166 LEN=40 TTL=245 ID=18868 TCP DPT=445 WINDOW=1024 SYN |
2020-09-08 21:09:25 |