City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.149.42.218
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26838
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;212.149.42.218. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012301 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 11:34:12 CST 2025
;; MSG SIZE rcvd: 107Host 218.42.149.212.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 218.42.149.212.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 87.246.7.36 | attackspambots | Aug 10 00:50:08 relay postfix/smtpd\[12604\]: warning: unknown\[87.246.7.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 10 00:50:30 relay postfix/smtpd\[13550\]: warning: unknown\[87.246.7.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 10 00:50:36 relay postfix/smtpd\[12604\]: warning: unknown\[87.246.7.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 10 00:50:46 relay postfix/smtpd\[11416\]: warning: unknown\[87.246.7.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 10 00:51:08 relay postfix/smtpd\[12604\]: warning: unknown\[87.246.7.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-08-10 07:07:34 |
| 208.109.13.208 | attackspam | Lines containing failures of 208.109.13.208 Aug 2 13:15:27 penfold sshd[12979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.13.208 user=r.r Aug 2 13:15:29 penfold sshd[12979]: Failed password for r.r from 208.109.13.208 port 59892 ssh2 Aug 2 13:15:30 penfold sshd[12979]: Received disconnect from 208.109.13.208 port 59892:11: Bye Bye [preauth] Aug 2 13:15:30 penfold sshd[12979]: Disconnected from authenticating user r.r 208.109.13.208 port 59892 [preauth] Aug 2 13:27:20 penfold sshd[13996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.13.208 user=r.r Aug 2 13:27:22 penfold sshd[13996]: Failed password for r.r from 208.109.13.208 port 33448 ssh2 Aug 2 13:27:22 penfold sshd[13996]: Received disconnect from 208.109.13.208 port 33448:11: Bye Bye [preauth] Aug 2 13:27:22 penfold sshd[13996]: Disconnected from authenticating user r.r 208.109.13.208 port 33448 [preaut........ ------------------------------ |
2020-08-10 07:31:43 |
| 104.236.247.64 | attackbots | Aug1000:15:04server4pure-ftpd:\(\?@68.66.224.3\)[WARNING]Authenticationfailedforuser[%user%]Aug1000:14:58server4pure-ftpd:\(\?@68.66.224.3\)[WARNING]Authenticationfailedforuser[%user%]Aug1000:13:56server4pure-ftpd:\(\?@104.236.247.64\)[WARNING]Authenticationfailedforuser[%user%]Aug1000:13:50server4pure-ftpd:\(\?@104.236.247.64\)[WARNING]Authenticationfailedforuser[%user%]Aug1000:13:45server4pure-ftpd:\(\?@104.236.247.64\)[WARNING]Authenticationfailedforuser[%user%]Aug1000:20:09server4pure-ftpd:\(\?@68.183.58.220\)[WARNING]Authenticationfailedforuser[%user%]Aug1000:15:13server4pure-ftpd:\(\?@68.66.224.3\)[WARNING]Authenticationfailedforuser[%user%]Aug1000:20:14server4pure-ftpd:\(\?@68.183.58.220\)[WARNING]Authenticationfailedforuser[%user%]Aug1000:13:38server4pure-ftpd:\(\?@104.236.247.64\)[WARNING]Authenticationfailedforuser[%user%]Aug1000:15:09server4pure-ftpd:\(\?@68.66.224.3\)[WARNING]Authenticationfailedforuser[%user%]IPAddressesBlocked:68.66.224.3\(US/UnitedStates/az1-ss2.a2hosting.com\) |
2020-08-10 06:54:52 |
| 165.227.96.127 | attack | Lines containing failures of 165.227.96.127 Aug 8 09:08:21 cdb sshd[28181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.96.127 user=r.r Aug 8 09:08:23 cdb sshd[28181]: Failed password for r.r from 165.227.96.127 port 39908 ssh2 Aug 8 09:08:23 cdb sshd[28181]: Received disconnect from 165.227.96.127 port 39908:11: Bye Bye [preauth] Aug 8 09:08:23 cdb sshd[28181]: Disconnected from authenticating user r.r 165.227.96.127 port 39908 [preauth] Aug 8 09:23:07 cdb sshd[29479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.96.127 user=r.r Aug 8 09:23:09 cdb sshd[29479]: Failed password for r.r from 165.227.96.127 port 41560 ssh2 Aug 8 09:23:09 cdb sshd[29479]: Received disconnect from 165.227.96.127 port 41560:11: Bye Bye [preauth] Aug 8 09:23:09 cdb sshd[29479]: Disconnected from authenticating user r.r 165.227.96.127 port 41560 [preauth] Aug 8 09:28:41 cdb sshd[2976........ ------------------------------ |
2020-08-10 06:58:39 |
| 54.184.184.187 | attackspambots | port scan and connect, tcp 8081 (blackice-icecap) |
2020-08-10 07:36:16 |
| 23.81.230.111 | attackspambots | (From eric@talkwithwebvisitor.com) Hey, this is Eric and I ran across middletonchiropractic.net a few minutes ago. Looks great… but now what? By that I mean, when someone like me finds your website – either through Search or just bouncing around – what happens next? Do you get a lot of leads from your site, or at least enough to make you happy? Honestly, most business websites fall a bit short when it comes to generating paying customers. Studies show that 70% of a site’s visitors disappear and are gone forever after just a moment. Here’s an idea… How about making it really EASY for every visitor who shows up to get a personal phone call you as soon as they hit your site… You can – Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number. It signals you the moment they let you know they’re interested – so that you can talk to that lead while they’re literally looking over your site. CLICK HERE http:/ |
2020-08-10 07:31:03 |
| 218.92.0.250 | attackspambots | Aug 10 00:50:14 vps1 sshd[31891]: Failed none for invalid user root from 218.92.0.250 port 62848 ssh2 Aug 10 00:50:15 vps1 sshd[31891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.250 user=root Aug 10 00:50:17 vps1 sshd[31891]: Failed password for invalid user root from 218.92.0.250 port 62848 ssh2 Aug 10 00:50:20 vps1 sshd[31891]: Failed password for invalid user root from 218.92.0.250 port 62848 ssh2 Aug 10 00:50:26 vps1 sshd[31891]: Failed password for invalid user root from 218.92.0.250 port 62848 ssh2 Aug 10 00:50:31 vps1 sshd[31891]: Failed password for invalid user root from 218.92.0.250 port 62848 ssh2 Aug 10 00:50:35 vps1 sshd[31891]: Failed password for invalid user root from 218.92.0.250 port 62848 ssh2 Aug 10 00:50:37 vps1 sshd[31891]: error: maximum authentication attempts exceeded for invalid user root from 218.92.0.250 port 62848 ssh2 [preauth] ... |
2020-08-10 06:59:09 |
| 193.112.107.200 | attackbotsspam | Aug 9 21:20:30 ajax sshd[13780]: Failed password for root from 193.112.107.200 port 46420 ssh2 |
2020-08-10 07:29:40 |
| 45.129.33.15 | attackspambots | Sent packet to closed port: 8901 |
2020-08-10 07:19:02 |
| 83.147.153.226 | attackbotsspam | Dovecot Invalid User Login Attempt. |
2020-08-10 07:23:41 |
| 128.199.65.185 | attackspambots | Lines containing failures of 128.199.65.185 Aug 6 10:56:47 jarvis sshd[445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.65.185 user=r.r Aug 6 10:56:49 jarvis sshd[445]: Failed password for r.r from 128.199.65.185 port 34106 ssh2 Aug 6 10:56:51 jarvis sshd[445]: Received disconnect from 128.199.65.185 port 34106:11: Bye Bye [preauth] Aug 6 10:56:51 jarvis sshd[445]: Disconnected from authenticating user r.r 128.199.65.185 port 34106 [preauth] Aug 6 11:02:04 jarvis sshd[706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.65.185 user=r.r Aug 6 11:02:07 jarvis sshd[706]: Failed password for r.r from 128.199.65.185 port 45968 ssh2 Aug 6 11:02:08 jarvis sshd[706]: Received disconnect from 128.199.65.185 port 45968:11: Bye Bye [preauth] Aug 6 11:02:08 jarvis sshd[706]: Disconnected from authenticating user r.r 128.199.65.185 port 45968 [preauth] Aug 6 11:04:39 jarvi........ ------------------------------ |
2020-08-10 07:33:04 |
| 178.128.41.141 | attackspambots | Aug 9 16:40:41 lanister sshd[24423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.41.141 user=root Aug 9 16:40:43 lanister sshd[24423]: Failed password for root from 178.128.41.141 port 57894 ssh2 Aug 9 16:43:04 lanister sshd[24431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.41.141 user=root Aug 9 16:43:06 lanister sshd[24431]: Failed password for root from 178.128.41.141 port 44860 ssh2 |
2020-08-10 07:05:11 |
| 128.199.221.254 | attack | Aug 10 00:07:28 dev0-dcde-rnet sshd[30830]: Failed password for root from 128.199.221.254 port 56228 ssh2 Aug 10 00:11:36 dev0-dcde-rnet sshd[31099]: Failed password for root from 128.199.221.254 port 37752 ssh2 |
2020-08-10 07:16:45 |
| 200.146.84.48 | attack | Aug 9 19:31:22 vps46666688 sshd[28116]: Failed password for root from 200.146.84.48 port 38548 ssh2 ... |
2020-08-10 07:36:44 |
| 49.233.199.240 | attackbots | Aug 9 22:27:10 rocket sshd[9617]: Failed password for root from 49.233.199.240 port 34528 ssh2 Aug 9 22:36:16 rocket sshd[11036]: Failed password for root from 49.233.199.240 port 52814 ssh2 ... |
2020-08-10 07:30:43 |