City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.95.41.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9734
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;213.95.41.4. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021801 1800 900 604800 86400
;; Query time: 50 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 01:44:16 CST 2022
;; MSG SIZE rcvd: 1044.41.95.213.in-addr.arpa domain name pointer ha.ubuntu-eu.org.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
4.41.95.213.in-addr.arpa name = ha.ubuntu-eu.org.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.235.229.211 | attackspambots | Invalid user prometheus from 49.235.229.211 port 56384 |
2020-09-20 18:20:47 |
| 81.68.97.184 | attackspam | 81.68.97.184 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 20 00:39:08 server4 sshd[29097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.163.236 user=root Sep 20 00:39:10 server4 sshd[29097]: Failed password for root from 106.13.163.236 port 44696 ssh2 Sep 20 00:39:10 server4 sshd[29040]: Failed password for root from 93.149.12.2 port 60092 ssh2 Sep 20 00:33:50 server4 sshd[26066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.97.184 user=root Sep 20 00:33:51 server4 sshd[26066]: Failed password for root from 81.68.97.184 port 52812 ssh2 Sep 20 00:33:13 server4 sshd[25425]: Failed password for root from 78.139.216.117 port 55360 ssh2 IP Addresses Blocked: 106.13.163.236 (CN/China/-) 93.149.12.2 (IT/Italy/-) |
2020-09-20 18:38:57 |
| 81.30.144.119 | attackbotsspam | Scanned 1 times in the last 24 hours on port 22 |
2020-09-20 18:54:00 |
| 74.82.47.57 | attack | Found on Github Combined on 3 lists / proto=6 . srcport=60723 . dstport=631 . (1709) |
2020-09-20 18:34:45 |
| 148.72.212.159 | attack | 148.72.212.159 - - \[20/Sep/2020:03:15:48 +0200\] "POST /wp-login.php HTTP/1.1" 200 11220 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 148.72.212.159 - - \[20/Sep/2020:03:48:43 +0200\] "POST /wp-login.php HTTP/1.1" 200 11220 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2020-09-20 18:23:43 |
| 66.70.160.187 | attackbotsspam | Automatic report - Banned IP Access |
2020-09-20 18:51:20 |
| 218.92.0.224 | attackspambots | Sep 20 12:23:00 santamaria sshd\[25650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.224 user=root Sep 20 12:23:02 santamaria sshd\[25650\]: Failed password for root from 218.92.0.224 port 16786 ssh2 Sep 20 12:23:11 santamaria sshd\[25650\]: Failed password for root from 218.92.0.224 port 16786 ssh2 ... |
2020-09-20 18:37:28 |
| 150.95.66.29 | attackspam | TCP ports : 674 / 14614 / 20618 |
2020-09-20 18:43:26 |
| 112.85.42.176 | attackspam | 2020-09-20T13:27:31.346451afi-git.jinr.ru sshd[25160]: Failed password for root from 112.85.42.176 port 57670 ssh2 2020-09-20T13:27:34.628543afi-git.jinr.ru sshd[25160]: Failed password for root from 112.85.42.176 port 57670 ssh2 2020-09-20T13:27:38.497791afi-git.jinr.ru sshd[25160]: Failed password for root from 112.85.42.176 port 57670 ssh2 2020-09-20T13:27:38.497927afi-git.jinr.ru sshd[25160]: error: maximum authentication attempts exceeded for root from 112.85.42.176 port 57670 ssh2 [preauth] 2020-09-20T13:27:38.497940afi-git.jinr.ru sshd[25160]: Disconnecting: Too many authentication failures [preauth] ... |
2020-09-20 18:29:00 |
| 218.92.0.211 | attackbotsspam | Sep 20 06:40:08 server2 sshd\[7352\]: User root from 218.92.0.211 not allowed because not listed in AllowUsers Sep 20 06:41:40 server2 sshd\[7406\]: User root from 218.92.0.211 not allowed because not listed in AllowUsers Sep 20 06:43:23 server2 sshd\[7485\]: User root from 218.92.0.211 not allowed because not listed in AllowUsers Sep 20 06:46:29 server2 sshd\[7771\]: User root from 218.92.0.211 not allowed because not listed in AllowUsers Sep 20 06:46:29 server2 sshd\[7769\]: User root from 218.92.0.211 not allowed because not listed in AllowUsers Sep 20 06:49:13 server2 sshd\[7895\]: User root from 218.92.0.211 not allowed because not listed in AllowUsers |
2020-09-20 18:58:22 |
| 172.245.7.189 | attack | Sep 20 11:38:34 Ubuntu-1404-trusty-64-minimal sshd\[2654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.245.7.189 user=root Sep 20 11:38:36 Ubuntu-1404-trusty-64-minimal sshd\[2654\]: Failed password for root from 172.245.7.189 port 51292 ssh2 Sep 20 11:38:43 Ubuntu-1404-trusty-64-minimal sshd\[2714\]: Invalid user oracle from 172.245.7.189 Sep 20 11:38:43 Ubuntu-1404-trusty-64-minimal sshd\[2714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.245.7.189 Sep 20 11:38:45 Ubuntu-1404-trusty-64-minimal sshd\[2714\]: Failed password for invalid user oracle from 172.245.7.189 port 59424 ssh2 |
2020-09-20 18:36:28 |
| 159.253.46.18 | attackspam | 159.253.46.18 - - [20/Sep/2020:12:20:07 +0200] "POST /wp-login.php HTTP/1.0" 200 4794 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-20 18:59:05 |
| 49.232.8.218 | attack | B: Abusive ssh attack |
2020-09-20 18:26:26 |
| 91.121.81.12 | attack | Sep 20 15:56:59 mx sshd[815630]: Invalid user debian from 91.121.81.12 port 42846 Sep 20 15:56:59 mx sshd[815630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.81.12 Sep 20 15:56:59 mx sshd[815630]: Invalid user debian from 91.121.81.12 port 42846 Sep 20 15:57:02 mx sshd[815630]: Failed password for invalid user debian from 91.121.81.12 port 42846 ssh2 Sep 20 15:57:18 mx sshd[815635]: Invalid user debian from 91.121.81.12 port 58534 ... |
2020-09-20 18:39:52 |
| 82.62.245.237 | attackbots | Automatic report - Banned IP Access |
2020-09-20 18:57:42 |