City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.49.65.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17390
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.49.65.0. IN A
;; AUTHORITY SECTION:
. 420 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023030201 1800 900 604800 86400
;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 03 11:23:40 CST 2023
;; MSG SIZE rcvd: 104Host 0.65.49.214.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 0.65.49.214.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 27.150.184.25 | attackbotsspam | SSH bruteforce |
2020-10-08 17:22:27 |
| 195.224.138.61 | attack | SSH BruteForce Attack |
2020-10-08 16:54:39 |
| 2.57.121.19 | attackspambots | Lines containing failures of 2.57.121.19 Oct 7 12:37:11 nextcloud sshd[23963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:37:13 nextcloud sshd[23963]: Failed password for r.r from 2.57.121.19 port 47782 ssh2 Oct 7 12:37:13 nextcloud sshd[23963]: Received disconnect from 2.57.121.19 port 47782:11: Bye Bye [preauth] Oct 7 12:37:13 nextcloud sshd[23963]: Disconnected from authenticating user r.r 2.57.121.19 port 47782 [preauth] Oct 7 12:53:35 nextcloud sshd[26770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:53:37 nextcloud sshd[26770]: Failed password for r.r from 2.57.121.19 port 38478 ssh2 Oct 7 12:53:37 nextcloud sshd[26770]: Received disconnect from 2.57.121.19 port 38478:11: Bye Bye [preauth] Oct 7 12:53:37 nextcloud sshd[26770]: Disconnected from authenticating user r.r 2.57.121.19 port 38478 [preauth] Oct 7 1........ ------------------------------ |
2020-10-08 17:27:23 |
| 23.225.182.140 | attack | 2020-10-08T10:33:42.872934n23.at sshd[4192456]: Failed password for root from 23.225.182.140 port 54040 ssh2 2020-10-08T10:38:15.556801n23.at sshd[2744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.225.182.140 user=root 2020-10-08T10:38:18.138779n23.at sshd[2744]: Failed password for root from 23.225.182.140 port 57062 ssh2 ... |
2020-10-08 16:51:32 |
| 191.53.192.64 | attackspam | Oct 8 07:07:58 mail.srvfarm.net postfix/smtpd[3524215]: warning: unknown[191.53.192.64]: SASL PLAIN authentication failed: Oct 8 07:07:59 mail.srvfarm.net postfix/smtpd[3524215]: lost connection after AUTH from unknown[191.53.192.64] Oct 8 07:14:03 mail.srvfarm.net postfix/smtps/smtpd[3544905]: warning: unknown[191.53.192.64]: SASL PLAIN authentication failed: Oct 8 07:14:04 mail.srvfarm.net postfix/smtps/smtpd[3544905]: lost connection after AUTH from unknown[191.53.192.64] Oct 8 07:17:08 mail.srvfarm.net postfix/smtpd[3524213]: warning: unknown[191.53.192.64]: SASL PLAIN authentication failed: |
2020-10-08 17:24:21 |
| 132.232.21.19 | attack | Oct 8 00:35:38 journals sshd\[39548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.21.19 user=root Oct 8 00:35:40 journals sshd\[39548\]: Failed password for root from 132.232.21.19 port 55812 ssh2 Oct 8 00:39:10 journals sshd\[39842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.21.19 user=root Oct 8 00:39:12 journals sshd\[39842\]: Failed password for root from 132.232.21.19 port 50674 ssh2 Oct 8 00:40:45 journals sshd\[40039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.21.19 user=root ... |
2020-10-08 17:17:58 |
| 164.90.216.156 | attackspambots | Oct 8 05:53:19 firewall sshd[18495]: Failed password for root from 164.90.216.156 port 42626 ssh2 Oct 8 05:56:49 firewall sshd[18598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.90.216.156 user=root Oct 8 05:56:52 firewall sshd[18598]: Failed password for root from 164.90.216.156 port 47360 ssh2 ... |
2020-10-08 17:01:14 |
| 110.164.163.54 | attack | Oct 7 04:52:33 datentool sshd[4173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.164.163.54 user=r.r Oct 7 04:52:35 datentool sshd[4173]: Failed password for r.r from 110.164.163.54 port 44540 ssh2 Oct 7 05:05:55 datentool sshd[4453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.164.163.54 user=r.r Oct 7 05:05:57 datentool sshd[4453]: Failed password for r.r from 110.164.163.54 port 44684 ssh2 Oct 7 05:12:30 datentool sshd[4509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.164.163.54 user=r.r Oct 7 05:12:31 datentool sshd[4509]: Failed password for r.r from 110.164.163.54 port 49714 ssh2 Oct 7 05:18:52 datentool sshd[4609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.164.163.54 user=r.r Oct 7 05:18:53 datentool sshd[4609]: Failed password for r.r from 110.164.163.54 port........ ------------------------------- |
2020-10-08 17:00:25 |
| 2.57.122.186 | attackbots | (sshd) Failed SSH login from 2.57.122.186 (RO/Romania/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 8 05:04:28 optimus sshd[11041]: Did not receive identification string from 2.57.122.186 Oct 8 05:05:06 optimus sshd[11194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.122.186 user=root Oct 8 05:05:08 optimus sshd[11194]: Failed password for root from 2.57.122.186 port 55220 ssh2 Oct 8 05:05:40 optimus sshd[11343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.122.186 user=root Oct 8 05:05:42 optimus sshd[11343]: Failed password for root from 2.57.122.186 port 52626 ssh2 |
2020-10-08 17:18:15 |
| 151.80.140.166 | attackspambots | wp-login.php |
2020-10-08 16:51:11 |
| 79.137.24.13 | attack | Oct 7 06:43:57 datentool sshd[5705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.24.13 user=r.r Oct 7 06:44:00 datentool sshd[5705]: Failed password for r.r from 79.137.24.13 port 60806 ssh2 Oct 7 06:59:38 datentool sshd[5884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.24.13 user=r.r Oct 7 06:59:40 datentool sshd[5884]: Failed password for r.r from 79.137.24.13 port 59552 ssh2 Oct 7 07:08:07 datentool sshd[6008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.24.13 user=r.r Oct 7 07:08:10 datentool sshd[6008]: Failed password for r.r from 79.137.24.13 port 39480 ssh2 Oct 7 07:16:31 datentool sshd[6253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.24.13 user=r.r Oct 7 07:16:33 datentool sshd[6253]: Failed password for r.r from 79.137.24.13 port 47642 ssh2 Oct ........ ------------------------------- |
2020-10-08 17:05:59 |
| 71.211.144.1 | attack | Oct 8 11:09:11 vpn01 sshd[8805]: Failed password for root from 71.211.144.1 port 56460 ssh2 ... |
2020-10-08 17:19:45 |
| 49.232.132.144 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-10-08 17:19:58 |
| 212.70.149.5 | attack | Oct 8 10:50:30 galaxy event: galaxy/lswi: smtp: alexine@uni-potsdam.de [212.70.149.5] authentication failure using internet password Oct 8 10:50:51 galaxy event: galaxy/lswi: smtp: alexis@uni-potsdam.de [212.70.149.5] authentication failure using internet password Oct 8 10:51:12 galaxy event: galaxy/lswi: smtp: alexus@uni-potsdam.de [212.70.149.5] authentication failure using internet password Oct 8 10:51:33 galaxy event: galaxy/lswi: smtp: alf@uni-potsdam.de [212.70.149.5] authentication failure using internet password Oct 8 10:51:54 galaxy event: galaxy/lswi: smtp: alfi@uni-potsdam.de [212.70.149.5] authentication failure using internet password ... |
2020-10-08 16:53:51 |
| 83.97.20.30 | attackbots | Icarus honeypot on github |
2020-10-08 17:30:41 |