City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.49.99.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56138
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.49.99.12. IN A
;; AUTHORITY SECTION:
. 326 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022112200 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 22 22:29:43 CST 2022
;; MSG SIZE rcvd: 105Host 12.99.49.214.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 12.99.49.214.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 43.243.75.14 | attackbotsspam | Dec 1 17:05:56 hcbbdb sshd\[10031\]: Invalid user www from 43.243.75.14 Dec 1 17:05:56 hcbbdb sshd\[10031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.243.75.14 Dec 1 17:05:57 hcbbdb sshd\[10031\]: Failed password for invalid user www from 43.243.75.14 port 48496 ssh2 Dec 1 17:14:00 hcbbdb sshd\[10894\]: Invalid user atomik from 43.243.75.14 Dec 1 17:14:00 hcbbdb sshd\[10894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.243.75.14 |
2019-12-02 03:44:47 |
| 185.200.118.72 | attack | firewall-block, port(s): 1080/tcp |
2019-12-02 03:51:33 |
| 64.107.80.16 | attackspambots | Dec 1 01:04:40 eola sshd[31077]: Invalid user licorne from 64.107.80.16 port 32788 Dec 1 01:04:40 eola sshd[31077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.107.80.16 Dec 1 01:04:42 eola sshd[31077]: Failed password for invalid user licorne from 64.107.80.16 port 32788 ssh2 Dec 1 01:04:42 eola sshd[31077]: Received disconnect from 64.107.80.16 port 32788:11: Bye Bye [preauth] Dec 1 01:04:42 eola sshd[31077]: Disconnected from 64.107.80.16 port 32788 [preauth] Dec 1 01:21:50 eola sshd[31774]: Invalid user licorne from 64.107.80.16 port 35846 Dec 1 01:21:50 eola sshd[31774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.107.80.16 Dec 1 01:21:53 eola sshd[31774]: Failed password for invalid user licorne from 64.107.80.16 port 35846 ssh2 Dec 1 01:21:53 eola sshd[31774]: Received disconnect from 64.107.80.16 port 35846:11: Bye Bye [preauth] Dec 1 01:21:53 eola sshd[3177........ ------------------------------- |
2019-12-02 03:46:01 |
| 104.236.192.6 | attackbots | Dec 1 09:43:32 php1 sshd\[24277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.192.6 user=root Dec 1 09:43:35 php1 sshd\[24277\]: Failed password for root from 104.236.192.6 port 46016 ssh2 Dec 1 09:48:55 php1 sshd\[24748\]: Invalid user hadoop from 104.236.192.6 Dec 1 09:48:55 php1 sshd\[24748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.192.6 Dec 1 09:48:56 php1 sshd\[24748\]: Failed password for invalid user hadoop from 104.236.192.6 port 58140 ssh2 |
2019-12-02 03:57:02 |
| 194.61.24.38 | attack | Connection by 194.61.24.38 on port: 3132 got caught by honeypot at 12/1/2019 1:38:24 PM |
2019-12-02 03:57:55 |
| 80.153.160.231 | attackspam | Lines containing failures of 80.153.160.231 Dec 1 14:25:59 shared07 sshd[2534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.153.160.231 user=r.r Dec 1 14:26:01 shared07 sshd[2534]: Failed password for r.r from 80.153.160.231 port 59581 ssh2 Dec 1 14:26:01 shared07 sshd[2534]: Received disconnect from 80.153.160.231 port 59581:11: Bye Bye [preauth] Dec 1 14:26:01 shared07 sshd[2534]: Disconnected from authenticating user r.r 80.153.160.231 port 59581 [preauth] Dec 1 14:46:30 shared07 sshd[9843]: Invalid user haertel from 80.153.160.231 port 43022 Dec 1 14:46:30 shared07 sshd[9843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.153.160.231 Dec 1 14:46:32 shared07 sshd[9843]: Failed password for invalid user haertel from 80.153.160.231 port 43022 ssh2 Dec 1 14:46:33 shared07 sshd[9843]: Received disconnect from 80.153.160.231 port 43022:11: Bye Bye [preauth] Dec 1 14:46:33 ........ ------------------------------ |
2019-12-02 04:25:37 |
| 220.167.100.60 | attackspam | Dec 1 06:57:17 *** sshd[8322]: Failed password for invalid user ftpuser from 220.167.100.60 port 37744 ssh2 |
2019-12-02 04:03:36 |
| 61.155.2.2 | attackbots | Dec 1 17:59:37 microserver sshd[38579]: Invalid user ddene from 61.155.2.2 port 47452 Dec 1 17:59:37 microserver sshd[38579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.155.2.2 Dec 1 17:59:39 microserver sshd[38579]: Failed password for invalid user ddene from 61.155.2.2 port 47452 ssh2 Dec 1 18:03:54 microserver sshd[39261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.155.2.2 user=mysql Dec 1 18:03:56 microserver sshd[39261]: Failed password for mysql from 61.155.2.2 port 49836 ssh2 Dec 1 18:16:40 microserver sshd[41206]: Invalid user grory from 61.155.2.2 port 56994 Dec 1 18:16:40 microserver sshd[41206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.155.2.2 Dec 1 18:16:42 microserver sshd[41206]: Failed password for invalid user grory from 61.155.2.2 port 56994 ssh2 Dec 1 18:21:03 microserver sshd[41878]: Invalid user pcap from 61.155.2.2 port 59380 Dec 1 18 |
2019-12-02 03:52:54 |
| 222.190.143.206 | attack | Dec 1 09:33:50 ny01 sshd[26794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.190.143.206 Dec 1 09:33:52 ny01 sshd[26794]: Failed password for invalid user kernel from 222.190.143.206 port 26922 ssh2 Dec 1 09:37:55 ny01 sshd[27162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.190.143.206 |
2019-12-02 04:07:02 |
| 70.88.253.123 | attackspam | Dec 1 19:17:52 yesfletchmain sshd\[11747\]: User root from 70.88.253.123 not allowed because not listed in AllowUsers Dec 1 19:17:52 yesfletchmain sshd\[11747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.88.253.123 user=root Dec 1 19:17:54 yesfletchmain sshd\[11747\]: Failed password for invalid user root from 70.88.253.123 port 4269 ssh2 Dec 1 19:26:25 yesfletchmain sshd\[12138\]: Invalid user yoshida from 70.88.253.123 port 31812 Dec 1 19:26:25 yesfletchmain sshd\[12138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.88.253.123 ... |
2019-12-02 03:48:08 |
| 154.50.2.29 | attack | 2019-12-01T15:24:06.929941abusebot-5.cloudsearch.cf sshd\[18884\]: Invalid user member from 154.50.2.29 port 38797 |
2019-12-02 04:04:02 |
| 62.117.113.50 | attackspam | Port Scan 1433 |
2019-12-02 04:17:41 |
| 49.88.112.75 | attack | Dec 2 00:57:15 gw1 sshd[10013]: Failed password for root from 49.88.112.75 port 41501 ssh2 Dec 2 00:57:17 gw1 sshd[10013]: Failed password for root from 49.88.112.75 port 41501 ssh2 ... |
2019-12-02 04:06:49 |
| 203.195.245.13 | attackbots | Dec 1 15:38:34 serwer sshd\[11797\]: User dovecot from 203.195.245.13 not allowed because not listed in AllowUsers Dec 1 15:38:34 serwer sshd\[11797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.245.13 user=dovecot Dec 1 15:38:36 serwer sshd\[11797\]: Failed password for invalid user dovecot from 203.195.245.13 port 51552 ssh2 ... |
2019-12-02 03:47:12 |
| 217.227.38.122 | attack | Dec 1 17:38:36 server sshd\[18865\]: Invalid user pi from 217.227.38.122 Dec 1 17:38:36 server sshd\[18865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=pd9e3267a.dip0.t-ipconnect.de Dec 1 17:38:36 server sshd\[18867\]: Invalid user pi from 217.227.38.122 Dec 1 17:38:36 server sshd\[18867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=pd9e3267a.dip0.t-ipconnect.de Dec 1 17:38:38 server sshd\[18865\]: Failed password for invalid user pi from 217.227.38.122 port 44636 ssh2 ... |
2019-12-02 03:46:53 |