City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.96.25.150
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17033
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.96.25.150. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021300 1800 900 604800 86400
;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 21:54:31 CST 2025
;; MSG SIZE rcvd: 106Host 150.25.96.214.in-addr.arpa not found: 2(SERVFAIL)
server can't find 214.96.25.150.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 84.195.206.203 | attackbots | Jan 5 23:30:12 tuxlinux sshd[8830]: Invalid user pi from 84.195.206.203 port 39748 Jan 5 23:30:12 tuxlinux sshd[8830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.195.206.203 Jan 5 23:30:12 tuxlinux sshd[8830]: Invalid user pi from 84.195.206.203 port 39748 Jan 5 23:30:12 tuxlinux sshd[8830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.195.206.203 Jan 5 23:30:12 tuxlinux sshd[8832]: Invalid user pi from 84.195.206.203 port 39754 ... |
2020-01-06 06:31:10 |
| 185.175.93.105 | attack | 01/05/2020-17:18:52.182813 185.175.93.105 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-01-06 06:24:40 |
| 185.209.0.89 | attack | Jan 5 23:19:38 debian-2gb-nbg1-2 kernel: \[522100.115439\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.209.0.89 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=156 PROTO=TCP SPT=59643 DPT=9500 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-01-06 06:25:36 |
| 189.195.41.134 | attack | Jan 5 23:19:09 legacy sshd[2073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.195.41.134 Jan 5 23:19:11 legacy sshd[2073]: Failed password for invalid user cacti from 189.195.41.134 port 52488 ssh2 Jan 5 23:22:17 legacy sshd[2274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.195.41.134 ... |
2020-01-06 06:29:12 |
| 222.186.175.183 | attackbotsspam | Jan 5 23:07:04 h2779839 sshd[7370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root Jan 5 23:07:07 h2779839 sshd[7370]: Failed password for root from 222.186.175.183 port 56986 ssh2 Jan 5 23:07:21 h2779839 sshd[7370]: error: maximum authentication attempts exceeded for root from 222.186.175.183 port 56986 ssh2 [preauth] Jan 5 23:07:04 h2779839 sshd[7370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root Jan 5 23:07:07 h2779839 sshd[7370]: Failed password for root from 222.186.175.183 port 56986 ssh2 Jan 5 23:07:21 h2779839 sshd[7370]: error: maximum authentication attempts exceeded for root from 222.186.175.183 port 56986 ssh2 [preauth] Jan 5 23:07:25 h2779839 sshd[7372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root Jan 5 23:07:27 h2779839 sshd[7372]: Failed password for root fr ... |
2020-01-06 06:08:36 |
| 91.74.75.222 | attack | Honeypot attack, port: 23, PTR: PTR record not found |
2020-01-06 06:41:57 |
| 110.49.70.243 | attackspam | detected by Fail2Ban |
2020-01-06 06:04:13 |
| 193.150.6.222 | attackspambots | Jan 5 23:11:04 debian-2gb-nbg1-2 kernel: \[521585.305912\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=193.150.6.222 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=11115 PROTO=TCP SPT=54527 DPT=1470 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-01-06 06:38:59 |
| 132.145.18.157 | attackspambots | 2020-01-05T21:49:51.685010abusebot-2.cloudsearch.cf sshd[5834]: Invalid user castis from 132.145.18.157 port 53562 2020-01-05T21:49:51.690894abusebot-2.cloudsearch.cf sshd[5834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.18.157 2020-01-05T21:49:51.685010abusebot-2.cloudsearch.cf sshd[5834]: Invalid user castis from 132.145.18.157 port 53562 2020-01-05T21:49:54.038310abusebot-2.cloudsearch.cf sshd[5834]: Failed password for invalid user castis from 132.145.18.157 port 53562 ssh2 2020-01-05T21:51:32.976068abusebot-2.cloudsearch.cf sshd[5920]: Invalid user ubuntu from 132.145.18.157 port 45348 2020-01-05T21:51:32.984561abusebot-2.cloudsearch.cf sshd[5920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.18.157 2020-01-05T21:51:32.976068abusebot-2.cloudsearch.cf sshd[5920]: Invalid user ubuntu from 132.145.18.157 port 45348 2020-01-05T21:51:34.529211abusebot-2.cloudsearch.cf sshd[5920]: Fa ... |
2020-01-06 06:03:28 |
| 160.238.156.142 | attackbotsspam | Honeypot attack, port: 23, PTR: 160-238-156-142.itanetprovedor.net.br. |
2020-01-06 06:26:05 |
| 142.93.148.51 | attackspambots | Unauthorized connection attempt detected from IP address 142.93.148.51 to port 2220 [J] |
2020-01-06 06:06:24 |
| 212.237.53.169 | attackspambots | Jan 5 12:15:17 hanapaa sshd\[24316\]: Invalid user guest from 212.237.53.169 Jan 5 12:15:17 hanapaa sshd\[24316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.53.169 Jan 5 12:15:19 hanapaa sshd\[24316\]: Failed password for invalid user guest from 212.237.53.169 port 60104 ssh2 Jan 5 12:18:03 hanapaa sshd\[24579\]: Invalid user tw from 212.237.53.169 Jan 5 12:18:03 hanapaa sshd\[24579\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.53.169 |
2020-01-06 06:36:53 |
| 222.186.15.10 | attackbotsspam | Jan 6 00:25:44 server2 sshd\[8796\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers Jan 6 00:25:45 server2 sshd\[8798\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers Jan 6 00:25:45 server2 sshd\[8800\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers Jan 6 00:28:46 server2 sshd\[8892\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers Jan 6 00:34:07 server2 sshd\[9283\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers Jan 6 00:34:07 server2 sshd\[9285\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers |
2020-01-06 06:36:22 |
| 101.109.115.27 | attackbots | port scan and connect, tcp 22 (ssh) |
2020-01-06 06:33:46 |
| 175.37.152.185 | attackbotsspam | RDP Bruteforce |
2020-01-06 06:03:12 |