City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 215.85.95.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18223
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;215.85.95.48. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021401 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 08:43:31 CST 2025
;; MSG SIZE rcvd: 105Host 48.95.85.215.in-addr.arpa not found: 2(SERVFAIL)
server can't find 215.85.95.48.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.42.137 | attack | Apr 3 23:55:56 dcd-gentoo sshd[21032]: User root from 222.186.42.137 not allowed because none of user's groups are listed in AllowGroups Apr 3 23:55:59 dcd-gentoo sshd[21032]: error: PAM: Authentication failure for illegal user root from 222.186.42.137 Apr 3 23:55:56 dcd-gentoo sshd[21032]: User root from 222.186.42.137 not allowed because none of user's groups are listed in AllowGroups Apr 3 23:55:59 dcd-gentoo sshd[21032]: error: PAM: Authentication failure for illegal user root from 222.186.42.137 Apr 3 23:55:56 dcd-gentoo sshd[21032]: User root from 222.186.42.137 not allowed because none of user's groups are listed in AllowGroups Apr 3 23:55:59 dcd-gentoo sshd[21032]: error: PAM: Authentication failure for illegal user root from 222.186.42.137 Apr 3 23:55:59 dcd-gentoo sshd[21032]: Failed keyboard-interactive/pam for invalid user root from 222.186.42.137 port 30209 ssh2 ... |
2020-04-04 05:59:15 |
| 222.186.180.142 | attack | Apr 3 23:50:33 dcd-gentoo sshd[20858]: User root from 222.186.180.142 not allowed because none of user's groups are listed in AllowGroups Apr 3 23:50:36 dcd-gentoo sshd[20858]: error: PAM: Authentication failure for illegal user root from 222.186.180.142 Apr 3 23:50:33 dcd-gentoo sshd[20858]: User root from 222.186.180.142 not allowed because none of user's groups are listed in AllowGroups Apr 3 23:50:36 dcd-gentoo sshd[20858]: error: PAM: Authentication failure for illegal user root from 222.186.180.142 Apr 3 23:50:33 dcd-gentoo sshd[20858]: User root from 222.186.180.142 not allowed because none of user's groups are listed in AllowGroups Apr 3 23:50:36 dcd-gentoo sshd[20858]: error: PAM: Authentication failure for illegal user root from 222.186.180.142 Apr 3 23:50:36 dcd-gentoo sshd[20858]: Failed keyboard-interactive/pam for invalid user root from 222.186.180.142 port 30397 ssh2 ... |
2020-04-04 05:56:37 |
| 195.224.138.61 | attackbots | Apr 3 23:41:30 [HOSTNAME] sshd[15441]: Invalid user rx from 195.224.138.61 port 33506 Apr 3 23:41:30 [HOSTNAME] sshd[15441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.224.138.61 Apr 3 23:41:32 [HOSTNAME] sshd[15441]: Failed password for invalid user rx from 195.224.138.61 port 33506 ssh2 ... |
2020-04-04 06:20:24 |
| 182.254.151.31 | attack | Apr 4 01:18:14 www sshd\[57373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.151.31 user=root Apr 4 01:18:16 www sshd\[57373\]: Failed password for root from 182.254.151.31 port 25554 ssh2 Apr 4 01:21:56 www sshd\[57441\]: Invalid user nginx from 182.254.151.31 ... |
2020-04-04 06:26:47 |
| 111.229.193.22 | attackbots | Apr 3 22:03:04 rama sshd[814155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.193.22 user=r.r Apr 3 22:03:06 rama sshd[814155]: Failed password for r.r from 111.229.193.22 port 56220 ssh2 Apr 3 22:03:07 rama sshd[814155]: Received disconnect from 111.229.193.22: 11: Bye Bye [preauth] Apr 3 22:09:27 rama sshd[816507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.193.22 user=r.r Apr 3 22:09:29 rama sshd[816507]: Failed password for r.r from 111.229.193.22 port 39254 ssh2 Apr 3 22:09:30 rama sshd[816507]: Received disconnect from 111.229.193.22: 11: Bye Bye [preauth] Apr 3 22:16:27 rama sshd[819675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.193.22 user=r.r Apr 3 22:16:29 rama sshd[819675]: Failed password for r.r from 111.229.193.22 port 55054 ssh2 Apr 3 22:16:29 rama sshd[819675]: Received disconnect from........ ------------------------------- |
2020-04-04 06:12:31 |
| 35.246.23.22 | attackbots | Lines containing failures of 35.246.23.22 Apr 3 21:04:58 UTC__SANYALnet-Labs__cac12 sshd[29078]: Connection from 35.246.23.22 port 39908 on 45.62.253.138 port 22 Apr 3 21:05:00 UTC__SANYALnet-Labs__cac12 sshd[29078]: Invalid user portal from 35.246.23.22 port 39908 Apr 3 21:05:02 UTC__SANYALnet-Labs__cac12 sshd[29078]: Failed password for invalid user portal from 35.246.23.22 port 39908 ssh2 Apr 3 21:05:02 UTC__SANYALnet-Labs__cac12 sshd[29078]: Received disconnect from 35.246.23.22 port 39908:11: Bye Bye [preauth] Apr 3 21:05:02 UTC__SANYALnet-Labs__cac12 sshd[29078]: Disconnected from 35.246.23.22 port 39908 [preauth] Apr 3 21:30:54 UTC__SANYALnet-Labs__cac12 sshd[29607]: Connection from 35.246.23.22 port 39044 on 45.62.253.138 port 22 Apr 3 21:30:59 UTC__SANYALnet-Labs__cac12 sshd[29607]: Failed password for invalid user r.r from 35.246.23.22 port 39044 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=35.246.23.22 |
2020-04-04 06:09:54 |
| 106.51.80.198 | attackbots | Apr 3 23:41:54 ns3164893 sshd[2736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.80.198 user=root Apr 3 23:41:55 ns3164893 sshd[2736]: Failed password for root from 106.51.80.198 port 41072 ssh2 ... |
2020-04-04 05:50:25 |
| 108.55.195.253 | attackspambots | Unauthorized connection attempt detected from IP address 108.55.195.253 to port 23 |
2020-04-04 06:15:43 |
| 113.161.62.255 | attack | 2020-04-03 23:31:54 plain_virtual_exim authenticator failed for ([127.0.0.1]) [113.161.62.255]: 535 Incorrect authentication data ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.161.62.255 |
2020-04-04 06:24:31 |
| 196.52.84.9 | attack | 0,58-02/04 [bc01/m11] PostRequest-Spammer scoring: lisboa |
2020-04-04 06:02:19 |
| 173.249.60.88 | attackspambots | firewall-block, port(s): 69/udp |
2020-04-04 05:57:56 |
| 91.212.150.151 | attack | Honeypot hit. |
2020-04-04 06:30:43 |
| 222.186.190.2 | attackspambots | 2020-04-03T22:06:55.018779abusebot.cloudsearch.cf sshd[29313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.2 user=root 2020-04-03T22:06:56.624492abusebot.cloudsearch.cf sshd[29313]: Failed password for root from 222.186.190.2 port 56410 ssh2 2020-04-03T22:06:59.783525abusebot.cloudsearch.cf sshd[29313]: Failed password for root from 222.186.190.2 port 56410 ssh2 2020-04-03T22:06:55.018779abusebot.cloudsearch.cf sshd[29313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.2 user=root 2020-04-03T22:06:56.624492abusebot.cloudsearch.cf sshd[29313]: Failed password for root from 222.186.190.2 port 56410 ssh2 2020-04-03T22:06:59.783525abusebot.cloudsearch.cf sshd[29313]: Failed password for root from 222.186.190.2 port 56410 ssh2 2020-04-03T22:06:55.018779abusebot.cloudsearch.cf sshd[29313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.1 ... |
2020-04-04 06:10:42 |
| 190.189.12.210 | attackbots | 2020-04-03T21:46:52.906709abusebot-2.cloudsearch.cf sshd[11063]: Invalid user centos from 190.189.12.210 port 43238 2020-04-03T21:46:52.915627abusebot-2.cloudsearch.cf sshd[11063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.189.12.210 2020-04-03T21:46:52.906709abusebot-2.cloudsearch.cf sshd[11063]: Invalid user centos from 190.189.12.210 port 43238 2020-04-03T21:46:55.509844abusebot-2.cloudsearch.cf sshd[11063]: Failed password for invalid user centos from 190.189.12.210 port 43238 ssh2 2020-04-03T21:51:40.388049abusebot-2.cloudsearch.cf sshd[11367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.189.12.210 user=root 2020-04-03T21:51:42.851883abusebot-2.cloudsearch.cf sshd[11367]: Failed password for root from 190.189.12.210 port 55902 ssh2 2020-04-03T21:56:20.468157abusebot-2.cloudsearch.cf sshd[11729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1 ... |
2020-04-04 06:14:48 |
| 89.134.119.205 | attackbotsspam | Automatic report - Port Scan Attack |
2020-04-04 06:25:58 |