City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 217.94.85.61
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28701
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;217.94.85.61. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 154 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 18:24:07 CST 2025
;; MSG SIZE rcvd: 105
Host 61.85.94.217.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 61.85.94.217.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 140.143.16.248 | attackspam | Lines containing failures of 140.143.16.248 Nov 5 19:03:17 install sshd[17417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.16.248 user=r.r Nov 5 19:03:18 install sshd[17417]: Failed password for r.r from 140.143.16.248 port 47792 ssh2 Nov 5 19:03:18 install sshd[17417]: Received disconnect from 140.143.16.248 port 47792:11: Bye Bye [preauth] Nov 5 19:03:18 install sshd[17417]: Disconnected from authenticating user r.r 140.143.16.248 port 47792 [preauth] Nov 5 19:26:59 install sshd[21875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.16.248 user=r.r Nov 5 19:27:01 install sshd[21875]: Failed password for r.r from 140.143.16.248 port 38530 ssh2 Nov 5 19:27:02 install sshd[21875]: Received disconnect from 140.143.16.248 port 38530:11: Bye Bye [preauth] Nov 5 19:27:02 install sshd[21875]: Disconnected from authenticating user r.r 140.143.16.248 port 38530 [preaut........ ------------------------------ |
2019-11-09 15:21:58 |
| 46.38.144.57 | attackspam | Nov 9 08:19:07 webserver postfix/smtpd\[15097\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 9 08:19:44 webserver postfix/smtpd\[15072\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 9 08:20:21 webserver postfix/smtpd\[15099\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 9 08:20:59 webserver postfix/smtpd\[14456\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 9 08:21:36 webserver postfix/smtpd\[15099\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-11-09 15:24:02 |
| 106.13.198.162 | attackspambots | Nov 6 01:28:44 h2065291 sshd[26148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.198.162 user=r.r Nov 6 01:28:46 h2065291 sshd[26148]: Failed password for r.r from 106.13.198.162 port 44950 ssh2 Nov 6 01:28:46 h2065291 sshd[26148]: Received disconnect from 106.13.198.162: 11: Bye Bye [preauth] Nov 6 01:34:59 h2065291 sshd[26177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.198.162 user=r.r Nov 6 01:35:01 h2065291 sshd[26177]: Failed password for r.r from 106.13.198.162 port 35068 ssh2 Nov 6 01:35:02 h2065291 sshd[26177]: Received disconnect from 106.13.198.162: 11: Bye Bye [preauth] Nov 6 01:39:55 h2065291 sshd[26278]: Invalid user fy from 106.13.198.162 Nov 6 01:39:55 h2065291 sshd[26278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.198.162 Nov 6 01:39:57 h2065291 sshd[26278]: Failed password for invalid us........ ------------------------------- |
2019-11-09 15:18:18 |
| 134.73.51.241 | attackbotsspam | Postfix DNSBL listed. Trying to send SPAM. |
2019-11-09 15:03:17 |
| 54.38.222.82 | attackspam | Lines containing failures of 54.38.222.82 Nov 8 12:09:26 kopano sshd[27639]: Did not receive identification string from 54.38.222.82 port 60986 Nov 8 14:47:11 kopano sshd[963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.222.82 user=r.r Nov 8 14:47:13 kopano sshd[963]: Failed password for r.r from 54.38.222.82 port 43772 ssh2 Nov 8 14:47:13 kopano sshd[963]: Received disconnect from 54.38.222.82 port 43772:11: Normal Shutdown, Thank you for playing [preauth] Nov 8 14:47:13 kopano sshd[963]: Disconnected from authenticating user r.r 54.38.222.82 port 43772 [preauth] Nov 8 14:47:13 kopano sshd[965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.222.82 user=r.r Nov 8 14:47:15 kopano sshd[965]: Failed password for r.r from 54.38.222.82 port 45362 ssh2 Nov 8 14:47:15 kopano sshd[965]: Received disconnect from 54.38.222.82 port 45362:11: Normal Shutdown, Thank you for pl........ ------------------------------ |
2019-11-09 14:45:52 |
| 202.90.198.213 | attackspam | Nov 9 07:36:00 srv-ubuntu-dev3 sshd[121532]: Invalid user Studentenclub from 202.90.198.213 Nov 9 07:36:00 srv-ubuntu-dev3 sshd[121532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.90.198.213 Nov 9 07:36:00 srv-ubuntu-dev3 sshd[121532]: Invalid user Studentenclub from 202.90.198.213 Nov 9 07:36:01 srv-ubuntu-dev3 sshd[121532]: Failed password for invalid user Studentenclub from 202.90.198.213 port 40502 ssh2 Nov 9 07:40:35 srv-ubuntu-dev3 sshd[122097]: Invalid user freddie from 202.90.198.213 Nov 9 07:40:35 srv-ubuntu-dev3 sshd[122097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.90.198.213 Nov 9 07:40:35 srv-ubuntu-dev3 sshd[122097]: Invalid user freddie from 202.90.198.213 Nov 9 07:40:37 srv-ubuntu-dev3 sshd[122097]: Failed password for invalid user freddie from 202.90.198.213 port 51116 ssh2 Nov 9 07:45:14 srv-ubuntu-dev3 sshd[122422]: pam_unix(sshd:auth): authentication failure; ... |
2019-11-09 14:51:22 |
| 51.68.47.45 | attackspambots | Nov 9 02:13:15 plusreed sshd[6372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.45 user=root Nov 9 02:13:17 plusreed sshd[6372]: Failed password for root from 51.68.47.45 port 47972 ssh2 ... |
2019-11-09 15:23:10 |
| 110.80.17.26 | attack | Nov 9 08:03:46 dedicated sshd[6952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.80.17.26 user=root Nov 9 08:03:48 dedicated sshd[6952]: Failed password for root from 110.80.17.26 port 46186 ssh2 Nov 9 08:08:07 dedicated sshd[7654]: Invalid user la from 110.80.17.26 port 33904 Nov 9 08:08:07 dedicated sshd[7654]: Invalid user la from 110.80.17.26 port 33904 |
2019-11-09 15:14:33 |
| 51.68.189.69 | attack | Nov 9 07:51:27 vps01 sshd[24712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.189.69 Nov 9 07:51:29 vps01 sshd[24712]: Failed password for invalid user Adrien123 from 51.68.189.69 port 56213 ssh2 |
2019-11-09 15:08:23 |
| 49.88.112.116 | attackspam | Nov 9 01:56:00 ny01 sshd[2233]: Failed password for root from 49.88.112.116 port 27446 ssh2 Nov 9 01:56:03 ny01 sshd[2233]: Failed password for root from 49.88.112.116 port 27446 ssh2 Nov 9 01:56:07 ny01 sshd[2233]: Failed password for root from 49.88.112.116 port 27446 ssh2 |
2019-11-09 14:59:27 |
| 46.245.100.192 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/46.245.100.192/ IR - 1H : (64) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IR NAME ASN : ASN43754 IP : 46.245.100.192 CIDR : 46.245.100.0/22 PREFIX COUNT : 183 UNIQUE IP COUNT : 163072 ATTACKS DETECTED ASN43754 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-09 07:30:00 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN - data recovery |
2019-11-09 14:43:30 |
| 192.144.169.228 | attackspam | Nov 9 07:39:41 vps01 sshd[24573]: Failed password for root from 192.144.169.228 port 40612 ssh2 |
2019-11-09 15:18:01 |
| 80.210.28.44 | attackbots | Automatic report - Port Scan Attack |
2019-11-09 15:13:12 |
| 134.209.147.198 | attackspam | Nov 9 07:29:52 zulu412 sshd\[11546\]: Invalid user chan from 134.209.147.198 port 36960 Nov 9 07:29:52 zulu412 sshd\[11546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.147.198 Nov 9 07:29:54 zulu412 sshd\[11546\]: Failed password for invalid user chan from 134.209.147.198 port 36960 ssh2 ... |
2019-11-09 14:47:02 |
| 106.13.117.96 | attackspambots | Nov 9 07:38:56 localhost sshd\[9176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.117.96 user=root Nov 9 07:38:58 localhost sshd\[9176\]: Failed password for root from 106.13.117.96 port 58174 ssh2 Nov 9 07:44:16 localhost sshd\[9822\]: Invalid user kartel from 106.13.117.96 port 38150 Nov 9 07:44:16 localhost sshd\[9822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.117.96 |
2019-11-09 15:05:23 |