City: unknown
Region: unknown
Country: Multicast Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 225.99.212.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37130
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;225.99.212.38. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012700 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 16:52:11 CST 2025
;; MSG SIZE rcvd: 106Host 38.212.99.225.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 38.212.99.225.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 201.174.182.159 | attack | Sep 13 17:45:57 ip-172-31-1-72 sshd\[22846\]: Invalid user test1 from 201.174.182.159 Sep 13 17:45:57 ip-172-31-1-72 sshd\[22846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.174.182.159 Sep 13 17:45:59 ip-172-31-1-72 sshd\[22846\]: Failed password for invalid user test1 from 201.174.182.159 port 44382 ssh2 Sep 13 17:51:03 ip-172-31-1-72 sshd\[22885\]: Invalid user zabbix from 201.174.182.159 Sep 13 17:51:03 ip-172-31-1-72 sshd\[22885\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.174.182.159 |
2019-09-14 04:10:16 |
| 160.238.149.42 | attackbots | Automatic report - Port Scan Attack |
2019-09-14 04:00:36 |
| 45.136.109.40 | attack | Sep 13 21:15:40 mc1 kernel: \[952698.710159\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.40 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=18623 PROTO=TCP SPT=52239 DPT=8368 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 13 21:19:32 mc1 kernel: \[952930.416549\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.40 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=58225 PROTO=TCP SPT=52239 DPT=8194 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 13 21:19:37 mc1 kernel: \[952935.836399\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.40 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=37566 PROTO=TCP SPT=52239 DPT=8530 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-14 03:52:47 |
| 206.189.108.59 | attack | Sep 13 13:36:49 vps01 sshd[8792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.108.59 Sep 13 13:36:50 vps01 sshd[8792]: Failed password for invalid user teamspeak1 from 206.189.108.59 port 54276 ssh2 |
2019-09-14 04:03:14 |
| 85.113.60.3 | attackspambots | Sep 13 14:03:23 MK-Soft-VM6 sshd\[15498\]: Invalid user gitlab from 85.113.60.3 port 37924 Sep 13 14:03:23 MK-Soft-VM6 sshd\[15498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.113.60.3 Sep 13 14:03:25 MK-Soft-VM6 sshd\[15498\]: Failed password for invalid user gitlab from 85.113.60.3 port 37924 ssh2 ... |
2019-09-14 04:20:54 |
| 139.59.141.196 | attackspam | 139.59.141.196 - - \[13/Sep/2019:21:37:35 +0200\] "POST /wp-login.php HTTP/1.1" 200 2111 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.141.196 - - \[13/Sep/2019:21:37:35 +0200\] "POST /wp-login.php HTTP/1.1" 200 2092 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-09-14 04:06:01 |
| 202.187.227.171 | attack | Sep 13 15:15:15 lnxmail61 postfix/smtpd[20843]: warning: unknown[202.187.227.171]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 13 15:15:15 lnxmail61 postfix/smtpd[20843]: lost connection after AUTH from unknown[202.187.227.171] Sep 13 15:15:22 lnxmail61 postfix/smtpd[24793]: warning: unknown[202.187.227.171]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 13 15:15:22 lnxmail61 postfix/smtpd[24793]: lost connection after AUTH from unknown[202.187.227.171] Sep 13 15:15:33 lnxmail61 postfix/smtpd[27076]: warning: unknown[202.187.227.171]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-09-14 04:03:34 |
| 213.168.72.135 | attack | Sep 13 12:40:25 hb sshd\[15541\]: Invalid user vyatta from 213.168.72.135 Sep 13 12:40:25 hb sshd\[15541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=xdsl-213-168-72-135.nc.de Sep 13 12:40:27 hb sshd\[15541\]: Failed password for invalid user vyatta from 213.168.72.135 port 45926 ssh2 Sep 13 12:48:56 hb sshd\[16230\]: Invalid user developer from 213.168.72.135 Sep 13 12:48:56 hb sshd\[16230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=xdsl-213-168-72-135.nc.de |
2019-09-14 04:02:45 |
| 23.17.115.84 | attackbots | 60001/tcp 60001/tcp 60001/tcp... [2019-07-19/09-13]6pkt,1pt.(tcp) |
2019-09-14 04:23:56 |
| 202.137.155.190 | attack | Automatic report - Banned IP Access |
2019-09-14 04:03:57 |
| 183.99.103.72 | attackspambots | " " |
2019-09-14 04:17:47 |
| 165.22.50.65 | attackspam | Sep 13 20:59:02 srv206 sshd[12033]: Invalid user a1b1c3 from 165.22.50.65 ... |
2019-09-14 04:26:34 |
| 149.129.58.243 | attackspam | 19/9/13@07:11:11: FAIL: IoT-SSH address from=149.129.58.243 ... |
2019-09-14 04:05:18 |
| 139.99.27.243 | attack | RDP Bruteforce |
2019-09-14 04:19:47 |
| 140.143.69.34 | attack | Sep 13 05:59:47 kapalua sshd\[29723\]: Invalid user jenkins from 140.143.69.34 Sep 13 05:59:47 kapalua sshd\[29723\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.69.34 Sep 13 05:59:49 kapalua sshd\[29723\]: Failed password for invalid user jenkins from 140.143.69.34 port 19971 ssh2 Sep 13 06:03:38 kapalua sshd\[30035\]: Invalid user hduser from 140.143.69.34 Sep 13 06:03:38 kapalua sshd\[30035\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.69.34 |
2019-09-14 04:19:29 |