City: unknown
Region: unknown
Country: Multicast Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 230.134.242.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36330
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;230.134.242.6. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021301 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 12:11:56 CST 2025
;; MSG SIZE rcvd: 106Host 6.242.134.230.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 6.242.134.230.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 74.120.14.50 | attack | Unauthorized connection attempt detected port 8080 |
2020-09-12 02:34:52 |
| 88.79.208.11 | attack |
|
2020-09-12 02:24:26 |
| 162.142.125.26 | attackspam | firewall-block, port(s): 21/tcp |
2020-09-12 02:22:00 |
| 138.36.200.18 | attackbots | Sep 7 12:45:07 mail.srvfarm.net postfix/smtps/smtpd[1055413]: warning: unknown[138.36.200.18]: SASL PLAIN authentication failed: Sep 7 12:45:09 mail.srvfarm.net postfix/smtps/smtpd[1055413]: lost connection after AUTH from unknown[138.36.200.18] Sep 7 12:49:35 mail.srvfarm.net postfix/smtpd[1053370]: warning: unknown[138.36.200.18]: SASL PLAIN authentication failed: Sep 7 12:49:39 mail.srvfarm.net postfix/smtpd[1053370]: lost connection after AUTH from unknown[138.36.200.18] Sep 7 12:53:18 mail.srvfarm.net postfix/smtpd[1058607]: lost connection after AUTH from unknown[138.36.200.18] |
2020-09-12 02:10:14 |
| 156.54.169.138 | attack | Sep 11 20:20:04 ns41 sshd[19779]: Failed password for root from 156.54.169.138 port 58663 ssh2 Sep 11 20:20:04 ns41 sshd[19779]: Failed password for root from 156.54.169.138 port 58663 ssh2 |
2020-09-12 02:29:55 |
| 5.188.84.115 | attackspambots | 0,39-02/04 [bc01/m13] PostRequest-Spammer scoring: harare01_holz |
2020-09-12 02:28:46 |
| 149.255.60.185 | attack | Automatic report - Banned IP Access |
2020-09-12 02:30:08 |
| 176.109.0.30 | attackspam | Lines containing failures of 176.109.0.30 Sep 9 13:30:23 shared03 sshd[6732]: Invalid user fileserver from 176.109.0.30 port 54224 Sep 9 13:30:23 shared03 sshd[6732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.109.0.30 Sep 9 13:30:25 shared03 sshd[6732]: Failed password for invalid user fileserver from 176.109.0.30 port 54224 ssh2 Sep 9 13:30:25 shared03 sshd[6732]: Received disconnect from 176.109.0.30 port 54224:11: Bye Bye [preauth] Sep 9 13:30:25 shared03 sshd[6732]: Disconnected from invalid user fileserver 176.109.0.30 port 54224 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=176.109.0.30 |
2020-09-12 02:35:14 |
| 112.85.42.180 | attackspam | Sep 11 21:27:13 ift sshd\[38704\]: Failed password for root from 112.85.42.180 port 13565 ssh2Sep 11 21:27:23 ift sshd\[38704\]: Failed password for root from 112.85.42.180 port 13565 ssh2Sep 11 21:27:26 ift sshd\[38704\]: Failed password for root from 112.85.42.180 port 13565 ssh2Sep 11 21:27:33 ift sshd\[38741\]: Failed password for root from 112.85.42.180 port 43403 ssh2Sep 11 21:27:36 ift sshd\[38741\]: Failed password for root from 112.85.42.180 port 43403 ssh2 ... |
2020-09-12 02:27:44 |
| 157.245.101.31 | attack | $f2bV_matches |
2020-09-12 02:38:01 |
| 89.248.168.107 | attackspambots | Sep 8 19:30:35 web01.agentur-b-2.de postfix/smtps/smtpd[3217555]: warning: unknown[89.248.168.107]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 19:30:40 web01.agentur-b-2.de postfix/smtps/smtpd[3218209]: warning: unknown[89.248.168.107]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 19:32:35 web01.agentur-b-2.de postfix/smtps/smtpd[3218487]: warning: unknown[89.248.168.107]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 19:33:36 web01.agentur-b-2.de postfix/smtps/smtpd[3218487]: warning: unknown[89.248.168.107]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 19:33:48 web01.agentur-b-2.de postfix/smtps/smtpd[3218569]: warning: unknown[89.248.168.107]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-09-12 02:13:51 |
| 180.214.237.98 | attackbotsspam | Sep 8 10:11:09 mail.srvfarm.net postfix/smtpd[1712849]: warning: unknown[180.214.237.98]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 10:11:09 mail.srvfarm.net postfix/smtpd[1712849]: lost connection after AUTH from unknown[180.214.237.98] Sep 8 10:11:16 mail.srvfarm.net postfix/smtpd[1712852]: warning: unknown[180.214.237.98]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 10:11:16 mail.srvfarm.net postfix/smtpd[1712852]: lost connection after AUTH from unknown[180.214.237.98] Sep 8 10:11:27 mail.srvfarm.net postfix/smtpd[1700079]: warning: unknown[180.214.237.98]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-09-12 02:07:17 |
| 202.175.46.170 | attack | Sep 11 17:32:22 sshgateway sshd\[16929\]: Invalid user discordbot from 202.175.46.170 Sep 11 17:32:22 sshgateway sshd\[16929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=z46l170.static.ctm.net Sep 11 17:32:25 sshgateway sshd\[16929\]: Failed password for invalid user discordbot from 202.175.46.170 port 54738 ssh2 |
2020-09-12 02:32:09 |
| 111.229.4.247 | attack | Sep 11 15:17:26 ns382633 sshd\[9967\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.4.247 user=root Sep 11 15:17:27 ns382633 sshd\[9967\]: Failed password for root from 111.229.4.247 port 26739 ssh2 Sep 11 15:30:48 ns382633 sshd\[12580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.4.247 user=root Sep 11 15:30:49 ns382633 sshd\[12580\]: Failed password for root from 111.229.4.247 port 63316 ssh2 Sep 11 15:33:31 ns382633 sshd\[12890\]: Invalid user admin from 111.229.4.247 port 37961 Sep 11 15:33:31 ns382633 sshd\[12890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.4.247 |
2020-09-12 02:04:15 |
| 134.209.57.3 | attackbotsspam | 134.209.57.3 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 11 09:39:17 jbs1 sshd[27037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.171.133.10 user=root Sep 11 09:22:32 jbs1 sshd[21317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.57.3 user=root Sep 11 09:41:25 jbs1 sshd[27782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.1.207 user=root Sep 11 09:28:36 jbs1 sshd[23550]: Failed password for root from 51.255.35.41 port 33340 ssh2 Sep 11 09:39:19 jbs1 sshd[27037]: Failed password for root from 190.171.133.10 port 36338 ssh2 Sep 11 09:22:34 jbs1 sshd[21317]: Failed password for root from 134.209.57.3 port 35080 ssh2 IP Addresses Blocked: 190.171.133.10 (CL/Chile/-) |
2020-09-12 02:27:14 |