City: unknown
Region: unknown
Country: Multicast Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 234.162.150.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27553
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;234.162.150.104. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012200 1800 900 604800 86400
;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 21:19:12 CST 2025
;; MSG SIZE rcvd: 108Host 104.150.162.234.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 104.150.162.234.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 46.38.148.2 | attackspam | Jul 11 22:35:33 v22019058497090703 postfix/smtpd[480]: warning: unknown[46.38.148.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 11 22:36:31 v22019058497090703 postfix/smtpd[480]: warning: unknown[46.38.148.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 11 22:37:30 v22019058497090703 postfix/smtpd[799]: warning: unknown[46.38.148.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-12 04:39:03 |
| 62.215.6.11 | attack | Jul 11 22:21:17 h2779839 sshd[21111]: Invalid user tanjunhui from 62.215.6.11 port 43695 Jul 11 22:21:17 h2779839 sshd[21111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.215.6.11 Jul 11 22:21:17 h2779839 sshd[21111]: Invalid user tanjunhui from 62.215.6.11 port 43695 Jul 11 22:21:19 h2779839 sshd[21111]: Failed password for invalid user tanjunhui from 62.215.6.11 port 43695 ssh2 Jul 11 22:24:35 h2779839 sshd[21229]: Invalid user qwerty from 62.215.6.11 port 42051 Jul 11 22:24:35 h2779839 sshd[21229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.215.6.11 Jul 11 22:24:35 h2779839 sshd[21229]: Invalid user qwerty from 62.215.6.11 port 42051 Jul 11 22:24:36 h2779839 sshd[21229]: Failed password for invalid user qwerty from 62.215.6.11 port 42051 ssh2 Jul 11 22:27:52 h2779839 sshd[21340]: Invalid user ito from 62.215.6.11 port 40406 ... |
2020-07-12 04:43:02 |
| 124.156.218.80 | attackbots | detected by Fail2Ban |
2020-07-12 04:40:09 |
| 94.102.51.31 | attackbots | Jul 11 22:08:19 debian-2gb-nbg1-2 kernel: \[16756681.519094\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.51.31 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=14614 PROTO=TCP SPT=45288 DPT=43924 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-12 04:32:48 |
| 218.92.0.175 | attackbotsspam | Jul 11 22:18:13 eventyay sshd[7150]: Failed password for root from 218.92.0.175 port 5272 ssh2 Jul 11 22:18:27 eventyay sshd[7150]: error: maximum authentication attempts exceeded for root from 218.92.0.175 port 5272 ssh2 [preauth] Jul 11 22:18:41 eventyay sshd[7159]: Failed password for root from 218.92.0.175 port 42015 ssh2 ... |
2020-07-12 04:29:21 |
| 188.4.46.150 | attack | Port Scan detected! ... |
2020-07-12 04:24:30 |
| 1.235.192.218 | attack | Jul 11 21:08:04 l02a sshd[19971]: Invalid user wisonadmin from 1.235.192.218 Jul 11 21:08:04 l02a sshd[19971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.235.192.218 Jul 11 21:08:04 l02a sshd[19971]: Invalid user wisonadmin from 1.235.192.218 Jul 11 21:08:06 l02a sshd[19971]: Failed password for invalid user wisonadmin from 1.235.192.218 port 36968 ssh2 |
2020-07-12 04:48:15 |
| 119.204.96.131 | attackbots | 2020-07-11T20:05:17.179538shield sshd\[20994\]: Invalid user noriko-t from 119.204.96.131 port 42900 2020-07-11T20:05:17.187639shield sshd\[20994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.204.96.131 2020-07-11T20:05:19.011176shield sshd\[20994\]: Failed password for invalid user noriko-t from 119.204.96.131 port 42900 ssh2 2020-07-11T20:08:27.316848shield sshd\[22375\]: Invalid user ambica_garments from 119.204.96.131 port 55104 2020-07-11T20:08:27.325621shield sshd\[22375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.204.96.131 |
2020-07-12 04:26:09 |
| 51.254.113.107 | attack | Jul 11 20:06:37 onepixel sshd[3097241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.113.107 Jul 11 20:06:37 onepixel sshd[3097241]: Invalid user dummy from 51.254.113.107 port 53081 Jul 11 20:06:38 onepixel sshd[3097241]: Failed password for invalid user dummy from 51.254.113.107 port 53081 ssh2 Jul 11 20:08:29 onepixel sshd[3098170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.113.107 user=backup Jul 11 20:08:31 onepixel sshd[3098170]: Failed password for backup from 51.254.113.107 port 39768 ssh2 |
2020-07-12 04:22:19 |
| 51.158.124.238 | attack | $f2bV_matches |
2020-07-12 04:27:19 |
| 218.92.0.173 | attackbotsspam | Jul 11 22:23:38 sshgateway sshd\[8072\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173 user=root Jul 11 22:23:40 sshgateway sshd\[8072\]: Failed password for root from 218.92.0.173 port 60979 ssh2 Jul 11 22:23:53 sshgateway sshd\[8072\]: error: maximum authentication attempts exceeded for root from 218.92.0.173 port 60979 ssh2 \[preauth\] |
2020-07-12 04:44:43 |
| 51.38.236.221 | attackspambots | (sshd) Failed SSH login from 51.38.236.221 (FR/France/221.ip-51-38-236.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 11 21:50:27 elude sshd[15760]: Invalid user testuser from 51.38.236.221 port 53644 Jul 11 21:50:29 elude sshd[15760]: Failed password for invalid user testuser from 51.38.236.221 port 53644 ssh2 Jul 11 22:02:28 elude sshd[17746]: Invalid user mica from 51.38.236.221 port 37730 Jul 11 22:02:30 elude sshd[17746]: Failed password for invalid user mica from 51.38.236.221 port 37730 ssh2 Jul 11 22:08:06 elude sshd[18617]: Invalid user lxc from 51.38.236.221 port 33396 |
2020-07-12 04:44:23 |
| 112.85.42.172 | attack | Jul 11 21:25:35 sd-69548 sshd[167972]: Unable to negotiate with 112.85.42.172 port 26826: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Jul 11 22:19:00 sd-69548 sshd[172032]: Unable to negotiate with 112.85.42.172 port 22688: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... |
2020-07-12 04:21:59 |
| 180.101.145.234 | attackbots | Jul 11 22:09:27 karger postfix/smtpd[29440]: warning: unknown[180.101.145.234]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 11 22:09:33 karger postfix/smtpd[29440]: warning: unknown[180.101.145.234]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 11 22:09:44 karger postfix/smtpd[29440]: warning: unknown[180.101.145.234]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-12 04:56:08 |
| 106.13.70.63 | attack | 2020-07-11T22:11:19+0200 Failed SSH Authentication/Brute Force Attack. (Server 9) |
2020-07-12 04:57:17 |