City: unknown
Region: unknown
Country: Multicast Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 238.61.42.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37073
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;238.61.42.145. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020302 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 11:49:46 CST 2025
;; MSG SIZE rcvd: 106Host 145.42.61.238.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 145.42.61.238.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 52.231.54.157 | attackspambots | Jun 13 10:43:21 vpn01 sshd[14981]: Failed password for root from 52.231.54.157 port 49950 ssh2 ... |
2020-06-13 19:45:48 |
| 62.4.18.67 | attackbotsspam | SSH_attack |
2020-06-13 19:54:55 |
| 54.39.151.44 | attack | Wordpress malicious attack:[sshd] |
2020-06-13 19:30:49 |
| 85.209.0.101 | attackbots | Jun 13 12:25:05 tor-proxy-06 sshd\[22516\]: User root from 85.209.0.101 not allowed because not listed in AllowUsers Jun 13 12:25:05 tor-proxy-06 sshd\[22516\]: Connection closed by 85.209.0.101 port 17026 \[preauth\] Jun 13 12:25:06 tor-proxy-06 sshd\[22518\]: User root from 85.209.0.101 not allowed because not listed in AllowUsers Jun 13 12:25:06 tor-proxy-06 sshd\[22518\]: Connection closed by 85.209.0.101 port 16998 \[preauth\] ... |
2020-06-13 19:34:20 |
| 46.38.145.4 | attackspam | Jun 13 13:26:41 mail postfix/smtpd\[7579\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jun 13 13:28:08 mail postfix/smtpd\[7578\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jun 13 13:29:34 mail postfix/smtpd\[7578\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jun 13 13:59:45 mail postfix/smtpd\[8776\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2020-06-13 20:01:29 |
| 106.12.22.208 | attack | 2020-06-13T06:52:54.393215abusebot-7.cloudsearch.cf sshd[10666]: Invalid user aj from 106.12.22.208 port 52476 2020-06-13T06:52:54.399032abusebot-7.cloudsearch.cf sshd[10666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.22.208 2020-06-13T06:52:54.393215abusebot-7.cloudsearch.cf sshd[10666]: Invalid user aj from 106.12.22.208 port 52476 2020-06-13T06:52:56.373650abusebot-7.cloudsearch.cf sshd[10666]: Failed password for invalid user aj from 106.12.22.208 port 52476 ssh2 2020-06-13T06:55:03.437097abusebot-7.cloudsearch.cf sshd[10775]: Invalid user informix from 106.12.22.208 port 48854 2020-06-13T06:55:03.445513abusebot-7.cloudsearch.cf sshd[10775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.22.208 2020-06-13T06:55:03.437097abusebot-7.cloudsearch.cf sshd[10775]: Invalid user informix from 106.12.22.208 port 48854 2020-06-13T06:55:05.460176abusebot-7.cloudsearch.cf sshd[10775]: Failed pa ... |
2020-06-13 19:35:41 |
| 46.38.150.190 | attack | Brute force password guessing |
2020-06-13 20:03:52 |
| 183.83.160.169 | attackbotsspam | 1592021149 - 06/13/2020 06:05:49 Host: 183.83.160.169/183.83.160.169 Port: 445 TCP Blocked |
2020-06-13 19:57:42 |
| 168.194.13.19 | attack | 2020-06-13T05:56:16.288849shield sshd\[18882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=prtg-pf.flashnetpe.com.br user=root 2020-06-13T05:56:18.115609shield sshd\[18882\]: Failed password for root from 168.194.13.19 port 43914 ssh2 2020-06-13T05:59:36.560095shield sshd\[20171\]: Invalid user admin from 168.194.13.19 port 33004 2020-06-13T05:59:36.563953shield sshd\[20171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=prtg-pf.flashnetpe.com.br 2020-06-13T05:59:38.843388shield sshd\[20171\]: Failed password for invalid user admin from 168.194.13.19 port 33004 ssh2 |
2020-06-13 19:58:05 |
| 45.9.61.45 | attack | Jun 12 20:41:04 *** sshd[29882]: Did not receive identification string from 45.9.61.45 port 41610 Jun 12 20:42:45 *** sshd[29895]: Did not receive identification string from 45.9.61.45 port 51718 Jun 12 20:43:12 *** sshd[29900]: Invalid user test from 45.9.61.45 port 39476 Jun 12 20:43:12 *** sshd[29900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.9.61.45 Jun 12 20:43:14 *** sshd[29900]: Failed password for invalid user test from 45.9.61.45 port 39476 ssh2 Jun 12 20:43:14 *** sshd[29900]: Received disconnect from 45.9.61.45 port 39476:11: Normal Shutdown, Thank you for playing [preauth] Jun 12 20:43:14 *** sshd[29900]: Disconnected from 45.9.61.45 port 39476 [preauth] Jun 12 20:43:21 *** sshd[29902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.9.61.45 user=r.r Jun 12 20:43:23 *** sshd[29902]: Failed password for r.r from 45.9.61.45 port 53266 ssh2 Jun 12 20:43:23 *** sshd[299........ ------------------------------- |
2020-06-13 20:03:33 |
| 222.186.180.8 | attack | 2020-06-13T14:43:42.118263lavrinenko.info sshd[5136]: Failed password for root from 222.186.180.8 port 16970 ssh2 2020-06-13T14:43:46.598340lavrinenko.info sshd[5136]: Failed password for root from 222.186.180.8 port 16970 ssh2 2020-06-13T14:43:50.544307lavrinenko.info sshd[5136]: Failed password for root from 222.186.180.8 port 16970 ssh2 2020-06-13T14:43:55.621321lavrinenko.info sshd[5136]: Failed password for root from 222.186.180.8 port 16970 ssh2 2020-06-13T14:44:00.043895lavrinenko.info sshd[5136]: Failed password for root from 222.186.180.8 port 16970 ssh2 ... |
2020-06-13 19:46:26 |
| 129.226.74.89 | attackspam | Jun 13 12:28:05 piServer sshd[11733]: Failed password for root from 129.226.74.89 port 40964 ssh2 Jun 13 12:33:12 piServer sshd[12302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.74.89 Jun 13 12:33:14 piServer sshd[12302]: Failed password for invalid user foxi from 129.226.74.89 port 42946 ssh2 ... |
2020-06-13 19:54:08 |
| 159.89.163.226 | attackbotsspam | Jun 13 07:07:24 vpn01 sshd[10277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.163.226 Jun 13 07:07:26 vpn01 sshd[10277]: Failed password for invalid user simsadmin from 159.89.163.226 port 51726 ssh2 ... |
2020-06-13 19:37:12 |
| 218.29.54.87 | attack | Invalid user ftpznz from 218.29.54.87 port 42051 |
2020-06-13 19:41:24 |
| 58.252.68.5 | attack | Jun 13 06:06:15 debian-2gb-nbg1-2 kernel: \[14279893.947661\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=58.252.68.5 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=11799 PROTO=TCP SPT=55713 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-13 19:24:53 |