City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 240.45.81.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43947
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;240.45.81.104. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025030100 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 17:16:30 CST 2025
;; MSG SIZE rcvd: 106Host 104.81.45.240.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 104.81.45.240.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 107.170.235.19 | attackbotsspam | 2019-09-25 08:23:42,469 fail2ban.actions [1806]: NOTICE [sshd] Ban 107.170.235.19 |
2019-09-25 20:40:21 |
| 46.101.17.215 | attack | Sep 25 15:01:45 pkdns2 sshd\[43265\]: Invalid user user01 from 46.101.17.215Sep 25 15:01:47 pkdns2 sshd\[43265\]: Failed password for invalid user user01 from 46.101.17.215 port 40862 ssh2Sep 25 15:05:51 pkdns2 sshd\[43450\]: Invalid user misiek from 46.101.17.215Sep 25 15:05:52 pkdns2 sshd\[43450\]: Failed password for invalid user misiek from 46.101.17.215 port 53258 ssh2Sep 25 15:10:02 pkdns2 sshd\[43612\]: Invalid user aag from 46.101.17.215Sep 25 15:10:04 pkdns2 sshd\[43612\]: Failed password for invalid user aag from 46.101.17.215 port 37422 ssh2 ... |
2019-09-25 20:25:34 |
| 46.38.144.202 | attackbots | Sep 25 14:26:33 webserver postfix/smtpd\[1583\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 14:29:03 webserver postfix/smtpd\[1583\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 14:31:29 webserver postfix/smtpd\[1688\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 14:33:56 webserver postfix/smtpd\[2135\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 14:36:26 webserver postfix/smtpd\[1688\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-25 20:40:47 |
| 49.51.252.209 | attackbotsspam | 32804/udp 9444/tcp 8443/tcp... [2019-08-04/09-24]7pkt,6pt.(tcp),1pt.(udp) |
2019-09-25 20:58:26 |
| 104.224.162.238 | attackspambots | SSH Brute Force |
2019-09-25 20:55:09 |
| 192.117.186.215 | attackspambots | Sep 25 07:20:20 aat-srv002 sshd[9764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.117.186.215 Sep 25 07:20:22 aat-srv002 sshd[9764]: Failed password for invalid user admin from 192.117.186.215 port 35330 ssh2 Sep 25 07:23:50 aat-srv002 sshd[9847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.117.186.215 Sep 25 07:23:52 aat-srv002 sshd[9847]: Failed password for invalid user printer from 192.117.186.215 port 36230 ssh2 ... |
2019-09-25 20:33:22 |
| 106.12.11.79 | attack | Sep 25 08:34:35 ny01 sshd[14940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.11.79 Sep 25 08:34:37 ny01 sshd[14940]: Failed password for invalid user Administrator from 106.12.11.79 port 53908 ssh2 Sep 25 08:40:15 ny01 sshd[15952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.11.79 |
2019-09-25 20:49:28 |
| 190.144.45.108 | attack | 2019-09-25T00:42:54.0496281495-001 sshd\[23863\]: Invalid user phenil from 190.144.45.108 port 43922 2019-09-25T00:42:54.0588411495-001 sshd\[23863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.144.45.108 2019-09-25T00:42:56.1799321495-001 sshd\[23863\]: Failed password for invalid user phenil from 190.144.45.108 port 43922 ssh2 2019-09-25T00:48:29.2075401495-001 sshd\[24352\]: Invalid user Administrator from 190.144.45.108 port 44832 2019-09-25T00:48:29.2146661495-001 sshd\[24352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.144.45.108 2019-09-25T00:48:30.9895471495-001 sshd\[24352\]: Failed password for invalid user Administrator from 190.144.45.108 port 44832 ssh2 ... |
2019-09-25 20:23:15 |
| 51.77.137.211 | attackbots | 2019-09-25T13:53:30.938252lon01.zurich-datacenter.net sshd\[17187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.ip-51-77-137.eu user=root 2019-09-25T13:53:32.231025lon01.zurich-datacenter.net sshd\[17187\]: Failed password for root from 51.77.137.211 port 39066 ssh2 2019-09-25T13:57:47.634199lon01.zurich-datacenter.net sshd\[17290\]: Invalid user stascorp from 51.77.137.211 port 50378 2019-09-25T13:57:47.642360lon01.zurich-datacenter.net sshd\[17290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.ip-51-77-137.eu 2019-09-25T13:57:49.550682lon01.zurich-datacenter.net sshd\[17290\]: Failed password for invalid user stascorp from 51.77.137.211 port 50378 ssh2 ... |
2019-09-25 20:22:06 |
| 51.15.144.131 | attackbotsspam | Port scan attempt detected by AWS-CCS, CTS, India |
2019-09-25 20:48:21 |
| 139.155.1.252 | attackspambots | Sep 25 02:47:04 php1 sshd\[3836\]: Invalid user admin from 139.155.1.252 Sep 25 02:47:04 php1 sshd\[3836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.1.252 Sep 25 02:47:06 php1 sshd\[3836\]: Failed password for invalid user admin from 139.155.1.252 port 39680 ssh2 Sep 25 02:49:47 php1 sshd\[4102\]: Invalid user valeria from 139.155.1.252 Sep 25 02:49:47 php1 sshd\[4102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.1.252 |
2019-09-25 20:57:00 |
| 222.186.169.192 | attackbots | Tried sshing with brute force. |
2019-09-25 20:58:52 |
| 196.52.43.61 | attackbots | 111/tcp 987/tcp 5902/tcp... [2019-07-25/09-25]68pkt,41pt.(tcp),9pt.(udp) |
2019-09-25 20:48:34 |
| 138.68.136.152 | attackspam | WordPress wp-login brute force :: 138.68.136.152 0.040 BYPASS [25/Sep/2019:22:23:43 1000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-09-25 20:39:50 |
| 66.240.205.34 | attackbots | Port scan: Attack repeated for 24 hours |
2019-09-25 20:31:23 |