City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 243.148.58.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1572
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;243.148.58.68. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400
;; Query time: 78 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 21:52:23 CST 2025
;; MSG SIZE rcvd: 106Host 68.58.148.243.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 68.58.148.243.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 60.246.1.40 | attackbots |
|
2019-08-25 09:42:40 |
| 182.156.196.50 | attack | F2B jail: sshd. Time: 2019-08-25 02:42:14, Reported by: VKReport |
2019-08-25 08:57:43 |
| 176.65.5.223 | attackbotsspam | Aug 25 03:13:03 mail kernel: \[3956818.858964\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=176.65.5.223 DST=91.205.173.180 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=62861 DF PROTO=TCP SPT=64766 DPT=5060 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 25 03:13:03 mail kernel: \[3956819.288173\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=176.65.5.223 DST=91.205.173.180 LEN=52 TOS=0x00 PREC=0x00 TTL=120 ID=62862 DF PROTO=TCP SPT=64829 DPT=5038 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 25 03:13:04 mail kernel: \[3956819.690004\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=176.65.5.223 DST=91.205.173.180 LEN=52 TOS=0x00 PREC=0x00 TTL=120 ID=62863 DF PROTO=TCP SPT=64897 DPT=6060 WINDOW=64240 RES=0x00 SYN URGP=0 |
2019-08-25 09:17:42 |
| 82.5.93.62 | attackspam | Lines containing failures of 82.5.93.62 Aug 24 23:27:47 server01 postfix/smtpd[31296]: connect from cpc121652-lewi24-2-0-cust317.2-4.cable.virginm.net[82.5.93.62] Aug x@x Aug x@x Aug 24 23:27:50 server01 postfix/policy-spf[31307]: : Policy action=PREPEND Received-SPF: none (affarshuset.se: No applicable sender policy available) receiver=x@x Aug x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=82.5.93.62 |
2019-08-25 09:19:26 |
| 78.106.194.213 | attackbotsspam | Unauthorized connection attempt from IP address 78.106.194.213 on Port 445(SMB) |
2019-08-25 09:38:15 |
| 188.165.55.33 | attack | Aug 25 00:55:46 ip-172-31-1-72 sshd\[31239\]: Invalid user miner from 188.165.55.33 Aug 25 00:55:46 ip-172-31-1-72 sshd\[31239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.55.33 Aug 25 00:55:48 ip-172-31-1-72 sshd\[31239\]: Failed password for invalid user miner from 188.165.55.33 port 27335 ssh2 Aug 25 00:59:41 ip-172-31-1-72 sshd\[31302\]: Invalid user oracle from 188.165.55.33 Aug 25 00:59:41 ip-172-31-1-72 sshd\[31302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.55.33 |
2019-08-25 09:23:23 |
| 142.4.29.151 | attackspam | 142.4.29.151 - - [25/Aug/2019:01:33:28 +0200] "POST [munged]wp-login.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 0.000 |
2019-08-25 09:46:39 |
| 104.218.164.67 | attackbotsspam | Aug 25 02:36:54 mail sshd\[11885\]: Invalid user marcelo from 104.218.164.67 port 47712 Aug 25 02:36:54 mail sshd\[11885\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.218.164.67 ... |
2019-08-25 09:45:46 |
| 14.155.159.138 | attack | Unauthorized connection attempt from IP address 14.155.159.138 on Port 445(SMB) |
2019-08-25 09:15:28 |
| 200.24.67.110 | attack | Unauthorized connection attempt from IP address 200.24.67.110 on Port 587(SMTP-MSA) |
2019-08-25 09:08:35 |
| 201.131.246.248 | attackspambots | Unauthorized connection attempt from IP address 201.131.246.248 on Port 445(SMB) |
2019-08-25 09:17:18 |
| 119.29.67.90 | attackspambots | Automatic report - Banned IP Access |
2019-08-25 09:40:53 |
| 183.12.239.110 | attackbotsspam | Aug 24 22:02:07 localhost sshd\[24174\]: Invalid user paula from 183.12.239.110 port 31534 Aug 24 22:02:07 localhost sshd\[24174\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.12.239.110 Aug 24 22:02:09 localhost sshd\[24174\]: Failed password for invalid user paula from 183.12.239.110 port 31534 ssh2 Aug 24 22:05:09 localhost sshd\[24255\]: Invalid user alex from 183.12.239.110 port 31864 Aug 24 22:05:09 localhost sshd\[24255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.12.239.110 ... |
2019-08-25 09:39:28 |
| 195.29.30.238 | attackspam | Unauthorized connection attempt from IP address 195.29.30.238 on Port 445(SMB) |
2019-08-25 09:34:49 |
| 203.99.62.158 | attackspambots | Aug 24 14:49:19 wbs sshd\[22460\]: Invalid user bobby from 203.99.62.158 Aug 24 14:49:19 wbs sshd\[22460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.99.62.158 Aug 24 14:49:21 wbs sshd\[22460\]: Failed password for invalid user bobby from 203.99.62.158 port 20556 ssh2 Aug 24 14:54:20 wbs sshd\[23037\]: Invalid user smbuser from 203.99.62.158 Aug 24 14:54:20 wbs sshd\[23037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.99.62.158 |
2019-08-25 08:59:05 |