City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 246.189.54.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22721
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;246.189.54.213. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 09:59:44 CST 2025
;; MSG SIZE rcvd: 107Host 213.54.189.246.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 213.54.189.246.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 123.207.157.120 | attackbotsspam | May 31 16:26:16 Host-KEWR-E sshd[11468]: Disconnected from invalid user root 123.207.157.120 port 55474 [preauth] ... |
2020-06-01 05:09:17 |
| 173.212.245.240 | attackspam | 20 attempts against mh-misbehave-ban on tree |
2020-06-01 05:12:22 |
| 78.16.149.169 | attack | SSH Brute-Forcing (server2) |
2020-06-01 05:10:05 |
| 95.111.253.253 | attackbots | May 30 11:38:22 b-admin sshd[24822]: Did not receive identification string from 95.111.253.253 port 58544 May 30 11:39:21 b-admin sshd[25022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.111.253.253 user=r.r May 30 11:39:23 b-admin sshd[25022]: Failed password for r.r from 95.111.253.253 port 42816 ssh2 May 30 11:39:23 b-admin sshd[25022]: Received disconnect from 95.111.253.253 port 42816:11: Normal Shutdown, Thank you for playing [preauth] May 30 11:39:23 b-admin sshd[25022]: Disconnected from 95.111.253.253 port 42816 [preauth] May 30 11:40:43 b-admin sshd[25501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.111.253.253 user=r.r May 30 11:40:44 b-admin sshd[25501]: Failed password for r.r from 95.111.253.253 port 44472 ssh2 May 30 11:40:44 b-admin sshd[25501]: Received disconnect from 95.111.253.253 port 44472:11: Normal Shutdown, Thank you for playing [preauth] May 30 11:4........ ------------------------------- |
2020-06-01 05:13:24 |
| 42.104.97.238 | attack | C1,WP GET /suche/wp-login.php |
2020-06-01 04:43:13 |
| 103.141.46.154 | attackbotsspam | 2020-05-31T22:05:50.004362ns386461 sshd\[6822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.141.46.154 user=root 2020-05-31T22:05:51.534242ns386461 sshd\[6822\]: Failed password for root from 103.141.46.154 port 32922 ssh2 2020-05-31T22:26:11.532721ns386461 sshd\[25735\]: Invalid user 1qaz\#EDC\r from 103.141.46.154 port 34276 2020-05-31T22:26:11.537204ns386461 sshd\[25735\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.141.46.154 2020-05-31T22:26:13.357674ns386461 sshd\[25735\]: Failed password for invalid user 1qaz\#EDC\r from 103.141.46.154 port 34276 ssh2 ... |
2020-06-01 05:11:28 |
| 222.186.180.8 | attackbotsspam | Jun 1 00:01:23 ift sshd\[19248\]: Failed password for root from 222.186.180.8 port 50178 ssh2Jun 1 00:01:26 ift sshd\[19248\]: Failed password for root from 222.186.180.8 port 50178 ssh2Jun 1 00:01:30 ift sshd\[19248\]: Failed password for root from 222.186.180.8 port 50178 ssh2Jun 1 00:01:33 ift sshd\[19248\]: Failed password for root from 222.186.180.8 port 50178 ssh2Jun 1 00:01:36 ift sshd\[19248\]: Failed password for root from 222.186.180.8 port 50178 ssh2 ... |
2020-06-01 05:04:58 |
| 185.234.218.84 | attackspam | 2020-05-31T14:40:00.905073linuxbox-skyline auth[54654]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=fotocopiadora rhost=185.234.218.84 ... |
2020-06-01 05:11:41 |
| 190.145.224.18 | attack | 2020-05-31T20:38:06.719727shield sshd\[8926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.224.18 user=root 2020-05-31T20:38:08.364398shield sshd\[8926\]: Failed password for root from 190.145.224.18 port 43982 ssh2 2020-05-31T20:42:05.154287shield sshd\[9970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.224.18 user=root 2020-05-31T20:42:06.282874shield sshd\[9970\]: Failed password for root from 190.145.224.18 port 48684 ssh2 2020-05-31T20:46:00.204676shield sshd\[10700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.224.18 user=root |
2020-06-01 05:07:16 |
| 49.235.151.50 | attackspam | May 31 22:26:28 odroid64 sshd\[1781\]: User root from 49.235.151.50 not allowed because not listed in AllowUsers May 31 22:26:28 odroid64 sshd\[1781\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.151.50 user=root ... |
2020-06-01 04:59:50 |
| 178.128.113.47 | attackbots | May 31 22:55:43 OPSO sshd\[22954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.113.47 user=root May 31 22:55:45 OPSO sshd\[22954\]: Failed password for root from 178.128.113.47 port 41968 ssh2 May 31 22:58:11 OPSO sshd\[23248\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.113.47 user=root May 31 22:58:13 OPSO sshd\[23248\]: Failed password for root from 178.128.113.47 port 52828 ssh2 May 31 23:00:43 OPSO sshd\[23914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.113.47 user=root |
2020-06-01 05:11:58 |
| 62.60.135.197 | attack | May 30 07:00:46 pl3server sshd[25667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.60.135.197 user=r.r May 30 07:00:49 pl3server sshd[25667]: Failed password for r.r from 62.60.135.197 port 40480 ssh2 May 30 07:00:49 pl3server sshd[25667]: Received disconnect from 62.60.135.197 port 40480:11: Bye Bye [preauth] May 30 07:00:49 pl3server sshd[25667]: Disconnected from 62.60.135.197 port 40480 [preauth] May 30 07:14:56 pl3server sshd[13725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.60.135.197 user=r.r May 30 07:14:58 pl3server sshd[13725]: Failed password for r.r from 62.60.135.197 port 57192 ssh2 May 30 07:14:58 pl3server sshd[13725]: Received disconnect from 62.60.135.197 port 57192:11: Bye Bye [preauth] May 30 07:14:58 pl3server sshd[13725]: Disconnected from 62.60.135.197 port 57192 [preauth] May 30 07:19:01 pl3server sshd[24324]: pam_unix(sshd:auth): authentication failu........ ------------------------------- |
2020-06-01 04:48:05 |
| 191.34.150.106 | attackspam | Automatic report - Port Scan Attack |
2020-06-01 04:44:38 |
| 165.22.121.41 | attackspambots | (sshd) Failed SSH login from 165.22.121.41 (GB/United Kingdom/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 1 03:26:08 serv sshd[13419]: User root from 165.22.121.41 not allowed because not listed in AllowUsers Jun 1 03:26:08 serv sshd[13419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.121.41 user=root |
2020-06-01 05:14:22 |
| 128.199.84.201 | attackspam | 2020-05-31T20:31:44.637957shield sshd\[7418\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.84.201 user=root 2020-05-31T20:31:46.839822shield sshd\[7418\]: Failed password for root from 128.199.84.201 port 55848 ssh2 2020-05-31T20:36:36.810451shield sshd\[8637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.84.201 user=root 2020-05-31T20:36:38.766302shield sshd\[8637\]: Failed password for root from 128.199.84.201 port 60416 ssh2 2020-05-31T20:41:28.222135shield sshd\[9792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.84.201 user=root |
2020-06-01 04:52:55 |