City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 248.210.48.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37365
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;248.210.48.214. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024121000 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 10 22:26:56 CST 2024
;; MSG SIZE rcvd: 107Host 214.48.210.248.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 214.48.210.248.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 217.112.142.105 | attackbots | Lines containing failures of 217.112.142.105 Oct 22 17:02:18 shared04 postfix/smtpd[9072]: connect from bunt.woobra.com[217.112.142.105] Oct 22 17:02:18 shared04 policyd-spf[11826]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=217.112.142.105; helo=bunt.okulcv.com; envelope-from=x@x Oct x@x Oct 22 17:02:18 shared04 postfix/smtpd[9072]: disconnect from bunt.woobra.com[217.112.142.105] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Oct 22 17:02:44 shared04 postfix/smtpd[10697]: connect from bunt.woobra.com[217.112.142.105] Oct 22 17:02:44 shared04 policyd-spf[10698]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=217.112.142.105; helo=bunt.okulcv.com; envelope-from=x@x Oct x@x Oct 22 17:02:44 shared04 postfix/smtpd[10697]: disconnect from bunt.woobra.com[217.112.142.105] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Oct 22 17:03:17 shared04 postfix/smtpd[14223]: connect from bunt.woobra.com[217.11........ ------------------------------ |
2019-10-26 22:15:20 |
| 34.66.114.195 | attack | 2019-10-26T16:08:13.627506stark.klein-stark.info sshd\[10575\]: Invalid user www from 34.66.114.195 port 40038 2019-10-26T16:08:13.636242stark.klein-stark.info sshd\[10575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.114.66.34.bc.googleusercontent.com 2019-10-26T16:08:15.952496stark.klein-stark.info sshd\[10575\]: Failed password for invalid user www from 34.66.114.195 port 40038 ssh2 ... |
2019-10-26 22:30:02 |
| 106.12.113.223 | attack | Oct 26 03:37:08 php1 sshd\[3327\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.113.223 user=root Oct 26 03:37:10 php1 sshd\[3327\]: Failed password for root from 106.12.113.223 port 55956 ssh2 Oct 26 03:42:30 php1 sshd\[3834\]: Invalid user temp from 106.12.113.223 Oct 26 03:42:30 php1 sshd\[3834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.113.223 Oct 26 03:42:32 php1 sshd\[3834\]: Failed password for invalid user temp from 106.12.113.223 port 36346 ssh2 |
2019-10-26 21:53:12 |
| 124.207.17.66 | attackbots | Oct 26 15:49:26 markkoudstaal sshd[29055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.207.17.66 Oct 26 15:49:28 markkoudstaal sshd[29055]: Failed password for invalid user 1234 from 124.207.17.66 port 2078 ssh2 Oct 26 15:55:17 markkoudstaal sshd[29589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.207.17.66 |
2019-10-26 22:10:31 |
| 13.228.122.216 | attack | www.geburtshaus-fulda.de 13.228.122.216 \[26/Oct/2019:14:02:15 +0200\] "POST /wp-login.php HTTP/1.1" 200 5785 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.geburtshaus-fulda.de 13.228.122.216 \[26/Oct/2019:14:02:19 +0200\] "POST /wp-login.php HTTP/1.1" 200 5789 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-26 22:23:21 |
| 197.204.7.108 | attackbots | ENG,WP GET /wp-login.php |
2019-10-26 22:26:11 |
| 101.68.70.14 | attack | Oct 26 16:34:29 server sshd\[16327\]: Invalid user pentaho from 101.68.70.14 port 45037 Oct 26 16:34:29 server sshd\[16327\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.68.70.14 Oct 26 16:34:31 server sshd\[16327\]: Failed password for invalid user pentaho from 101.68.70.14 port 45037 ssh2 Oct 26 16:39:42 server sshd\[30413\]: Invalid user sshtunnel from 101.68.70.14 port 57787 Oct 26 16:39:42 server sshd\[30413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.68.70.14 |
2019-10-26 22:31:05 |
| 123.168.9.38 | attackbotsspam | Unauthorized connection attempt from IP address 123.168.9.38 on Port 445(SMB) |
2019-10-26 22:28:27 |
| 128.199.107.252 | attackspambots | 2019-10-26T07:52:39.6270691495-001 sshd\[39652\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.252 2019-10-26T07:52:41.2505351495-001 sshd\[39652\]: Failed password for invalid user pulse from 128.199.107.252 port 50972 ssh2 2019-10-26T08:54:43.6980761495-001 sshd\[41846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.252 user=root 2019-10-26T08:54:45.8981011495-001 sshd\[41846\]: Failed password for root from 128.199.107.252 port 55938 ssh2 2019-10-26T09:01:42.4003781495-001 sshd\[42198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.252 user=root 2019-10-26T09:01:43.7875551495-001 sshd\[42198\]: Failed password for root from 128.199.107.252 port 59478 ssh2 ... |
2019-10-26 22:09:36 |
| 137.74.159.147 | attackspam | F2B jail: sshd. Time: 2019-10-26 15:02:03, Reported by: VKReport |
2019-10-26 22:02:10 |
| 159.65.30.66 | attackspam | Oct 26 02:31:48 auw2 sshd\[9373\]: Invalid user flfjsldzhfldk from 159.65.30.66 Oct 26 02:31:48 auw2 sshd\[9373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.30.66 Oct 26 02:31:50 auw2 sshd\[9373\]: Failed password for invalid user flfjsldzhfldk from 159.65.30.66 port 48612 ssh2 Oct 26 02:35:57 auw2 sshd\[9677\]: Invalid user dimas from 159.65.30.66 Oct 26 02:35:57 auw2 sshd\[9677\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.30.66 |
2019-10-26 22:03:01 |
| 106.13.71.133 | attack | Oct 26 13:46:17 hcbbdb sshd\[6177\]: Invalid user lisl from 106.13.71.133 Oct 26 13:46:17 hcbbdb sshd\[6177\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.71.133 Oct 26 13:46:20 hcbbdb sshd\[6177\]: Failed password for invalid user lisl from 106.13.71.133 port 35716 ssh2 Oct 26 13:51:30 hcbbdb sshd\[6847\]: Invalid user Africa@2017 from 106.13.71.133 Oct 26 13:51:30 hcbbdb sshd\[6847\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.71.133 |
2019-10-26 22:03:24 |
| 114.236.60.222 | attack | Unauthorised access (Oct 26) SRC=114.236.60.222 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=63328 TCP DPT=8080 WINDOW=52145 SYN Unauthorised access (Oct 26) SRC=114.236.60.222 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=6954 TCP DPT=8080 WINDOW=52145 SYN Unauthorised access (Oct 25) SRC=114.236.60.222 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=16783 TCP DPT=8080 WINDOW=52145 SYN Unauthorised access (Oct 25) SRC=114.236.60.222 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=29442 TCP DPT=8080 WINDOW=52145 SYN |
2019-10-26 22:05:41 |
| 177.69.118.197 | attack | Oct 26 14:44:02 MK-Soft-VM5 sshd[28119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.118.197 Oct 26 14:44:04 MK-Soft-VM5 sshd[28119]: Failed password for invalid user user from 177.69.118.197 port 34880 ssh2 ... |
2019-10-26 21:56:15 |
| 165.22.86.58 | attackspambots | Automatic report - Banned IP Access |
2019-10-26 22:04:56 |