City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 248.64.44.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47213
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;248.64.44.145. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025031200 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 12 14:44:37 CST 2025
;; MSG SIZE rcvd: 106Host 145.44.64.248.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 145.44.64.248.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.210.183.246 | attackbotsspam | 51.210.183.246 - - [07/Oct/2020:10:42:07 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.210.183.246 - - [07/Oct/2020:10:42:08 +0200] "POST /wp-login.php HTTP/1.1" 200 2698 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.210.183.246 - - [07/Oct/2020:10:42:08 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.210.183.246 - - [07/Oct/2020:10:42:08 +0200] "POST /wp-login.php HTTP/1.1" 200 2672 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.210.183.246 - - [07/Oct/2020:10:42:08 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.210.183.246 - - [07/Oct/2020:10:42:09 +0200] "POST /wp-login.php HTTP/1.1" 200 2673 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001 ... |
2020-10-08 07:15:51 |
| 220.186.163.5 | attackspam | serveres are UTC -0400 Lines containing failures of 220.186.163.5 Oct 7 14:21:31 tux2 sshd[24959]: Failed password for r.r from 220.186.163.5 port 51378 ssh2 Oct 7 14:21:31 tux2 sshd[24959]: Received disconnect from 220.186.163.5 port 51378:11: Bye Bye [preauth] Oct 7 14:21:31 tux2 sshd[24959]: Disconnected from authenticating user r.r 220.186.163.5 port 51378 [preauth] Oct 7 16:28:08 tux2 sshd[2813]: Failed password for r.r from 220.186.163.5 port 34072 ssh2 Oct 7 16:28:09 tux2 sshd[2813]: Received disconnect from 220.186.163.5 port 34072:11: Bye Bye [preauth] Oct 7 16:28:09 tux2 sshd[2813]: Disconnected from authenticating user r.r 220.186.163.5 port 34072 [preauth] Oct 7 16:32:09 tux2 sshd[3179]: Failed password for r.r from 220.186.163.5 port 34458 ssh2 Oct 7 16:32:09 tux2 sshd[3179]: Received disconnect from 220.186.163.5 port 34458:11: Bye Bye [preauth] Oct 7 16:32:09 tux2 sshd[3179]: Disconnected from authenticating user r.r 220.186.163.5 port 34458 [prea........ ------------------------------ |
2020-10-08 07:25:55 |
| 182.61.169.153 | attackspam | Oct 8 01:08:21 [host] sshd[20569]: pam_unix(sshd: Oct 8 01:08:23 [host] sshd[20569]: Failed passwor Oct 8 01:11:58 [host] sshd[20954]: pam_unix(sshd: |
2020-10-08 07:44:35 |
| 163.172.197.175 | attack | 163.172.197.175 - - [08/Oct/2020:01:18:07 +0200] "POST /wp-login.php HTTP/1.1" 200 8865 "http://cubscouts.org/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" 163.172.197.175 - - [08/Oct/2020:01:18:07 +0200] "POST /wp-login.php HTTP/1.1" 200 8865 "http://cubscouts.org/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" 163.172.197.175 - - [08/Oct/2020:01:18:07 +0200] "POST /wp-login.php HTTP/1.1" 200 8865 "http://cubscouts.org/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" 163.172.197.175 - - [08/Oct/2020:01:18:07 +0200] "POST /wp-login.php HTTP/1.1" 200 8865 "http://cubscouts.org/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" 163.172.197.175 - - [08/Oct/2020:01: ... |
2020-10-08 07:25:31 |
| 218.92.0.173 | attackspam | 2020-10-08T01:29:34.180844 sshd[4175696]: Unable to negotiate with 218.92.0.173 port 11078: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] 2020-10-08T01:29:35.230536 sshd[4175712]: Unable to negotiate with 218.92.0.173 port 62284: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] 2020-10-08T01:37:26.996611 sshd[4181795]: Unable to negotiate with 218.92.0.173 port 47786: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] |
2020-10-08 07:43:41 |
| 5.62.20.36 | attack | (From carlota.colleano@googlemail.com) Looking for fresh buyers? Get thousands of people who are ready to buy sent directly to your website. Boost your profits super fast. Start seeing results in as little as 48 hours. To get details Check out: http://bit.ly/buy-website-visitors |
2020-10-08 07:40:34 |
| 193.112.213.248 | attackspambots | Oct 7 22:25:40 ns382633 sshd\[28335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.213.248 user=root Oct 7 22:25:42 ns382633 sshd\[28335\]: Failed password for root from 193.112.213.248 port 47036 ssh2 Oct 7 22:42:58 ns382633 sshd\[31035\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.213.248 user=root Oct 7 22:43:00 ns382633 sshd\[31035\]: Failed password for root from 193.112.213.248 port 36436 ssh2 Oct 7 22:47:31 ns382633 sshd\[31755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.213.248 user=root |
2020-10-08 07:32:29 |
| 62.102.148.68 | attack | Automatic report - Banned IP Access |
2020-10-08 07:31:29 |
| 210.112.232.6 | attack | 2020-10-08T00:58:57.863949ks3355764 sshd[21821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.112.232.6 user=root 2020-10-08T00:59:00.445154ks3355764 sshd[21821]: Failed password for root from 210.112.232.6 port 60103 ssh2 ... |
2020-10-08 07:29:27 |
| 49.88.112.70 | attackbotsspam | Oct 8 02:10:18 dignus sshd[31046]: Failed password for root from 49.88.112.70 port 29573 ssh2 Oct 8 02:11:42 dignus sshd[31064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70 user=root Oct 8 02:11:44 dignus sshd[31064]: Failed password for root from 49.88.112.70 port 35793 ssh2 Oct 8 02:11:47 dignus sshd[31064]: Failed password for root from 49.88.112.70 port 35793 ssh2 Oct 8 02:11:50 dignus sshd[31064]: Failed password for root from 49.88.112.70 port 35793 ssh2 ... |
2020-10-08 07:31:46 |
| 81.68.203.111 | attackspambots | Oct 7 21:49:36 scw-6657dc sshd[14260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.203.111 user=root Oct 7 21:49:36 scw-6657dc sshd[14260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.203.111 user=root Oct 7 21:49:38 scw-6657dc sshd[14260]: Failed password for root from 81.68.203.111 port 48594 ssh2 ... |
2020-10-08 07:22:23 |
| 116.255.161.148 | attackspambots | Oct 7 23:44:15 Server sshd[842871]: Failed password for root from 116.255.161.148 port 34358 ssh2 Oct 7 23:46:25 Server sshd[843057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.161.148 user=root Oct 7 23:46:27 Server sshd[843057]: Failed password for root from 116.255.161.148 port 40136 ssh2 Oct 7 23:48:42 Server sshd[843210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.161.148 user=root Oct 7 23:48:44 Server sshd[843210]: Failed password for root from 116.255.161.148 port 45912 ssh2 ... |
2020-10-08 07:28:06 |
| 179.210.82.88 | attack | Oct 8 00:52:37 vps647732 sshd[4116]: Failed password for root from 179.210.82.88 port 49044 ssh2 ... |
2020-10-08 07:11:14 |
| 123.120.24.69 | attack | Automatic report - Banned IP Access |
2020-10-08 07:44:24 |
| 14.215.113.59 | attackspambots | Lines containing failures of 14.215.113.59 Oct 4 23:41:21 shared02 sshd[16931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.215.113.59 user=r.r Oct 4 23:41:23 shared02 sshd[16931]: Failed password for r.r from 14.215.113.59 port 55560 ssh2 Oct 4 23:41:23 shared02 sshd[16931]: Received disconnect from 14.215.113.59 port 55560:11: Bye Bye [preauth] Oct 4 23:41:23 shared02 sshd[16931]: Disconnected from authenticating user r.r 14.215.113.59 port 55560 [preauth] Oct 4 23:58:24 shared02 sshd[22841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.215.113.59 user=r.r Oct 4 23:58:26 shared02 sshd[22841]: Failed password for r.r from 14.215.113.59 port 37176 ssh2 Oct 4 23:58:26 shared02 sshd[22841]: Received disconnect from 14.215.113.59 port 37176:11: Bye Bye [preauth] Oct 4 23:58:26 shared02 sshd[22841]: Disconnected from authenticating user r.r 14.215.113.59 port 37176 [preauth........ ------------------------------ |
2020-10-08 07:42:54 |