City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 248.93.104.78
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52611
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;248.93.104.78. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 20:48:12 CST 2025
;; MSG SIZE rcvd: 106Host 78.104.93.248.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 78.104.93.248.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 201.95.122.168 | attackbots | Aug 3 12:02:03 server3 sshd[1092299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201-95-122-168.dsl.telesp.net.br user=r.r Aug 3 12:02:05 server3 sshd[1092299]: Failed password for r.r from 201.95.122.168 port 53045 ssh2 Aug 3 12:02:05 server3 sshd[1092299]: Received disconnect from 201.95.122.168: 11: Bye Bye [preauth] Aug 3 12:19:24 server3 sshd[1092762]: Invalid user fourjs from 201.95.122.168 Aug 3 12:19:24 server3 sshd[1092762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201-95-122-168.dsl.telesp.net.br Aug 3 12:19:26 server3 sshd[1092762]: Failed password for invalid user fourjs from 201.95.122.168 port 36995 ssh2 Aug 3 12:19:26 server3 sshd[1092762]: Received disconnect from 201.95.122.168: 11: Bye Bye [preauth] Aug 3 12:24:38 server3 sshd[1092871]: Invalid user psd from 201.95.122.168 Aug 3 12:24:38 server3 sshd[1092871]: pam_unix(sshd:auth): authentication failur........ ------------------------------- |
2019-08-04 02:52:49 |
| 113.137.46.6 | attackspam | Automatic report - Banned IP Access |
2019-08-04 03:19:34 |
| 80.82.64.116 | attackspambots | Port scan on 15 port(s): 12042 12324 12428 12510 12528 12602 12610 12621 12641 12701 12825 12836 12844 12859 12974 |
2019-08-04 03:28:26 |
| 106.13.48.157 | attackspambots | Aug 3 20:25:20 localhost sshd\[40325\]: Invalid user copy from 106.13.48.157 port 59242 Aug 3 20:25:20 localhost sshd\[40325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157 ... |
2019-08-04 03:33:06 |
| 203.99.57.115 | attackbots | Automatic report - Banned IP Access |
2019-08-04 02:54:56 |
| 189.79.107.245 | attack | Aug 3 11:55:26 shadeyouvpn sshd[32616]: Address 189.79.107.245 maps to 189-79-107-245.dsl.telesp.net.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 3 11:55:26 shadeyouvpn sshd[32616]: Invalid user giacomini from 189.79.107.245 Aug 3 11:55:26 shadeyouvpn sshd[32616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.79.107.245 Aug 3 11:55:28 shadeyouvpn sshd[32616]: Failed password for invalid user giacomini from 189.79.107.245 port 47074 ssh2 Aug 3 11:55:28 shadeyouvpn sshd[32616]: Received disconnect from 189.79.107.245: 11: Bye Bye [preauth] Aug 3 12:08:55 shadeyouvpn sshd[9857]: Address 189.79.107.245 maps to 189-79-107-245.dsl.telesp.net.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 3 12:08:55 shadeyouvpn sshd[9857]: Invalid user administracion from 189.79.107.245 Aug 3 12:08:55 shadeyouvpn sshd[9857]: pam_unix(sshd:auth): authentication failure; logna........ ------------------------------- |
2019-08-04 03:05:00 |
| 182.61.50.145 | attackspam | Aug 1 04:13:18 cumulus sshd[18328]: Connection reset by 182.61.50.145 port 40720 [preauth] Aug 1 04:17:05 cumulus sshd[18456]: Invalid user hostnameo from 182.61.50.145 port 56342 Aug 1 04:17:05 cumulus sshd[18456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.50.145 Aug 1 04:17:07 cumulus sshd[18456]: Failed password for invalid user hostnameo from 182.61.50.145 port 56342 ssh2 Aug 1 04:17:07 cumulus sshd[18456]: Received disconnect from 182.61.50.145 port 56342:11: Bye Bye [preauth] Aug 1 04:17:07 cumulus sshd[18456]: Disconnected from 182.61.50.145 port 56342 [preauth] Aug 1 04:27:08 cumulus sshd[18748]: Connection closed by 182.61.50.145 port 59146 [preauth] Aug 1 04:29:48 cumulus sshd[18825]: Invalid user vyatta from 182.61.50.145 port 59948 Aug 1 04:29:48 cumulus sshd[18825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.50.145 Aug 1 04:29:51 cumulus sshd[1........ ------------------------------- |
2019-08-04 03:17:52 |
| 119.237.245.19 | attack | Automatic report - Port Scan Attack |
2019-08-04 03:16:35 |
| 217.147.89.105 | attackspam | Spam Timestamp : 03-Aug-19 15:29 _ BlockList Provider psbl-surriel _ (454) |
2019-08-04 03:42:53 |
| 175.138.212.205 | attackbotsspam | Aug 3 17:17:48 mail sshd\[13303\]: Failed password for invalid user lanto from 175.138.212.205 port 53664 ssh2 Aug 3 17:37:28 mail sshd\[13573\]: Invalid user dev from 175.138.212.205 port 35943 ... |
2019-08-04 03:33:55 |
| 78.189.106.115 | attackbotsspam | Automatic report - Port Scan Attack |
2019-08-04 02:55:19 |
| 115.78.232.152 | attackspambots | Aug 3 19:03:21 MK-Soft-VM5 sshd\[22296\]: Invalid user adolph from 115.78.232.152 port 37290 Aug 3 19:03:21 MK-Soft-VM5 sshd\[22296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.78.232.152 Aug 3 19:03:23 MK-Soft-VM5 sshd\[22296\]: Failed password for invalid user adolph from 115.78.232.152 port 37290 ssh2 ... |
2019-08-04 03:37:20 |
| 104.248.128.217 | attack | Aug 3 18:40:53 [host] sshd[12433]: Invalid user toor from 104.248.128.217 Aug 3 18:40:53 [host] sshd[12433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.128.217 Aug 3 18:40:55 [host] sshd[12433]: Failed password for invalid user toor from 104.248.128.217 port 38394 ssh2 |
2019-08-04 03:13:11 |
| 23.228.90.98 | attackbotsspam | Searching for WordPress vulnerabilities /wp-content/themes/rockstar-theme/style.css |
2019-08-04 03:24:56 |
| 13.127.122.55 | attackbotsspam | Aug 3 13:37:30 rb06 sshd[4040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-127-122-55.ap-south-1.compute.amazonaws.com Aug 3 13:37:33 rb06 sshd[4040]: Failed password for invalid user minecraftserver from 13.127.122.55 port 40228 ssh2 Aug 3 13:37:33 rb06 sshd[4040]: Received disconnect from 13.127.122.55: 11: Bye Bye [preauth] Aug 3 13:50:20 rb06 sshd[32560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-127-122-55.ap-south-1.compute.amazonaws.com Aug 3 13:50:22 rb06 sshd[32560]: Failed password for invalid user porte from 13.127.122.55 port 35068 ssh2 Aug 3 13:50:22 rb06 sshd[32560]: Received disconnect from 13.127.122.55: 11: Bye Bye [preauth] Aug 3 13:55:20 rb06 sshd[3108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-127-122-55.ap-south-1.compute.amazonaws.com Aug 3 13:55:22 rb06 sshd[3108]: Failed password fo........ ------------------------------- |
2019-08-04 03:03:27 |