City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 249.107.140.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47323
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;249.107.140.52. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025030100 1800 900 604800 86400
;; Query time: 419 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 15:33:08 CST 2025
;; MSG SIZE rcvd: 107Host 52.140.107.249.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 52.140.107.249.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 118.25.100.121 | attack | Jul 3 18:11:29 xeon sshd[37236]: Failed password for invalid user family from 118.25.100.121 port 60320 ssh2 |
2020-07-04 01:53:42 |
| 110.147.213.70 | attackspambots | 2020-07-03T13:15:45.585947mail.thespaminator.com sshd[8496]: Failed password for root from 110.147.213.70 port 55568 ssh2 2020-07-03T13:21:12.519095mail.thespaminator.com sshd[9123]: Invalid user tech from 110.147.213.70 port 56115 ... |
2020-07-04 02:04:48 |
| 106.12.26.242 | attackspambots | Jun 29 20:09:59 cumulus sshd[31278]: Invalid user nick from 106.12.26.242 port 40192 Jun 29 20:10:00 cumulus sshd[31278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.26.242 Jun 29 20:10:02 cumulus sshd[31278]: Failed password for invalid user nick from 106.12.26.242 port 40192 ssh2 Jun 29 20:10:02 cumulus sshd[31278]: Received disconnect from 106.12.26.242 port 40192:11: Bye Bye [preauth] Jun 29 20:10:02 cumulus sshd[31278]: Disconnected from 106.12.26.242 port 40192 [preauth] Jun 29 20:23:03 cumulus sshd[310]: Invalid user username from 106.12.26.242 port 53408 Jun 29 20:23:03 cumulus sshd[310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.26.242 Jun 29 20:23:04 cumulus sshd[310]: Failed password for invalid user username from 106.12.26.242 port 53408 ssh2 Jun 29 20:23:05 cumulus sshd[310]: Received disconnect from 106.12.26.242 port 53408:11: Bye Bye [preauth] Jun 29 2........ ------------------------------- |
2020-07-04 02:16:49 |
| 117.50.63.120 | attackbots | Jul 3 03:47:39 cp sshd[26179]: Failed password for root from 117.50.63.120 port 49900 ssh2 Jul 3 03:47:39 cp sshd[26179]: Failed password for root from 117.50.63.120 port 49900 ssh2 |
2020-07-04 02:02:09 |
| 177.91.79.21 | attack | Jul 3 01:47:19 *** sshd[27471]: Invalid user jose from 177.91.79.21 |
2020-07-04 02:08:27 |
| 61.133.232.251 | attackspam | 2020-07-03T21:24:59.091597hostname sshd[21999]: Failed password for invalid user gmc from 61.133.232.251 port 5211 ssh2 ... |
2020-07-04 02:15:03 |
| 70.186.57.181 | attackbotsspam | SMB Server BruteForce Attack |
2020-07-04 02:26:13 |
| 218.92.0.172 | attack | Jul 3 20:09:18 zooi sshd[11448]: Failed password for root from 218.92.0.172 port 16092 ssh2 Jul 3 20:09:21 zooi sshd[11448]: Failed password for root from 218.92.0.172 port 16092 ssh2 ... |
2020-07-04 02:10:09 |
| 81.68.100.51 | attack | Jun 30 00:54:48 xxx sshd[6313]: Invalid user diradmin from 81.68.100.51 port 49402 Jun 30 00:54:48 xxx sshd[6313]: Failed password for invalid user diradmin from 81.68.100.51 port 49402 ssh2 Jun 30 00:54:48 xxx sshd[6313]: Received disconnect from 81.68.100.51 port 49402:11: Bye Bye [preauth] Jun 30 00:54:48 xxx sshd[6313]: Disconnected from 81.68.100.51 port 49402 [preauth] Jun 30 01:04:26 xxx sshd[11478]: Failed password for r.r from 81.68.100.51 port 52562 ssh2 Jun 30 01:04:26 xxx sshd[11478]: Received disconnect from 81.68.100.51 port 52562:11: Bye Bye [preauth] Jun 30 01:04:26 xxx sshd[11478]: Disconnected from 81.68.100.51 port 52562 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=81.68.100.51 |
2020-07-04 02:08:43 |
| 181.10.199.162 | attackbots | Jul 3 13:21:25 web8 sshd\[9577\]: Invalid user clara from 181.10.199.162 Jul 3 13:21:25 web8 sshd\[9577\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.10.199.162 Jul 3 13:21:27 web8 sshd\[9577\]: Failed password for invalid user clara from 181.10.199.162 port 55982 ssh2 Jul 3 13:25:37 web8 sshd\[11792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.10.199.162 user=root Jul 3 13:25:39 web8 sshd\[11792\]: Failed password for root from 181.10.199.162 port 55938 ssh2 |
2020-07-04 02:02:54 |
| 167.114.12.244 | attack | Jul 3 23:17:19 dhoomketu sshd[1253307]: Failed password for root from 167.114.12.244 port 50780 ssh2 Jul 3 23:20:25 dhoomketu sshd[1253336]: Invalid user zwt from 167.114.12.244 port 47862 Jul 3 23:20:25 dhoomketu sshd[1253336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.12.244 Jul 3 23:20:25 dhoomketu sshd[1253336]: Invalid user zwt from 167.114.12.244 port 47862 Jul 3 23:20:27 dhoomketu sshd[1253336]: Failed password for invalid user zwt from 167.114.12.244 port 47862 ssh2 ... |
2020-07-04 01:50:45 |
| 5.135.94.191 | attack | 2020-07-01 18:25:28 server sshd[70664]: Failed password for invalid user sato from 5.135.94.191 port 35954 ssh2 |
2020-07-04 02:23:43 |
| 192.169.200.145 | attackbotsspam | CMS (WordPress or Joomla) login attempt. |
2020-07-04 02:21:01 |
| 188.240.208.26 | attackbotsspam | Auto reported by IDS |
2020-07-04 01:56:32 |
| 109.244.101.215 | attackbotsspam | Jul 1 13:01:36 pl3server sshd[27962]: Invalid user hadoop from 109.244.101.215 port 50858 Jul 1 13:01:36 pl3server sshd[27962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.244.101.215 Jul 1 13:01:39 pl3server sshd[27962]: Failed password for invalid user hadoop from 109.244.101.215 port 50858 ssh2 Jul 1 13:01:39 pl3server sshd[27962]: Received disconnect from 109.244.101.215 port 50858:11: Bye Bye [preauth] Jul 1 13:01:39 pl3server sshd[27962]: Disconnected from 109.244.101.215 port 50858 [preauth] Jul 1 13:13:14 pl3server sshd[8177]: Invalid user kmk from 109.244.101.215 port 43792 Jul 1 13:13:14 pl3server sshd[8177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.244.101.215 Jul 1 13:13:16 pl3server sshd[8177]: Failed password for invalid user kmk from 109.244.101.215 port 43792 ssh2 Jul 1 13:13:16 pl3server sshd[8177]: Received disconnect from 109.244.101.215 port 43........ ------------------------------- |
2020-07-04 02:31:04 |