City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 252.112.208.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59972
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;252.112.208.148. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021201 1800 900 604800 86400
;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 05:12:51 CST 2025
;; MSG SIZE rcvd: 108Host 148.208.112.252.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 148.208.112.252.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.75.52.241 | attackspam | 2019-09-21T21:54:41.817300abusebot-4.cloudsearch.cf sshd\[18916\]: Invalid user acc from 51.75.52.241 port 52052 |
2019-09-22 09:34:31 |
| 66.249.79.136 | attack | Automatic report - Banned IP Access |
2019-09-22 09:25:08 |
| 207.148.78.105 | attackspam | Sep 22 03:21:02 core sshd[9828]: Invalid user support from 207.148.78.105 port 45762 Sep 22 03:21:04 core sshd[9828]: Failed password for invalid user support from 207.148.78.105 port 45762 ssh2 ... |
2019-09-22 09:48:12 |
| 212.64.72.20 | attack | Sep 21 13:59:01 php1 sshd\[14849\]: Invalid user user from 212.64.72.20 Sep 21 13:59:01 php1 sshd\[14849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.72.20 Sep 21 13:59:03 php1 sshd\[14849\]: Failed password for invalid user user from 212.64.72.20 port 55854 ssh2 Sep 21 14:04:00 php1 sshd\[15436\]: Invalid user 1111 from 212.64.72.20 Sep 21 14:04:00 php1 sshd\[15436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.72.20 |
2019-09-22 10:01:45 |
| 51.254.57.17 | attackspambots | 2019-09-22T00:52:56.127975tmaserv sshd\[10929\]: Invalid user ajay from 51.254.57.17 port 54326 2019-09-22T00:52:56.131205tmaserv sshd\[10929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip17.ip-51-254-57.eu 2019-09-22T00:52:58.107658tmaserv sshd\[10929\]: Failed password for invalid user ajay from 51.254.57.17 port 54326 ssh2 2019-09-22T00:56:58.582510tmaserv sshd\[11190\]: Invalid user groupoffice from 51.254.57.17 port 47035 2019-09-22T00:56:58.586474tmaserv sshd\[11190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip17.ip-51-254-57.eu 2019-09-22T00:57:01.074887tmaserv sshd\[11190\]: Failed password for invalid user groupoffice from 51.254.57.17 port 47035 ssh2 ... |
2019-09-22 09:40:42 |
| 196.189.130.7 | attackspambots | Unauthorized connection attempt from IP address 196.189.130.7 on Port 445(SMB) |
2019-09-22 09:32:16 |
| 117.4.89.159 | attack | Unauthorized connection attempt from IP address 117.4.89.159 on Port 445(SMB) |
2019-09-22 09:27:30 |
| 89.100.21.40 | attack | Sep 21 12:46:46 web9 sshd\[20717\]: Invalid user cos from 89.100.21.40 Sep 21 12:46:46 web9 sshd\[20717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.100.21.40 Sep 21 12:46:48 web9 sshd\[20717\]: Failed password for invalid user cos from 89.100.21.40 port 58964 ssh2 Sep 21 12:50:52 web9 sshd\[21589\]: Invalid user debian from 89.100.21.40 Sep 21 12:50:52 web9 sshd\[21589\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.100.21.40 |
2019-09-22 09:44:59 |
| 142.93.251.1 | attackspambots | Sep 21 15:27:34 php1 sshd\[11968\]: Invalid user bu from 142.93.251.1 Sep 21 15:27:34 php1 sshd\[11968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.251.1 Sep 21 15:27:36 php1 sshd\[11968\]: Failed password for invalid user bu from 142.93.251.1 port 37538 ssh2 Sep 21 15:31:45 php1 sshd\[12277\]: Invalid user faber from 142.93.251.1 Sep 21 15:31:45 php1 sshd\[12277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.251.1 |
2019-09-22 09:37:53 |
| 107.172.82.222 | attack | Sep 21 19:23:09 web1 sshd[3833]: Address 107.172.82.222 maps to 107-172-82-222-host.colocrossing.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 21 19:23:09 web1 sshd[3833]: Invalid user zf from 107.172.82.222 Sep 21 19:23:09 web1 sshd[3833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.82.222 Sep 21 19:23:11 web1 sshd[3833]: Failed password for invalid user zf from 107.172.82.222 port 60268 ssh2 Sep 21 19:23:12 web1 sshd[3833]: Received disconnect from 107.172.82.222: 11: Bye Bye [preauth] Sep 21 19:39:14 web1 sshd[5247]: Address 107.172.82.222 maps to 107-172-82-222-host.colocrossing.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 21 19:39:14 web1 sshd[5247]: Invalid user openerp from 107.172.82.222 Sep 21 19:39:14 web1 sshd[5247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.82.222 Sep 21 19:39:17 web1........ ------------------------------- |
2019-09-22 10:06:00 |
| 222.188.29.161 | attackspam | firewall-block, port(s): 22/tcp |
2019-09-22 09:39:07 |
| 164.132.98.75 | attack | Sep 22 03:32:11 DAAP sshd[9217]: Invalid user oracle from 164.132.98.75 port 45424 Sep 22 03:32:11 DAAP sshd[9217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.98.75 Sep 22 03:32:11 DAAP sshd[9217]: Invalid user oracle from 164.132.98.75 port 45424 Sep 22 03:32:13 DAAP sshd[9217]: Failed password for invalid user oracle from 164.132.98.75 port 45424 ssh2 ... |
2019-09-22 09:35:03 |
| 106.111.118.183 | attackspam | Brute force attempt |
2019-09-22 10:06:32 |
| 94.50.161.24 | attackbots | Sep 22 02:52:06 h2177944 sshd\[24295\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.50.161.24 Sep 22 02:52:09 h2177944 sshd\[24295\]: Failed password for invalid user oracle from 94.50.161.24 port 54876 ssh2 Sep 22 03:53:08 h2177944 sshd\[26759\]: Invalid user ubnt from 94.50.161.24 port 48026 Sep 22 03:53:08 h2177944 sshd\[26759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.50.161.24 ... |
2019-09-22 09:55:12 |
| 178.128.242.233 | attackspam | Sep 22 01:44:23 localhost sshd\[14633\]: Invalid user rheal123 from 178.128.242.233 port 46474 Sep 22 01:44:23 localhost sshd\[14633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.242.233 Sep 22 01:44:25 localhost sshd\[14633\]: Failed password for invalid user rheal123 from 178.128.242.233 port 46474 ssh2 |
2019-09-22 09:30:11 |