City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 254.50.35.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30951
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;254.50.35.2. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025031200 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 12 19:22:48 CST 2025
;; MSG SIZE rcvd: 104Host 2.35.50.254.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 2.35.50.254.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 177.126.24.14 | attackspambots | May 31 06:10:03 vps34202 sshd[28324]: reveeclipse mapping checking getaddrinfo for 14.24.126.177.3dtelecomunicacoes.com.br [177.126.24.14] failed - POSSIBLE BREAK-IN ATTEMPT! May 31 06:10:03 vps34202 sshd[28324]: Invalid user windows from 177.126.24.14 May 31 06:10:03 vps34202 sshd[28324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.126.24.14 May 31 06:10:04 vps34202 sshd[28324]: Failed password for invalid user windows from 177.126.24.14 port 43957 ssh2 May 31 06:10:05 vps34202 sshd[28324]: Received disconnect from 177.126.24.14: 11: Bye Bye [preauth] May 31 06:13:10 vps34202 sshd[28407]: reveeclipse mapping checking getaddrinfo for 14.24.126.177.3dtelecomunicacoes.com.br [177.126.24.14] failed - POSSIBLE BREAK-IN ATTEMPT! May 31 06:13:10 vps34202 sshd[28407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.126.24.14 user=r.r May 31 06:13:12 vps34202 sshd[28407]: Failed passwo........ ------------------------------- |
2020-06-01 06:31:40 |
| 106.13.93.199 | attackbots | sshd jail - ssh hack attempt |
2020-06-01 06:11:56 |
| 121.145.78.129 | attack | May 31 22:50:35 vps687878 sshd\[13750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129 user=root May 31 22:50:37 vps687878 sshd\[13750\]: Failed password for root from 121.145.78.129 port 56824 ssh2 May 31 22:53:53 vps687878 sshd\[13964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129 user=root May 31 22:53:55 vps687878 sshd\[13964\]: Failed password for root from 121.145.78.129 port 34066 ssh2 May 31 22:57:07 vps687878 sshd\[14344\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129 user=root ... |
2020-06-01 06:09:24 |
| 116.110.146.9 | attackspam | SSH brute-force: detected 10 distinct usernames within a 24-hour window. |
2020-06-01 06:39:47 |
| 114.67.250.216 | attack | May 31 22:24:59 odroid64 sshd\[1678\]: User root from 114.67.250.216 not allowed because not listed in AllowUsers May 31 22:24:59 odroid64 sshd\[1678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.250.216 user=root ... |
2020-06-01 06:21:33 |
| 171.25.193.20 | attackspambots | xmlrpc attack |
2020-06-01 06:27:27 |
| 51.38.188.101 | attackbotsspam | 2020-05-31T20:25:13.435133homeassistant sshd[8804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.188.101 user=root 2020-05-31T20:25:15.295770homeassistant sshd[8804]: Failed password for root from 51.38.188.101 port 36320 ssh2 ... |
2020-06-01 06:07:24 |
| 210.22.54.179 | attackspambots | Jun 1 00:00:24 prod4 sshd\[18325\]: Failed password for root from 210.22.54.179 port 45668 ssh2 Jun 1 00:04:10 prod4 sshd\[19976\]: Failed password for root from 210.22.54.179 port 6594 ssh2 Jun 1 00:07:54 prod4 sshd\[21100\]: Failed password for root from 210.22.54.179 port 31856 ssh2 ... |
2020-06-01 06:25:10 |
| 159.89.194.103 | attackspam | 479. On May 31 2020 experienced a Brute Force SSH login attempt -> 37 unique times by 159.89.194.103. |
2020-06-01 06:41:09 |
| 188.166.164.10 | attackspam | May 31 17:22:04 firewall sshd[13695]: Failed password for root from 188.166.164.10 port 42320 ssh2 May 31 17:25:10 firewall sshd[13813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.164.10 user=root May 31 17:25:11 firewall sshd[13813]: Failed password for root from 188.166.164.10 port 45828 ssh2 ... |
2020-06-01 06:09:36 |
| 113.190.218.240 | attackbots | 2020-05-3122:24:141jfUVB-00063l-2d\<=info@whatsup2013.chH=\(localhost\)[60.225.224.120]:45184P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2261id=4D48FEADA6725D1EC2C78E36F2DDA6F3@whatsup2013.chT="Ionlywantasmallamountofyourpersonalinterest"forskonija@yahoo.com2020-05-3122:24:391jfUVa-00065b-A1\<=info@whatsup2013.chH=\(localhost\)[14.186.176.213]:36759P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2285id=595CEAB9B266490AD6D39A22E66E8776@whatsup2013.chT="Justsimplyrequirethetiniestbitofyourinterest"forleeparsons30721@gmail.com2020-05-3122:23:151jfUUE-0005xu-G8\<=info@whatsup2013.chH=\(localhost\)[121.186.96.167]:56772P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2293id=949127747FAB84C71B1E57EF2B2297ED@whatsup2013.chT="Justsimplywantsomeyourfocus"forxtrail39@hotmail.com2020-05-3122:23:281jfUUR-0005yu-PU\<=info@whatsup2013.chH=\(localhost\)[183.88.243.221]:38768P=esmtpsaX=TLS |
2020-06-01 06:32:58 |
| 60.225.224.120 | attackbotsspam | 2020-05-3122:24:141jfUVB-00063l-2d\<=info@whatsup2013.chH=\(localhost\)[60.225.224.120]:45184P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2261id=4D48FEADA6725D1EC2C78E36F2DDA6F3@whatsup2013.chT="Ionlywantasmallamountofyourpersonalinterest"forskonija@yahoo.com2020-05-3122:24:391jfUVa-00065b-A1\<=info@whatsup2013.chH=\(localhost\)[14.186.176.213]:36759P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2285id=595CEAB9B266490AD6D39A22E66E8776@whatsup2013.chT="Justsimplyrequirethetiniestbitofyourinterest"forleeparsons30721@gmail.com2020-05-3122:23:151jfUUE-0005xu-G8\<=info@whatsup2013.chH=\(localhost\)[121.186.96.167]:56772P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2293id=949127747FAB84C71B1E57EF2B2297ED@whatsup2013.chT="Justsimplywantsomeyourfocus"forxtrail39@hotmail.com2020-05-3122:23:281jfUUR-0005yu-PU\<=info@whatsup2013.chH=\(localhost\)[183.88.243.221]:38768P=esmtpsaX=TLS |
2020-06-01 06:37:02 |
| 122.51.245.236 | attack | frenzy |
2020-06-01 06:34:17 |
| 193.106.29.75 | attackspambots | 05/31/2020-16:25:13.852605 193.106.29.75 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-06-01 06:08:54 |
| 138.197.89.212 | attack | May 31 23:53:12 abendstille sshd\[23297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.89.212 user=root May 31 23:53:14 abendstille sshd\[23297\]: Failed password for root from 138.197.89.212 port 47086 ssh2 May 31 23:56:33 abendstille sshd\[26756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.89.212 user=root May 31 23:56:35 abendstille sshd\[26756\]: Failed password for root from 138.197.89.212 port 52098 ssh2 Jun 1 00:00:06 abendstille sshd\[30195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.89.212 user=root ... |
2020-06-01 06:14:40 |