City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 34.138.2.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65103
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;34.138.2.49. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012501 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 26 02:26:23 CST 2025
;; MSG SIZE rcvd: 104
49.2.138.34.in-addr.arpa domain name pointer 49.2.138.34.bc.googleusercontent.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
49.2.138.34.in-addr.arpa name = 49.2.138.34.bc.googleusercontent.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 123.195.96.190 | attackspam | Port probing on unauthorized port 2323 |
2020-09-09 07:56:48 |
| 129.204.129.170 | attackbotsspam | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): |
2020-09-09 07:37:53 |
| 69.55.49.187 | attack | Sep 9 01:48:04 buvik sshd[17252]: Invalid user oracle from 69.55.49.187 Sep 9 01:48:04 buvik sshd[17252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187 Sep 9 01:48:06 buvik sshd[17252]: Failed password for invalid user oracle from 69.55.49.187 port 52730 ssh2 ... |
2020-09-09 08:01:42 |
| 103.225.244.123 | attackbotsspam | Automatic report - Port Scan Attack |
2020-09-09 08:08:07 |
| 157.44.175.149 | attackspam | 1599583990 - 09/08/2020 18:53:10 Host: 157.44.175.149/157.44.175.149 Port: 445 TCP Blocked ... |
2020-09-09 08:09:13 |
| 80.98.249.181 | attackspam | SSH Brute Force |
2020-09-09 07:47:33 |
| 113.88.248.229 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root |
2020-09-09 07:36:56 |
| 51.91.76.3 | attackbots | Lines containing failures of 51.91.76.3 Sep 7 22:15:01 shared06 sshd[13989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.76.3 user=r.r Sep 7 22:15:03 shared06 sshd[13989]: Failed password for r.r from 51.91.76.3 port 56222 ssh2 Sep 7 22:15:03 shared06 sshd[13989]: Received disconnect from 51.91.76.3 port 56222:11: Bye Bye [preauth] Sep 7 22:15:03 shared06 sshd[13989]: Disconnected from authenticating user r.r 51.91.76.3 port 56222 [preauth] Sep 7 22:23:30 shared06 sshd[16678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.76.3 user=r.r Sep 7 22:23:32 shared06 sshd[16678]: Failed password for r.r from 51.91.76.3 port 32892 ssh2 Sep 7 22:23:32 shared06 sshd[16678]: Received disconnect from 51.91.76.3 port 32892:11: Bye Bye [preauth] Sep 7 22:23:32 shared06 sshd[16678]: Disconnected from authenticating user r.r 51.91.76.3 port 32892 [preauth] ........ ----------------------------------------------- https |
2020-09-09 07:48:02 |
| 152.89.216.33 | attackspambots | Sep 8 23:23:09 ns382633 sshd\[31408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.89.216.33 user=root Sep 8 23:23:11 ns382633 sshd\[31408\]: Failed password for root from 152.89.216.33 port 48974 ssh2 Sep 8 23:32:51 ns382633 sshd\[491\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.89.216.33 user=root Sep 8 23:32:54 ns382633 sshd\[491\]: Failed password for root from 152.89.216.33 port 36458 ssh2 Sep 8 23:36:19 ns382633 sshd\[1223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.89.216.33 user=root |
2020-09-09 08:07:36 |
| 117.89.134.185 | attackspambots | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-08T19:55:29Z and 2020-09-08T20:03:19Z |
2020-09-09 07:52:11 |
| 192.35.168.219 | attackspam | Honeypot hit: [2020-09-08 19:53:13 +0300] Connected from 192.35.168.219 to (HoneypotIP):110 |
2020-09-09 08:06:20 |
| 113.161.53.147 | attackbotsspam | 2020-09-08T17:04:45.006133abusebot-6.cloudsearch.cf sshd[24208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.53.147 user=root 2020-09-08T17:04:47.680995abusebot-6.cloudsearch.cf sshd[24208]: Failed password for root from 113.161.53.147 port 36623 ssh2 2020-09-08T17:09:01.536237abusebot-6.cloudsearch.cf sshd[24217]: Invalid user www2 from 113.161.53.147 port 42687 2020-09-08T17:09:01.542508abusebot-6.cloudsearch.cf sshd[24217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.53.147 2020-09-08T17:09:01.536237abusebot-6.cloudsearch.cf sshd[24217]: Invalid user www2 from 113.161.53.147 port 42687 2020-09-08T17:09:04.166823abusebot-6.cloudsearch.cf sshd[24217]: Failed password for invalid user www2 from 113.161.53.147 port 42687 ssh2 2020-09-08T17:13:20.043351abusebot-6.cloudsearch.cf sshd[24317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161 ... |
2020-09-09 07:44:04 |
| 159.65.229.200 | attackspam | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root |
2020-09-09 07:57:36 |
| 190.148.53.6 | attack | 1599584021 - 09/08/2020 18:53:41 Host: 190.148.53.6/190.148.53.6 Port: 445 TCP Blocked |
2020-09-09 07:32:48 |
| 49.88.112.109 | attackspam | SSH break in attempt ... |
2020-09-09 07:31:32 |