City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 4.48.96.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11184
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;4.48.96.68. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025071101 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 12 04:03:10 CST 2025
;; MSG SIZE rcvd: 103Host 68.96.48.4.in-addr.arpa not found: 2(SERVFAIL)
b'
Authoritative answers can be found from:
'| IP | Type | Details | Datetime |
|---|---|---|---|
| 40.76.4.214 | attack | (sshd) Failed SSH login from 40.76.4.214 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 24 16:27:32 amsweb01 sshd[15114]: Invalid user rosie from 40.76.4.214 port 48754 Jul 24 16:27:34 amsweb01 sshd[15114]: Failed password for invalid user rosie from 40.76.4.214 port 48754 ssh2 Jul 24 16:39:30 amsweb01 sshd[17121]: Invalid user backup from 40.76.4.214 port 40948 Jul 24 16:39:32 amsweb01 sshd[17121]: Failed password for invalid user backup from 40.76.4.214 port 40948 ssh2 Jul 24 16:43:25 amsweb01 sshd[17666]: Invalid user tech from 40.76.4.214 port 48010 |
2020-07-24 23:05:33 |
| 45.55.219.114 | attackbots | Jul 24 15:07:18 plex-server sshd[1955675]: Invalid user vinay from 45.55.219.114 port 48856 Jul 24 15:07:18 plex-server sshd[1955675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.219.114 Jul 24 15:07:18 plex-server sshd[1955675]: Invalid user vinay from 45.55.219.114 port 48856 Jul 24 15:07:20 plex-server sshd[1955675]: Failed password for invalid user vinay from 45.55.219.114 port 48856 ssh2 Jul 24 15:11:24 plex-server sshd[1957427]: Invalid user rstudio from 45.55.219.114 port 34014 ... |
2020-07-24 23:30:39 |
| 106.13.171.12 | attack | 2020-07-24T10:31:17.8781401495-001 sshd[43670]: Invalid user anjan from 106.13.171.12 port 41884 2020-07-24T10:31:20.3621671495-001 sshd[43670]: Failed password for invalid user anjan from 106.13.171.12 port 41884 ssh2 2020-07-24T10:41:19.6042581495-001 sshd[44175]: Invalid user virl from 106.13.171.12 port 59270 2020-07-24T10:41:19.6073961495-001 sshd[44175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.171.12 2020-07-24T10:41:19.6042581495-001 sshd[44175]: Invalid user virl from 106.13.171.12 port 59270 2020-07-24T10:41:21.7316731495-001 sshd[44175]: Failed password for invalid user virl from 106.13.171.12 port 59270 ssh2 ... |
2020-07-24 23:36:50 |
| 217.182.140.117 | attackspambots | 217.182.140.117 - - [24/Jul/2020:16:00:53 +0100] "POST /wp-login.php HTTP/1.1" 200 2053 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 217.182.140.117 - - [24/Jul/2020:16:00:54 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 217.182.140.117 - - [24/Jul/2020:16:07:53 +0100] "POST /wp-login.php HTTP/1.1" 200 2031 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-07-24 23:28:16 |
| 61.177.172.54 | attackspambots | Jul 24 17:23:25 marvibiene sshd[26589]: Failed password for root from 61.177.172.54 port 63517 ssh2 Jul 24 17:23:29 marvibiene sshd[26589]: Failed password for root from 61.177.172.54 port 63517 ssh2 |
2020-07-24 23:37:24 |
| 49.233.130.95 | attackspambots | Jul 24 09:46:43 Tower sshd[34144]: Connection from 49.233.130.95 port 58346 on 192.168.10.220 port 22 rdomain "" Jul 24 09:46:54 Tower sshd[34144]: Invalid user test from 49.233.130.95 port 58346 Jul 24 09:46:54 Tower sshd[34144]: error: Could not get shadow information for NOUSER Jul 24 09:46:54 Tower sshd[34144]: Failed password for invalid user test from 49.233.130.95 port 58346 ssh2 Jul 24 09:46:55 Tower sshd[34144]: Received disconnect from 49.233.130.95 port 58346:11: Bye Bye [preauth] Jul 24 09:46:55 Tower sshd[34144]: Disconnected from invalid user test 49.233.130.95 port 58346 [preauth] |
2020-07-24 23:30:19 |
| 222.186.30.218 | attackbotsspam | Jul 24 17:01:59 v22018053744266470 sshd[15288]: Failed password for root from 222.186.30.218 port 31918 ssh2 Jul 24 17:02:09 v22018053744266470 sshd[15300]: Failed password for root from 222.186.30.218 port 55117 ssh2 ... |
2020-07-24 23:05:57 |
| 107.152.192.145 | attackspambots | (From whitlow.retha@gmail.com) This Google doc exposes how this scamdemic is part of a bigger plan to crush your business and keep it closed or semi-operational (with heavy rescritions) while big corporations remain open without consequences. This Covid lie has ruined many peoples lives and businesses and is all done on purpose to bring about the One World Order. It goes much deeper than this but the purpose of this doc is to expose the evil and wickedness that works in the background to ruin peoples lives. So feel free to share this message with friends and family. No need to reply to the email i provided above as its not registered. But this information will tell you everything you need to know. https://docs.google.com/document/d/14MuVe_anmrcDQl4sZhDqzhQy0Pbhrx9A/edit. In case the document is taken down, here is a backup source https://fakecovidscam.com |
2020-07-24 23:07:28 |
| 218.92.0.251 | attackbotsspam | Jul 24 12:02:50 vps46666688 sshd[10508]: Failed password for root from 218.92.0.251 port 64793 ssh2 Jul 24 12:03:02 vps46666688 sshd[10508]: error: maximum authentication attempts exceeded for root from 218.92.0.251 port 64793 ssh2 [preauth] ... |
2020-07-24 23:06:20 |
| 94.23.179.199 | attackspambots | 2020-07-24T10:36:47.9720111495-001 sshd[43892]: Invalid user user01 from 94.23.179.199 port 38617 2020-07-24T10:36:50.4264501495-001 sshd[43892]: Failed password for invalid user user01 from 94.23.179.199 port 38617 ssh2 2020-07-24T10:40:42.8142731495-001 sshd[44114]: Invalid user benjamin from 94.23.179.199 port 51414 2020-07-24T10:40:42.8176121495-001 sshd[44114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.179.199 2020-07-24T10:40:42.8142731495-001 sshd[44114]: Invalid user benjamin from 94.23.179.199 port 51414 2020-07-24T10:40:44.8617241495-001 sshd[44114]: Failed password for invalid user benjamin from 94.23.179.199 port 51414 ssh2 ... |
2020-07-24 23:19:51 |
| 156.96.119.148 | attackspambots | [2020-07-24 10:39:15] NOTICE[1277][C-00002a3e] chan_sip.c: Call from '' (156.96.119.148:61913) to extension '80500441252954108' rejected because extension not found in context 'public'. [2020-07-24 10:39:15] SECURITY[1295] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-24T10:39:15.585-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="80500441252954108",SessionID="0x7f17542ea028",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/156.96.119.148/61913",ACLName="no_extension_match" [2020-07-24 10:40:59] NOTICE[1277][C-00002a44] chan_sip.c: Call from '' (156.96.119.148:59073) to extension '80600441252954108' rejected because extension not found in context 'public'. [2020-07-24 10:40:59] SECURITY[1295] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-24T10:40:59.262-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="80600441252954108",SessionID="0x7f175452b198",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress ... |
2020-07-24 23:02:33 |
| 130.185.123.140 | attack | Jul 24 15:47:02 ns382633 sshd\[31418\]: Invalid user dal from 130.185.123.140 port 53896 Jul 24 15:47:02 ns382633 sshd\[31418\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.185.123.140 Jul 24 15:47:04 ns382633 sshd\[31418\]: Failed password for invalid user dal from 130.185.123.140 port 53896 ssh2 Jul 24 15:55:45 ns382633 sshd\[678\]: Invalid user firefart from 130.185.123.140 port 37090 Jul 24 15:55:45 ns382633 sshd\[678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.185.123.140 |
2020-07-24 23:09:22 |
| 125.220.213.225 | attackspambots | Jul 24 15:42:16 OPSO sshd\[12666\]: Invalid user nr from 125.220.213.225 port 57930 Jul 24 15:42:16 OPSO sshd\[12666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.220.213.225 Jul 24 15:42:17 OPSO sshd\[12666\]: Failed password for invalid user nr from 125.220.213.225 port 57930 ssh2 Jul 24 15:47:22 OPSO sshd\[13651\]: Invalid user jacob from 125.220.213.225 port 54466 Jul 24 15:47:22 OPSO sshd\[13651\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.220.213.225 |
2020-07-24 23:33:58 |
| 52.172.8.181 | attackbots | 2020-07-24T15:34:34.986926ns386461 sshd\[26918\]: Invalid user oracle from 52.172.8.181 port 52594 2020-07-24T15:34:34.991357ns386461 sshd\[26918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.8.181 2020-07-24T15:34:36.629835ns386461 sshd\[26918\]: Failed password for invalid user oracle from 52.172.8.181 port 52594 ssh2 2020-07-24T15:47:43.391809ns386461 sshd\[6228\]: Invalid user ph from 52.172.8.181 port 41074 2020-07-24T15:47:43.396490ns386461 sshd\[6228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.8.181 ... |
2020-07-24 23:15:39 |
| 139.99.92.181 | attackspam | Port probing on unauthorized port 19654 |
2020-07-24 22:58:01 |