City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.117.136.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54315
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;41.117.136.55. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 23:58:05 CST 2025
;; MSG SIZE rcvd: 106Host 55.136.117.41.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 55.136.117.41.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.29.164.137 | attack | Mar 11 21:18:19 nextcloud sshd\[16367\]: Invalid user 12345678 from 14.29.164.137 Mar 11 21:18:19 nextcloud sshd\[16367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.164.137 Mar 11 21:18:20 nextcloud sshd\[16367\]: Failed password for invalid user 12345678 from 14.29.164.137 port 46711 ssh2 |
2020-03-12 04:39:16 |
| 69.229.6.36 | attackspambots | suspicious action Wed, 11 Mar 2020 16:17:31 -0300 |
2020-03-12 04:56:20 |
| 95.85.60.251 | attack | 2020-03-11T19:51:19.680055vps773228.ovh.net sshd[21357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.60.251 2020-03-11T19:51:19.654282vps773228.ovh.net sshd[21357]: Invalid user sql from 95.85.60.251 port 46950 2020-03-11T19:51:21.992493vps773228.ovh.net sshd[21357]: Failed password for invalid user sql from 95.85.60.251 port 46950 ssh2 2020-03-11T20:56:47.211956vps773228.ovh.net sshd[21875]: Invalid user qwerty from 95.85.60.251 port 53572 2020-03-11T20:56:47.224757vps773228.ovh.net sshd[21875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.60.251 2020-03-11T20:56:47.211956vps773228.ovh.net sshd[21875]: Invalid user qwerty from 95.85.60.251 port 53572 2020-03-11T20:56:49.115458vps773228.ovh.net sshd[21875]: Failed password for invalid user qwerty from 95.85.60.251 port 53572 ssh2 2020-03-11T21:04:59.252395vps773228.ovh.net sshd[21969]: Invalid user qw5684323** from 95.85.60.251 port 43812 ... |
2020-03-12 04:43:28 |
| 185.175.93.34 | attackbots | 03/11/2020-16:27:17.705356 185.175.93.34 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-03-12 04:32:59 |
| 45.133.99.2 | attack | Mar 11 21:26:08 mail.srvfarm.net postfix/smtpd[1346880]: warning: unknown[45.133.99.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 11 21:26:08 mail.srvfarm.net postfix/smtpd[1346772]: warning: unknown[45.133.99.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 11 21:26:08 mail.srvfarm.net postfix/smtpd[1346880]: lost connection after AUTH from unknown[45.133.99.2] Mar 11 21:26:08 mail.srvfarm.net postfix/smtpd[1346772]: lost connection after AUTH from unknown[45.133.99.2] Mar 11 21:26:09 mail.srvfarm.net postfix/smtpd[1330388]: warning: unknown[45.133.99.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-03-12 04:36:33 |
| 106.13.25.177 | attackbots | suspicious action Wed, 11 Mar 2020 16:17:51 -0300 |
2020-03-12 04:45:27 |
| 188.165.162.97 | attack | Mar 11 01:19:13 cumulus sshd[7244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.162.97 user=r.r Mar 11 01:19:16 cumulus sshd[7244]: Failed password for r.r from 188.165.162.97 port 34744 ssh2 Mar 11 01:19:16 cumulus sshd[7244]: Received disconnect from 188.165.162.97 port 34744:11: Bye Bye [preauth] Mar 11 01:19:16 cumulus sshd[7244]: Disconnected from 188.165.162.97 port 34744 [preauth] Mar 11 01:37:07 cumulus sshd[8131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.162.97 user=r.r Mar 11 01:37:09 cumulus sshd[8131]: Failed password for r.r from 188.165.162.97 port 43888 ssh2 Mar 11 01:37:09 cumulus sshd[8131]: Received disconnect from 188.165.162.97 port 43888:11: Bye Bye [preauth] Mar 11 01:37:09 cumulus sshd[8131]: Disconnected from 188.165.162.97 port 43888 [preauth] Mar 11 01:41:10 cumulus sshd[8486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ........ ------------------------------- |
2020-03-12 04:25:01 |
| 81.218.213.111 | attack | Automatic report - Port Scan Attack |
2020-03-12 05:01:10 |
| 59.44.204.42 | attackspam | Mar 10 20:07:07 myhostname sshd[12025]: Invalid user csgoserver from 59.44.204.42 Mar 10 20:07:07 myhostname sshd[12025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.44.204.42 Mar 10 20:07:10 myhostname sshd[12025]: Failed password for invalid user csgoserver from 59.44.204.42 port 43068 ssh2 Mar 10 20:07:10 myhostname sshd[12025]: Received disconnect from 59.44.204.42 port 43068:11: Bye Bye [preauth] Mar 10 20:07:10 myhostname sshd[12025]: Disconnected from 59.44.204.42 port 43068 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=59.44.204.42 |
2020-03-12 04:28:02 |
| 80.83.26.130 | attackbotsspam | Automatic report - Port Scan Attack |
2020-03-12 05:02:22 |
| 170.253.24.88 | attack | trying to access non-authorized port |
2020-03-12 04:36:51 |
| 219.239.27.158 | attackspam | 20/3/11@15:18:18: FAIL: IoT-SSH address from=219.239.27.158 ... |
2020-03-12 04:23:25 |
| 45.227.255.119 | attackbotsspam | Mar 10 15:23:05 ns sshd[23462]: Connection from 45.227.255.119 port 55822 on 134.119.36.27 port 22 Mar 10 15:23:05 ns sshd[23462]: User r.r from 45.227.255.119 not allowed because not listed in AllowUsers Mar 10 15:23:05 ns sshd[23462]: Failed password for invalid user r.r from 45.227.255.119 port 55822 ssh2 Mar 10 15:23:05 ns sshd[23462]: Connection closed by 45.227.255.119 port 55822 [preauth] Mar 10 15:23:05 ns sshd[23466]: Connection from 45.227.255.119 port 55864 on 134.119.36.27 port 22 Mar 10 15:23:05 ns sshd[23466]: Invalid user odroid from 45.227.255.119 port 55864 Mar 10 15:23:05 ns sshd[23466]: Failed password for invalid user odroid from 45.227.255.119 port 55864 ssh2 Mar 10 15:23:05 ns sshd[23466]: Connection closed by 45.227.255.119 port 55864 [preauth] Mar 10 15:23:05 ns sshd[23473]: Connection from 45.227.255.119 port 55900 on 134.119.36.27 port 22 Mar 10 15:23:05 ns sshd[23473]: Invalid user admin from 45.227.255.119 port 55900 Mar 10 15:23:05 ns sshd[2........ ------------------------------- |
2020-03-12 04:49:59 |
| 222.186.175.150 | attackspambots | Mar 11 21:41:58 vps691689 sshd[31619]: Failed password for root from 222.186.175.150 port 2952 ssh2 Mar 11 21:42:02 vps691689 sshd[31619]: Failed password for root from 222.186.175.150 port 2952 ssh2 Mar 11 21:42:05 vps691689 sshd[31619]: Failed password for root from 222.186.175.150 port 2952 ssh2 ... |
2020-03-12 04:48:29 |
| 121.94.45.237 | attack | 2020-03-11T19:56:28.987762shield sshd\[25259\]: Invalid user mmcom from 121.94.45.237 port 40031 2020-03-11T19:56:28.997001shield sshd\[25259\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=nthygo012237.hygo.nt.ngn.ppp.infoweb.ne.jp 2020-03-11T19:56:31.283152shield sshd\[25259\]: Failed password for invalid user mmcom from 121.94.45.237 port 40031 ssh2 2020-03-11T19:58:16.838126shield sshd\[25439\]: Invalid user QWERT_!@\#\$% from 121.94.45.237 port 54048 2020-03-11T19:58:16.848014shield sshd\[25439\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=nthygo012237.hygo.nt.ngn.ppp.infoweb.ne.jp |
2020-03-12 04:38:42 |