City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.145.193.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60221
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;44.145.193.2. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025031200 1800 900 604800 86400
;; Query time: 180 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 12 21:05:30 CST 2025
;; MSG SIZE rcvd: 105
Host 2.193.145.44.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 2.193.145.44.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 154.211.159.154 | attack | 2019-10-05T04:11:02.193200shield sshd\[22161\]: Invalid user 1234ASDF from 154.211.159.154 port 52910 2019-10-05T04:11:02.197831shield sshd\[22161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.211.159.154 2019-10-05T04:11:03.986787shield sshd\[22161\]: Failed password for invalid user 1234ASDF from 154.211.159.154 port 52910 ssh2 2019-10-05T04:15:53.890748shield sshd\[22988\]: Invalid user 1234@1234 from 154.211.159.154 port 38416 2019-10-05T04:15:53.894851shield sshd\[22988\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.211.159.154 |
2019-10-05 12:19:42 |
| 222.186.180.223 | attackspam | Oct 5 06:10:15 ks10 sshd[3510]: Failed password for root from 222.186.180.223 port 32690 ssh2 Oct 5 06:10:20 ks10 sshd[3510]: Failed password for root from 222.186.180.223 port 32690 ssh2 ... |
2019-10-05 12:17:38 |
| 45.40.166.145 | attackspambots | Automatic report - XMLRPC Attack |
2019-10-05 12:29:02 |
| 212.156.17.218 | attackspam | Oct 5 06:51:31 site1 sshd\[55105\]: Address 212.156.17.218 maps to 212.156.17.218.static.turktelekom.com.tr, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Oct 5 06:51:31 site1 sshd\[55105\]: Invalid user P4rol41234 from 212.156.17.218Oct 5 06:51:33 site1 sshd\[55105\]: Failed password for invalid user P4rol41234 from 212.156.17.218 port 44046 ssh2Oct 5 06:56:01 site1 sshd\[55403\]: Address 212.156.17.218 maps to 212.156.17.218.static.turktelekom.com.tr, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Oct 5 06:56:01 site1 sshd\[55403\]: Invalid user xsw2zaq1 from 212.156.17.218Oct 5 06:56:03 site1 sshd\[55403\]: Failed password for invalid user xsw2zaq1 from 212.156.17.218 port 59548 ssh2 ... |
2019-10-05 12:46:04 |
| 160.153.147.131 | attack | Automatic report - XMLRPC Attack |
2019-10-05 12:11:39 |
| 212.129.34.72 | attackbotsspam | Oct 4 18:26:25 php1 sshd\[26882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.34.72 user=root Oct 4 18:26:28 php1 sshd\[26882\]: Failed password for root from 212.129.34.72 port 29231 ssh2 Oct 4 18:30:17 php1 sshd\[27218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.34.72 user=root Oct 4 18:30:19 php1 sshd\[27218\]: Failed password for root from 212.129.34.72 port 21261 ssh2 Oct 4 18:34:09 php1 sshd\[27522\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.34.72 user=root |
2019-10-05 12:41:27 |
| 110.50.84.186 | attack | IMAP |
2019-10-05 12:42:08 |
| 5.8.110.222 | attackspambots | Oct 4 18:08:19 sachi sshd\[8171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=res-nuv45683d.ppp.twt.it user=root Oct 4 18:08:21 sachi sshd\[8171\]: Failed password for root from 5.8.110.222 port 33367 ssh2 Oct 4 18:12:22 sachi sshd\[8557\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=res-nuv45683d.ppp.twt.it user=root Oct 4 18:12:24 sachi sshd\[8557\]: Failed password for root from 5.8.110.222 port 53031 ssh2 Oct 4 18:16:13 sachi sshd\[8879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=res-nuv45683d.ppp.twt.it user=root |
2019-10-05 12:18:11 |
| 71.6.147.254 | attack | 10/04/2019-23:56:19.089721 71.6.147.254 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 71 |
2019-10-05 12:36:27 |
| 120.205.45.252 | attack | Automatic report - Banned IP Access |
2019-10-05 12:14:30 |
| 159.192.137.41 | attack | Oct 5 06:23:13 mintao sshd\[30366\]: Invalid user cloud_user from 159.192.137.41\ Oct 5 06:32:59 mintao sshd\[30422\]: Invalid user cliqruser from 159.192.137.41\ |
2019-10-05 12:35:57 |
| 51.15.58.201 | attackbots | Oct 5 03:49:35 ip-172-31-62-245 sshd\[26812\]: Failed password for root from 51.15.58.201 port 47704 ssh2\ Oct 5 03:53:04 ip-172-31-62-245 sshd\[26828\]: Invalid user 1234 from 51.15.58.201\ Oct 5 03:53:06 ip-172-31-62-245 sshd\[26828\]: Failed password for invalid user 1234 from 51.15.58.201 port 59076 ssh2\ Oct 5 03:56:39 ip-172-31-62-245 sshd\[26848\]: Invalid user Scuba@2017 from 51.15.58.201\ Oct 5 03:56:41 ip-172-31-62-245 sshd\[26848\]: Failed password for invalid user Scuba@2017 from 51.15.58.201 port 42246 ssh2\ |
2019-10-05 12:22:56 |
| 91.121.136.44 | attack | Oct 5 03:56:58 www_kotimaassa_fi sshd[29589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.136.44 Oct 5 03:57:00 www_kotimaassa_fi sshd[29589]: Failed password for invalid user Blue123 from 91.121.136.44 port 39068 ssh2 ... |
2019-10-05 12:11:16 |
| 5.135.101.228 | attackspam | Oct 5 05:51:17 markkoudstaal sshd[24276]: Failed password for root from 5.135.101.228 port 34300 ssh2 Oct 5 05:55:00 markkoudstaal sshd[24561]: Failed password for root from 5.135.101.228 port 46896 ssh2 |
2019-10-05 12:40:58 |
| 167.114.0.23 | attackspambots | Oct 5 06:52:20 www5 sshd\[46387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.0.23 user=root Oct 5 06:52:22 www5 sshd\[46387\]: Failed password for root from 167.114.0.23 port 37918 ssh2 Oct 5 06:56:00 www5 sshd\[47112\]: Invalid user 123 from 167.114.0.23 ... |
2019-10-05 12:44:31 |