City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.68.14.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31811
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;44.68.14.71. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013101 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 01 02:48:09 CST 2025
;; MSG SIZE rcvd: 104
Host 71.14.68.44.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 71.14.68.44.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 220.85.104.202 | attack | Dec 23 05:45:15 wbs sshd\[445\]: Invalid user mfs from 220.85.104.202 Dec 23 05:45:15 wbs sshd\[445\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.85.104.202 Dec 23 05:45:17 wbs sshd\[445\]: Failed password for invalid user mfs from 220.85.104.202 port 22995 ssh2 Dec 23 05:51:35 wbs sshd\[1104\]: Invalid user server from 220.85.104.202 Dec 23 05:51:35 wbs sshd\[1104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.85.104.202 |
2019-12-24 04:04:36 |
| 187.111.212.116 | attack | SSH authentication failure x 6 reported by Fail2Ban ... |
2019-12-24 04:12:03 |
| 195.206.60.141 | attackbotsspam | 23/tcp 23/tcp 23/tcp... [2019-11-12/12-22]11pkt,1pt.(tcp) |
2019-12-24 04:16:23 |
| 129.204.3.240 | attack | Apr 20 19:28:18 yesfletchmain sshd\[26061\]: Invalid user spider from 129.204.3.240 port 55288 Apr 20 19:28:18 yesfletchmain sshd\[26061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.3.240 Apr 20 19:28:19 yesfletchmain sshd\[26061\]: Failed password for invalid user spider from 129.204.3.240 port 55288 ssh2 Apr 20 19:31:32 yesfletchmain sshd\[26181\]: Invalid user adele from 129.204.3.240 port 53540 Apr 20 19:31:32 yesfletchmain sshd\[26181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.3.240 ... |
2019-12-24 03:48:01 |
| 108.175.205.173 | attackspambots | 445/tcp 1433/tcp... [2019-12-05/22]5pkt,2pt.(tcp) |
2019-12-24 04:02:36 |
| 58.210.6.51 | attack | Dec 23 16:44:21 eventyay sshd[4154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.6.51 Dec 23 16:44:23 eventyay sshd[4154]: Failed password for invalid user mysql from 58.210.6.51 port 24556 ssh2 Dec 23 16:51:28 eventyay sshd[4376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.6.51 ... |
2019-12-24 04:13:29 |
| 208.66.192.53 | attackspam | fail2ban honeypot |
2019-12-24 04:03:34 |
| 83.240.245.242 | attackspam | Dec 23 13:42:16 *** sshd[5074]: Failed password for invalid user malo from 83.240.245.242 port 34136 ssh2 Dec 23 14:00:24 *** sshd[5266]: Failed password for invalid user jsclient from 83.240.245.242 port 60025 ssh2 Dec 23 14:05:18 *** sshd[5335]: Failed password for invalid user okeda from 83.240.245.242 port 35423 ssh2 Dec 23 14:10:12 *** sshd[5446]: Failed password for invalid user guest from 83.240.245.242 port 33780 ssh2 Dec 23 14:15:11 *** sshd[5509]: Failed password for invalid user ubuntu from 83.240.245.242 port 41194 ssh2 Dec 23 14:20:05 *** sshd[5562]: Failed password for invalid user wellbank from 83.240.245.242 port 40454 ssh2 Dec 23 14:29:56 *** sshd[6120]: Failed password for invalid user host from 83.240.245.242 port 50108 ssh2 Dec 23 14:44:42 *** sshd[6346]: Failed password for invalid user shakeel from 83.240.245.242 port 39200 ssh2 Dec 23 14:49:45 *** sshd[6406]: Failed password for invalid user coreen from 83.240.245.242 port 46769 ssh2 Dec 23 14:54:45 *** sshd[6459]: Failed password for i |
2019-12-24 04:16:39 |
| 36.66.234.19 | attack | 36.66.234.19 - - [23/Dec/2019:09:55:33 -0500] "GET /index.cfm?page=../../../../../etc/passwd%00&manufacturerID=15&collectionID=161 HTTP/1.1" 200 19262 "https:// /index.cfm?page=../../../../../etc/passwd%00&manufacturerID=15&collectionID=161" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ... |
2019-12-24 03:56:24 |
| 129.204.202.89 | attackbotsspam | Dec 15 11:27:29 yesfletchmain sshd\[19328\]: User root from 129.204.202.89 not allowed because not listed in AllowUsers Dec 15 11:27:29 yesfletchmain sshd\[19328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.202.89 user=root Dec 15 11:27:30 yesfletchmain sshd\[19328\]: Failed password for invalid user root from 129.204.202.89 port 57803 ssh2 Dec 15 11:34:02 yesfletchmain sshd\[19677\]: Invalid user marin from 129.204.202.89 port 33469 Dec 15 11:34:02 yesfletchmain sshd\[19677\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.202.89 ... |
2019-12-24 04:04:10 |
| 81.22.45.83 | attackbotsspam | 3389/tcp 3389/tcp 3389/tcp... [2019-10-25/12-22]98pkt,1pt.(tcp) |
2019-12-24 04:21:22 |
| 168.228.51.155 | attackbotsspam | Unauthorized connection attempt detected from IP address 168.228.51.155 to port 445 |
2019-12-24 04:05:10 |
| 106.13.38.59 | attackspam | 2019-12-23T15:57:50.568389shield sshd\[8843\]: Invalid user nfs from 106.13.38.59 port 46094 2019-12-23T15:57:50.572810shield sshd\[8843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.38.59 2019-12-23T15:57:52.909950shield sshd\[8843\]: Failed password for invalid user nfs from 106.13.38.59 port 46094 ssh2 2019-12-23T16:05:21.245633shield sshd\[11386\]: Invalid user mysql from 106.13.38.59 port 45033 2019-12-23T16:05:21.250120shield sshd\[11386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.38.59 |
2019-12-24 03:45:18 |
| 124.115.106.150 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-12-24 03:58:15 |
| 118.193.21.186 | attack | 5432/tcp 3389/tcp... [2019-11-03/12-22]19pkt,2pt.(tcp) |
2019-12-24 04:08:09 |