City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.93.39.62
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16559
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;44.93.39.62. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 20:35:06 CST 2025
;; MSG SIZE rcvd: 104
Host 62.39.93.44.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 62.39.93.44.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 192.241.219.226 | attackspam | Unauthorized access to SSH at 28/Sep/2020:08:40:22 +0000. |
2020-09-28 23:02:08 |
| 64.227.13.158 | attackbotsspam | Time: Mon Sep 28 07:34:13 2020 +0000 IP: 64.227.13.158 (US/United States/georgiatec.com) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 28 07:23:57 48-1 sshd[24873]: Failed password for root from 64.227.13.158 port 48874 ssh2 Sep 28 07:30:57 48-1 sshd[25158]: Invalid user aaa from 64.227.13.158 port 38206 Sep 28 07:31:00 48-1 sshd[25158]: Failed password for invalid user aaa from 64.227.13.158 port 38206 ssh2 Sep 28 07:34:10 48-1 sshd[25269]: Invalid user celery from 64.227.13.158 port 42206 Sep 28 07:34:13 48-1 sshd[25269]: Failed password for invalid user celery from 64.227.13.158 port 42206 ssh2 |
2020-09-28 23:08:18 |
| 86.23.89.251 | attackbotsspam | php WP PHPmyadamin ABUSE blocked for 12h |
2020-09-28 23:05:07 |
| 104.131.108.5 | attackspam | Time: Sat Sep 26 16:02:04 2020 +0000 IP: 104.131.108.5 (US/United States/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 26 15:48:49 activeserver sshd[25017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.108.5 user=root Sep 26 15:48:51 activeserver sshd[25017]: Failed password for root from 104.131.108.5 port 52168 ssh2 Sep 26 15:59:35 activeserver sshd[14763]: Invalid user oracle from 104.131.108.5 port 46546 Sep 26 15:59:37 activeserver sshd[14763]: Failed password for invalid user oracle from 104.131.108.5 port 46546 ssh2 Sep 26 16:02:01 activeserver sshd[19862]: Invalid user joe from 104.131.108.5 port 59976 |
2020-09-28 23:01:39 |
| 68.183.28.215 | attack | Sep 28 15:12:32 ip-172-31-42-142 sshd\[25755\]: Failed password for root from 68.183.28.215 port 50922 ssh2\ Sep 28 15:12:37 ip-172-31-42-142 sshd\[25758\]: Failed password for root from 68.183.28.215 port 34434 ssh2\ Sep 28 15:12:43 ip-172-31-42-142 sshd\[25760\]: Failed password for root from 68.183.28.215 port 46242 ssh2\ Sep 28 15:12:47 ip-172-31-42-142 sshd\[25762\]: Invalid user admin from 68.183.28.215\ Sep 28 15:12:49 ip-172-31-42-142 sshd\[25762\]: Failed password for invalid user admin from 68.183.28.215 port 58000 ssh2\ |
2020-09-28 23:24:17 |
| 178.62.72.89 | attackbotsspam | 38082/tcp 8545/tcp 20332/tcp... [2020-09-14/27]26pkt,11pt.(tcp) |
2020-09-28 23:07:42 |
| 190.202.129.172 | attackspambots | (sshd) Failed SSH login from 190.202.129.172 (VE/Venezuela/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 28 14:13:47 server2 sshd[15947]: Invalid user vision from 190.202.129.172 port 34090 Sep 28 14:13:49 server2 sshd[15947]: Failed password for invalid user vision from 190.202.129.172 port 34090 ssh2 Sep 28 14:19:25 server2 sshd[16874]: Invalid user tom from 190.202.129.172 port 24077 Sep 28 14:19:28 server2 sshd[16874]: Failed password for invalid user tom from 190.202.129.172 port 24077 ssh2 Sep 28 14:21:51 server2 sshd[17294]: Invalid user ubuntu from 190.202.129.172 port 4881 |
2020-09-28 23:11:10 |
| 122.51.248.76 | attackspambots | Time: Sat Sep 26 19:57:14 2020 +0000 IP: 122.51.248.76 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 26 19:53:46 activeserver sshd[12881]: Invalid user amano from 122.51.248.76 port 32862 Sep 26 19:53:49 activeserver sshd[12881]: Failed password for invalid user amano from 122.51.248.76 port 32862 ssh2 Sep 26 19:55:25 activeserver sshd[16873]: Invalid user craft from 122.51.248.76 port 42174 Sep 26 19:55:27 activeserver sshd[16873]: Failed password for invalid user craft from 122.51.248.76 port 42174 ssh2 Sep 26 19:57:09 activeserver sshd[21455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.248.76 user=ftp |
2020-09-28 22:56:04 |
| 168.90.89.35 | attack | Automatic report - Banned IP Access |
2020-09-28 22:55:31 |
| 112.85.42.122 | attack | Sep 28 08:20:11 serwer sshd\[32045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.122 user=root Sep 28 08:20:14 serwer sshd\[32045\]: Failed password for root from 112.85.42.122 port 63674 ssh2 Sep 28 08:20:17 serwer sshd\[32045\]: Failed password for root from 112.85.42.122 port 63674 ssh2 Sep 28 08:20:20 serwer sshd\[32045\]: Failed password for root from 112.85.42.122 port 63674 ssh2 Sep 28 08:20:23 serwer sshd\[32045\]: Failed password for root from 112.85.42.122 port 63674 ssh2 Sep 28 08:20:27 serwer sshd\[32045\]: Failed password for root from 112.85.42.122 port 63674 ssh2 Sep 28 08:20:27 serwer sshd\[32045\]: error: maximum authentication attempts exceeded for root from 112.85.42.122 port 63674 ssh2 \[preauth\] Sep 28 08:20:31 serwer sshd\[32082\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.122 user=root Sep 28 08:20:32 serwer sshd\[32082\]: Failed password for ro ... |
2020-09-28 23:07:54 |
| 119.184.45.225 | attack | Automatic report - Banned IP Access |
2020-09-28 23:12:14 |
| 192.241.238.5 | attackspambots | firewall-block, port(s): 28015/tcp |
2020-09-28 23:03:35 |
| 95.107.53.155 | attack | Automatic report - Banned IP Access |
2020-09-28 23:00:44 |
| 193.31.26.140 | attackspam | 2020-09-27 UTC: (2x) - 1111(2x) |
2020-09-28 22:55:17 |
| 78.128.113.121 | attack | 2020-09-28 17:09:15 dovecot_login authenticator failed for \(ip-113-121.4vendeta.com.\) \[78.128.113.121\]: 535 Incorrect authentication data \(set_id=german@sensecell.de\) 2020-09-28 17:09:22 dovecot_login authenticator failed for \(ip-113-121.4vendeta.com.\) \[78.128.113.121\]: 535 Incorrect authentication data 2020-09-28 17:09:31 dovecot_login authenticator failed for \(ip-113-121.4vendeta.com.\) \[78.128.113.121\]: 535 Incorrect authentication data 2020-09-28 17:09:35 dovecot_login authenticator failed for \(ip-113-121.4vendeta.com.\) \[78.128.113.121\]: 535 Incorrect authentication data 2020-09-28 17:09:47 dovecot_login authenticator failed for \(ip-113-121.4vendeta.com.\) \[78.128.113.121\]: 535 Incorrect authentication data ... |
2020-09-28 23:15:48 |