City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.1.85.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61860
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.1.85.11. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012802 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 13:26:30 CST 2025
;; MSG SIZE rcvd: 103
Host 11.85.1.45.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 11.85.1.45.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.159.17.212 | attack | Jul 30 19:18:52 webhost01 sshd[31049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.159.17.212 Jul 30 19:18:53 webhost01 sshd[31049]: Failed password for invalid user geesoo from 202.159.17.212 port 34858 ssh2 ... |
2019-07-31 01:15:47 |
| 54.36.149.107 | attackbots | Automatic report - Banned IP Access |
2019-07-31 00:33:45 |
| 60.166.121.137 | attack | 21/tcp 21/tcp [2019-07-30]2pkt |
2019-07-31 01:03:30 |
| 118.96.233.218 | attackspambots | 445/tcp 445/tcp [2019-07-30]2pkt |
2019-07-31 01:32:26 |
| 49.69.152.54 | attackspambots | Jul 30 03:32:12 lgrs-web sshd[6155]: Bad protocol version identification '' from 49.69.152.54 port 50989 Jul 30 03:32:13 lgrs-web sshd[6156]: Invalid user osbash from 49.69.152.54 port 51138 Jul 30 03:32:14 lgrs-web sshd[6156]: Connection closed by 49.69.152.54 port 51138 [preauth] Jul 30 03:32:16 lgrs-web sshd[6158]: Invalid user plexuser from 49.69.152.54 port 51664 Jul 30 03:32:16 lgrs-web sshd[6158]: Connection closed by 49.69.152.54 port 51664 [preauth] Jul 30 03:32:18 lgrs-web sshd[6162]: Invalid user pi from 49.69.152.54 port 52119 Jul 30 03:32:18 lgrs-web sshd[6162]: Connection closed by 49.69.152.54 port 52119 [preauth] Jul 30 03:32:20 lgrs-web sshd[6164]: Invalid user pi from 49.69.152.54 port 52655 Jul 30 03:32:20 lgrs-web sshd[6164]: Connection closed by 49.69.152.54 port 52655 [preauth] Jul 30 03:32:23 lgrs-web sshd[6168]: Invalid user pi from 49.69.152.54 port 53237 Jul 30 03:32:23 lgrs-web sshd[6168]: Connection closed by 49.69.152.54 port 53237 [preauth]........ ------------------------------- |
2019-07-31 01:32:03 |
| 78.128.112.114 | attack | Port scan on 9 port(s): 290 644 777 2135 2139 2415 2888 2990 3860 |
2019-07-31 00:46:48 |
| 218.92.0.144 | attackbotsspam | Jul 30 15:10:25 Ubuntu-1404-trusty-64-minimal sshd\[11642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.144 user=root Jul 30 15:10:27 Ubuntu-1404-trusty-64-minimal sshd\[11642\]: Failed password for root from 218.92.0.144 port 7895 ssh2 Jul 30 15:10:35 Ubuntu-1404-trusty-64-minimal sshd\[11642\]: Failed password for root from 218.92.0.144 port 7895 ssh2 Jul 30 15:10:37 Ubuntu-1404-trusty-64-minimal sshd\[11642\]: Failed password for root from 218.92.0.144 port 7895 ssh2 Jul 30 15:10:44 Ubuntu-1404-trusty-64-minimal sshd\[11642\]: Failed password for root from 218.92.0.144 port 7895 ssh2 |
2019-07-31 01:19:54 |
| 77.126.143.9 | attackspam | TCP Port: 25 _ invalid blocked dnsbl-sorbs abuseat-org _ _ _ _ (847) |
2019-07-31 01:18:33 |
| 173.219.80.40 | attackspam | Jul 30 16:07:02 site3 sshd\[100403\]: Invalid user hduser from 173.219.80.40 Jul 30 16:07:02 site3 sshd\[100403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.219.80.40 Jul 30 16:07:04 site3 sshd\[100403\]: Failed password for invalid user hduser from 173.219.80.40 port 50792 ssh2 Jul 30 16:13:05 site3 sshd\[100534\]: Invalid user toor from 173.219.80.40 Jul 30 16:13:05 site3 sshd\[100534\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.219.80.40 ... |
2019-07-31 00:18:51 |
| 212.237.53.252 | attack | Jul 30 18:47:39 mail sshd\[2979\]: Invalid user rtkit from 212.237.53.252\ Jul 30 18:47:41 mail sshd\[2979\]: Failed password for invalid user rtkit from 212.237.53.252 port 41086 ssh2\ Jul 30 18:52:31 mail sshd\[2990\]: Invalid user main from 212.237.53.252\ Jul 30 18:52:32 mail sshd\[2990\]: Failed password for invalid user main from 212.237.53.252 port 37278 ssh2\ Jul 30 18:57:16 mail sshd\[3008\]: Invalid user proxyuser from 212.237.53.252\ Jul 30 18:57:18 mail sshd\[3008\]: Failed password for invalid user proxyuser from 212.237.53.252 port 33432 ssh2\ |
2019-07-31 01:20:51 |
| 187.188.169.123 | attackbots | Jul 30 15:04:05 localhost sshd\[78133\]: Invalid user user from 187.188.169.123 port 34610 Jul 30 15:04:05 localhost sshd\[78133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.188.169.123 Jul 30 15:04:07 localhost sshd\[78133\]: Failed password for invalid user user from 187.188.169.123 port 34610 ssh2 Jul 30 15:09:13 localhost sshd\[78442\]: Invalid user ekain from 187.188.169.123 port 58102 Jul 30 15:09:13 localhost sshd\[78442\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.188.169.123 ... |
2019-07-31 02:03:26 |
| 24.148.115.153 | attackspam | Jul 30 16:45:38 thevastnessof sshd[2738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.148.115.153 ... |
2019-07-31 02:02:45 |
| 5.79.16.40 | attack | Jul 30 13:18:14 localhost sshd\[61766\]: Invalid user transfer from 5.79.16.40 port 51414 Jul 30 13:18:14 localhost sshd\[61766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.79.16.40 ... |
2019-07-31 01:33:44 |
| 82.117.249.123 | attack | 445/tcp [2019-07-30]1pkt |
2019-07-31 01:28:27 |
| 117.212.66.19 | attackbotsspam | 445/tcp [2019-07-30]1pkt |
2019-07-31 00:36:13 |