City: unknown
Region: unknown
Country: Ukraine
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 46.96.13.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8339
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;46.96.13.92. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022400 1800 900 604800 86400
;; Query time: 80 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 24 17:21:39 CST 2025
;; MSG SIZE rcvd: 104
Host 92.13.96.46.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 92.13.96.46.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 178.159.127.5 | attackbotsspam | 20/9/10@12:55:18: FAIL: Alarm-Network address from=178.159.127.5 ... |
2020-09-11 07:53:38 |
| 223.242.246.204 | attackspam | spam (f2b h2) |
2020-09-11 07:40:47 |
| 75.86.184.75 | attack | Sep 10 18:55:27 db sshd[26693]: User root from 75.86.184.75 not allowed because none of user's groups are listed in AllowGroups ... |
2020-09-11 07:46:22 |
| 43.226.236.222 | attackspam | Sep 11 00:17:10 ns382633 sshd\[11607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.236.222 user=root Sep 11 00:17:13 ns382633 sshd\[11607\]: Failed password for root from 43.226.236.222 port 54142 ssh2 Sep 11 00:20:43 ns382633 sshd\[12267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.236.222 user=root Sep 11 00:20:45 ns382633 sshd\[12267\]: Failed password for root from 43.226.236.222 port 4429 ssh2 Sep 11 00:24:05 ns382633 sshd\[12584\]: Invalid user 123 from 43.226.236.222 port 30641 Sep 11 00:24:05 ns382633 sshd\[12584\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.236.222 |
2020-09-11 08:11:05 |
| 141.98.80.58 | attack | 23 attempts against mh-misbehave-ban on sonic |
2020-09-11 07:53:55 |
| 42.200.78.78 | attackbotsspam | 2020-09-10T20:32:31.402974galaxy.wi.uni-potsdam.de sshd[16130]: Invalid user ngatwiri from 42.200.78.78 port 46678 2020-09-10T20:32:31.407788galaxy.wi.uni-potsdam.de sshd[16130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42-200-78-78.static.imsbiz.com 2020-09-10T20:32:31.402974galaxy.wi.uni-potsdam.de sshd[16130]: Invalid user ngatwiri from 42.200.78.78 port 46678 2020-09-10T20:32:33.247310galaxy.wi.uni-potsdam.de sshd[16130]: Failed password for invalid user ngatwiri from 42.200.78.78 port 46678 ssh2 2020-09-10T20:34:51.581319galaxy.wi.uni-potsdam.de sshd[16388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42-200-78-78.static.imsbiz.com user=root 2020-09-10T20:34:53.973978galaxy.wi.uni-potsdam.de sshd[16388]: Failed password for root from 42.200.78.78 port 54894 ssh2 2020-09-10T20:37:13.036828galaxy.wi.uni-potsdam.de sshd[16683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... |
2020-09-11 08:01:58 |
| 198.84.153.230 | attackbotsspam | Sep 10 18:55:19 db sshd[26633]: User root from 198.84.153.230 not allowed because none of user's groups are listed in AllowGroups ... |
2020-09-11 07:52:22 |
| 111.71.36.30 | attackbots | 1599756914 - 09/10/2020 18:55:14 Host: 111.71.36.30/111.71.36.30 Port: 445 TCP Blocked |
2020-09-11 07:58:14 |
| 177.184.202.217 | attack | Sep 10 18:55:08 pornomens sshd\[22128\]: Invalid user chad from 177.184.202.217 port 53990 Sep 10 18:55:08 pornomens sshd\[22128\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.184.202.217 Sep 10 18:55:10 pornomens sshd\[22128\]: Failed password for invalid user chad from 177.184.202.217 port 53990 ssh2 ... |
2020-09-11 08:00:34 |
| 62.171.163.94 | attack | *Port Scan* detected from 62.171.163.94 (DE/Germany/Bavaria/Munich (Ramersdorf-Perlach)/vmi434102.contaboserver.net). 4 hits in the last 205 seconds |
2020-09-11 08:06:00 |
| 14.117.238.146 | attackbots | SP-Scan 52443:8080 detected 2020.09.10 22:45:51 blocked until 2020.10.30 14:48:38 |
2020-09-11 07:39:45 |
| 207.244.229.214 | attackspam | recursive DNS query |
2020-09-11 07:48:19 |
| 24.212.13.95 | attackbotsspam | Lines containing failures of 24.212.13.95 Sep 10 19:23:22 mellenthin sshd[12496]: User r.r from 24.212.13.95 not allowed because not listed in AllowUsers Sep 10 19:23:23 mellenthin sshd[12496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.212.13.95 user=r.r Sep 10 19:23:25 mellenthin sshd[12496]: Failed password for invalid user r.r from 24.212.13.95 port 59812 ssh2 Sep 10 19:23:25 mellenthin sshd[12496]: Connection closed by invalid user r.r 24.212.13.95 port 59812 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=24.212.13.95 |
2020-09-11 07:54:57 |
| 14.21.7.162 | attackbots | (sshd) Failed SSH login from 14.21.7.162 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 11 00:40:06 server sshd[29824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162 user=root Sep 11 00:40:09 server sshd[29824]: Failed password for root from 14.21.7.162 port 61485 ssh2 Sep 11 00:50:15 server sshd[31459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162 user=root Sep 11 00:50:17 server sshd[31459]: Failed password for root from 14.21.7.162 port 61488 ssh2 Sep 11 00:51:27 server sshd[31608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162 user=root |
2020-09-11 08:16:35 |
| 210.14.77.102 | attack | $f2bV_matches |
2020-09-11 08:09:35 |