City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.148.149.253
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7947
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;48.148.149.253. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025030100 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 02 01:29:38 CST 2025
;; MSG SIZE rcvd: 107Host 253.149.148.48.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 253.149.148.48.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 96.84.240.89 | attackbots | Jul 19 08:55:31 sigma sshd\[29204\]: Invalid user docker from 96.84.240.89Jul 19 08:55:33 sigma sshd\[29204\]: Failed password for invalid user docker from 96.84.240.89 port 52473 ssh2 ... |
2020-07-19 16:26:57 |
| 3.7.240.68 | attackbots | Jul 17 03:09:45 h2065291 sshd[13876]: Invalid user uftp from 3.7.240.68 Jul 17 03:09:45 h2065291 sshd[13876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-3-7-240-68.ap-south-1.compute.amazonaws.com Jul 17 03:09:47 h2065291 sshd[13876]: Failed password for invalid user uftp from 3.7.240.68 port 52788 ssh2 Jul 17 03:09:47 h2065291 sshd[13876]: Received disconnect from 3.7.240.68: 11: Bye Bye [preauth] Jul 17 04:00:36 h2065291 sshd[14752]: Invalid user facai from 3.7.240.68 Jul 17 04:00:36 h2065291 sshd[14752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-3-7-240-68.ap-south-1.compute.amazonaws.com Jul 17 04:00:38 h2065291 sshd[14752]: Failed password for invalid user facai from 3.7.240.68 port 53250 ssh2 Jul 17 04:00:38 h2065291 sshd[14752]: Received disconnect from 3.7.240.68: 11: Bye Bye [preauth] Jul 17 04:02:19 h2065291 sshd[14780]: Invalid user nice from 3.7.240.68 Jul 17........ ------------------------------- |
2020-07-19 16:59:53 |
| 211.145.48.248 | attackspam | Jul 19 09:49:01 dev0-dcde-rnet sshd[26532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.145.48.248 Jul 19 09:49:02 dev0-dcde-rnet sshd[26532]: Failed password for invalid user admin from 211.145.48.248 port 20380 ssh2 Jul 19 09:55:20 dev0-dcde-rnet sshd[26626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.145.48.248 |
2020-07-19 16:41:22 |
| 91.121.164.188 | attackspam | (sshd) Failed SSH login from 91.121.164.188 (FR/France/ns360710.ip-91-121-164.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 19 10:11:27 amsweb01 sshd[16164]: Invalid user monit from 91.121.164.188 port 58420 Jul 19 10:11:30 amsweb01 sshd[16164]: Failed password for invalid user monit from 91.121.164.188 port 58420 ssh2 Jul 19 10:22:24 amsweb01 sshd[17994]: Invalid user fit from 91.121.164.188 port 47154 Jul 19 10:22:26 amsweb01 sshd[17994]: Failed password for invalid user fit from 91.121.164.188 port 47154 ssh2 Jul 19 10:26:22 amsweb01 sshd[18692]: Invalid user guest from 91.121.164.188 port 32866 |
2020-07-19 16:32:31 |
| 103.114.196.254 | attack | port scan and connect, tcp 23 (telnet) |
2020-07-19 16:39:30 |
| 185.217.1.243 | attackbotsspam | *Port Scan* detected from 185.217.1.243 (SE/Sweden/Stockholm/Stockholm/-). 4 hits in the last 296 seconds |
2020-07-19 16:55:20 |
| 217.182.73.36 | attack | Automatic report - XMLRPC Attack |
2020-07-19 17:00:57 |
| 188.136.168.18 | attackbots | 1595145315 - 07/19/2020 09:55:15 Host: 188.136.168.18/188.136.168.18 Port: 8080 TCP Blocked |
2020-07-19 16:44:15 |
| 129.28.177.29 | attackbots | SSH Brute-Force. Ports scanning. |
2020-07-19 16:59:07 |
| 54.38.185.131 | attackbotsspam | Jul 19 10:07:08 meumeu sshd[1011581]: Invalid user brook from 54.38.185.131 port 49734 Jul 19 10:07:08 meumeu sshd[1011581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.185.131 Jul 19 10:07:08 meumeu sshd[1011581]: Invalid user brook from 54.38.185.131 port 49734 Jul 19 10:07:10 meumeu sshd[1011581]: Failed password for invalid user brook from 54.38.185.131 port 49734 ssh2 Jul 19 10:11:07 meumeu sshd[1011763]: Invalid user abb from 54.38.185.131 port 33594 Jul 19 10:11:07 meumeu sshd[1011763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.185.131 Jul 19 10:11:07 meumeu sshd[1011763]: Invalid user abb from 54.38.185.131 port 33594 Jul 19 10:11:09 meumeu sshd[1011763]: Failed password for invalid user abb from 54.38.185.131 port 33594 ssh2 Jul 19 10:15:11 meumeu sshd[1011916]: Invalid user alexk from 54.38.185.131 port 45686 ... |
2020-07-19 16:47:09 |
| 218.92.0.192 | attack | 07/19/2020-04:42:01.017945 218.92.0.192 Protocol: 6 ET SCAN Potential SSH Scan |
2020-07-19 16:43:09 |
| 178.32.163.201 | attackbots | Jul 18 22:57:34 web9 sshd\[18516\]: Invalid user db2 from 178.32.163.201 Jul 18 22:57:34 web9 sshd\[18516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.32.163.201 Jul 18 22:57:36 web9 sshd\[18516\]: Failed password for invalid user db2 from 178.32.163.201 port 47004 ssh2 Jul 18 23:00:54 web9 sshd\[18995\]: Invalid user dm from 178.32.163.201 Jul 18 23:00:54 web9 sshd\[18995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.32.163.201 |
2020-07-19 17:02:38 |
| 181.57.133.86 | attack | $f2bV_matches |
2020-07-19 16:56:50 |
| 184.105.139.108 | attack | srv02 Mass scanning activity detected Target: 873(rsync) .. |
2020-07-19 16:53:52 |
| 49.233.177.197 | attack | Jul 19 10:06:53 home sshd[12081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.177.197 Jul 19 10:06:54 home sshd[12081]: Failed password for invalid user bxu from 49.233.177.197 port 53612 ssh2 Jul 19 10:12:31 home sshd[12766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.177.197 ... |
2020-07-19 16:27:56 |