City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.149.196.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8361
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;48.149.196.49. IN A
;; AUTHORITY SECTION:
. 3389 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019061002 1800 900 604800 86400
;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jun 11 11:16:58 CST 2019
;; MSG SIZE rcvd: 117
Host 49.196.149.48.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 49.196.149.48.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 117.135.131.123 | attack | suspicious action Wed, 04 Mar 2020 10:34:18 -0300 |
2020-03-05 02:28:13 |
| 101.224.56.20 | attackspambots | Automatic report - Port Scan Attack |
2020-03-05 02:15:14 |
| 201.134.41.35 | attackspam | suspicious action Wed, 04 Mar 2020 10:34:48 -0300 |
2020-03-05 01:50:27 |
| 103.45.128.125 | attackbotsspam | Mar 4 15:52:03 server sshd\[20272\]: Invalid user airflow from 103.45.128.125 Mar 4 15:52:03 server sshd\[20272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.128.125 Mar 4 15:52:05 server sshd\[20272\]: Failed password for invalid user airflow from 103.45.128.125 port 45932 ssh2 Mar 4 16:34:11 server sshd\[28088\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.128.125 user=root Mar 4 16:34:14 server sshd\[28088\]: Failed password for root from 103.45.128.125 port 41642 ssh2 ... |
2020-03-05 02:31:04 |
| 158.69.197.113 | attackspam | Mar 4 07:44:24 tdfoods sshd\[16593\]: Invalid user tester from 158.69.197.113 Mar 4 07:44:24 tdfoods sshd\[16593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.ip-158-69-197.net Mar 4 07:44:25 tdfoods sshd\[16593\]: Failed password for invalid user tester from 158.69.197.113 port 39768 ssh2 Mar 4 07:52:51 tdfoods sshd\[17286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.ip-158-69-197.net user=root Mar 4 07:52:53 tdfoods sshd\[17286\]: Failed password for root from 158.69.197.113 port 49116 ssh2 |
2020-03-05 01:56:32 |
| 78.130.167.162 | attack | 1583328879 - 03/04/2020 14:34:39 Host: 78.130.167.162/78.130.167.162 Port: 445 TCP Blocked |
2020-03-05 02:04:09 |
| 117.135.115.70 | attack | suspicious action Wed, 04 Mar 2020 10:34:10 -0300 |
2020-03-05 02:34:40 |
| 106.13.1.245 | attackbots | Mar 4 18:51:09 * sshd[31278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.1.245 Mar 4 18:51:11 * sshd[31278]: Failed password for invalid user arthur from 106.13.1.245 port 39528 ssh2 |
2020-03-05 02:25:36 |
| 92.63.194.32 | attack | (sshd) Failed SSH login from 92.63.194.32 (NL/Netherlands/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 4 19:14:52 ubnt-55d23 sshd[20890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.32 user=root Mar 4 19:14:53 ubnt-55d23 sshd[20890]: Failed password for root from 92.63.194.32 port 40823 ssh2 |
2020-03-05 02:28:41 |
| 78.147.229.129 | attack | Honeypot attack, port: 5555, PTR: host-78-147-229-129.as13285.net. |
2020-03-05 02:14:26 |
| 218.92.0.145 | attack | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145 user=root Failed password for root from 218.92.0.145 port 13799 ssh2 Failed password for root from 218.92.0.145 port 13799 ssh2 Failed password for root from 218.92.0.145 port 13799 ssh2 Failed password for root from 218.92.0.145 port 13799 ssh2 |
2020-03-05 02:26:17 |
| 100.24.6.168 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/100.24.6.168/ US - 1H : (127) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN14618 IP : 100.24.6.168 CIDR : 100.24.0.0/13 PREFIX COUNT : 433 UNIQUE IP COUNT : 19526400 ATTACKS DETECTED ASN14618 : 1H - 3 3H - 5 6H - 13 12H - 17 24H - 17 DateTime : 2020-03-04 14:34:08 INFO : DNS DENIED Scan Detected and Blocked by ADMIN - data recovery |
2020-03-05 02:35:02 |
| 169.54.152.20 | attackspambots | Mar 4 14:34:38 lnxded63 sshd[5230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.54.152.20 |
2020-03-05 02:06:55 |
| 51.91.8.222 | attackbotsspam | Mar 4 07:55:53 wbs sshd\[22805\]: Invalid user redmine from 51.91.8.222 Mar 4 07:55:53 wbs sshd\[22805\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.ip-51-91-8.eu Mar 4 07:55:56 wbs sshd\[22805\]: Failed password for invalid user redmine from 51.91.8.222 port 47764 ssh2 Mar 4 08:03:53 wbs sshd\[23571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.ip-51-91-8.eu user=sys Mar 4 08:03:55 wbs sshd\[23571\]: Failed password for sys from 51.91.8.222 port 53790 ssh2 |
2020-03-05 02:10:04 |
| 222.186.15.10 | attack | Mar 4 17:56:55 marvibiene sshd[56370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.10 user=root Mar 4 17:56:57 marvibiene sshd[56370]: Failed password for root from 222.186.15.10 port 29429 ssh2 Mar 4 17:57:00 marvibiene sshd[56370]: Failed password for root from 222.186.15.10 port 29429 ssh2 Mar 4 17:56:55 marvibiene sshd[56370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.10 user=root Mar 4 17:56:57 marvibiene sshd[56370]: Failed password for root from 222.186.15.10 port 29429 ssh2 Mar 4 17:57:00 marvibiene sshd[56370]: Failed password for root from 222.186.15.10 port 29429 ssh2 ... |
2020-03-05 02:09:00 |