City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.52.145.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33992
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;48.52.145.45. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020302 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 07:29:28 CST 2025
;; MSG SIZE rcvd: 105
Host 45.145.52.48.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 45.145.52.48.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 101.51.68.61 | attackspambots | 20/4/28@23:56:29: FAIL: Alarm-Network address from=101.51.68.61 20/4/28@23:56:30: FAIL: Alarm-Network address from=101.51.68.61 ... |
2020-04-29 16:07:07 |
| 106.54.114.208 | attack | (sshd) Failed SSH login from 106.54.114.208 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 29 06:57:47 s1 sshd[20932]: Invalid user trade from 106.54.114.208 port 48280 Apr 29 06:57:49 s1 sshd[20932]: Failed password for invalid user trade from 106.54.114.208 port 48280 ssh2 Apr 29 07:01:11 s1 sshd[21010]: Invalid user username from 106.54.114.208 port 54510 Apr 29 07:01:13 s1 sshd[21010]: Failed password for invalid user username from 106.54.114.208 port 54510 ssh2 Apr 29 07:04:02 s1 sshd[21090]: Invalid user admin from 106.54.114.208 port 55624 |
2020-04-29 16:09:17 |
| 51.38.130.63 | attack | Apr 29 08:59:42 vps333114 sshd[15465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=63.ip-51-38-130.eu Apr 29 08:59:44 vps333114 sshd[15465]: Failed password for invalid user contactus from 51.38.130.63 port 56700 ssh2 ... |
2020-04-29 16:20:03 |
| 47.89.17.193 | attackbotsspam | (sshd) Failed SSH login from 47.89.17.193 (HK/Hong Kong/-): 5 in the last 3600 secs |
2020-04-29 16:01:49 |
| 68.83.137.101 | attack | Apr 29 05:34:30 h2855990 sshd[2780305]: Did not receive identification string from 68.83.137.101 port 49450 Apr 29 05:38:18 h2855990 sshd[2780605]: Received disconnect from 68.83.137.101 port 51200:11: Bye Bye [preauth] Apr 29 05:38:18 h2855990 sshd[2780605]: Disconnected from 68.83.137.101 port 51200 [preauth] Apr 29 05:47:47 h2855990 sshd[2781445]: Invalid user admin from 68.83.137.101 port 54258 Apr 29 05:47:47 h2855990 sshd[2781445]: Received disconnect from 68.83.137.101 port 54258:11: Bye Bye [preauth] Apr 29 05:47:47 h2855990 sshd[2781445]: Disconnected from 68.83.137.101 port 54258 [preauth] Apr 29 05:51:09 h2855990 sshd[2781761]: Invalid user ubuntu from 68.83.137.101 port 55142 Apr 29 05:51:09 h2855990 sshd[2781761]: Received disconnect from 68.83.137.101 port 55142:11: Bye Bye [preauth] Apr 29 05:51:09 h2855990 sshd[2781761]: Disconnected from 68.83.137.101 port 55142 [preauth] Apr 29 05:54:30 h2855990 sshd[2782006]: Invalid user ubnt from 68.83.137.101 port 56060 Apr 29 05: |
2020-04-29 16:27:45 |
| 115.159.93.67 | attackspam | Apr 29 04:24:50 firewall sshd[27411]: Invalid user zen from 115.159.93.67 Apr 29 04:24:52 firewall sshd[27411]: Failed password for invalid user zen from 115.159.93.67 port 59437 ssh2 Apr 29 04:30:41 firewall sshd[27591]: Invalid user mara from 115.159.93.67 ... |
2020-04-29 16:18:06 |
| 212.64.54.167 | attackspambots | Apr 29 08:00:54 ns392434 sshd[25491]: Invalid user gts from 212.64.54.167 port 45052 Apr 29 08:00:54 ns392434 sshd[25491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.54.167 Apr 29 08:00:54 ns392434 sshd[25491]: Invalid user gts from 212.64.54.167 port 45052 Apr 29 08:00:56 ns392434 sshd[25491]: Failed password for invalid user gts from 212.64.54.167 port 45052 ssh2 Apr 29 08:09:14 ns392434 sshd[25822]: Invalid user jinsoo from 212.64.54.167 port 46960 Apr 29 08:09:14 ns392434 sshd[25822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.54.167 Apr 29 08:09:14 ns392434 sshd[25822]: Invalid user jinsoo from 212.64.54.167 port 46960 Apr 29 08:09:17 ns392434 sshd[25822]: Failed password for invalid user jinsoo from 212.64.54.167 port 46960 ssh2 Apr 29 08:12:22 ns392434 sshd[26036]: Invalid user aboss from 212.64.54.167 port 55832 |
2020-04-29 15:57:28 |
| 124.156.115.13 | attackbots | Invalid user grep from 124.156.115.13 port 48114 |
2020-04-29 15:53:42 |
| 106.13.107.196 | attackbots | fail2ban/Apr 29 07:32:49 h1962932 sshd[21843]: Invalid user poster from 106.13.107.196 port 54570 Apr 29 07:32:49 h1962932 sshd[21843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.107.196 Apr 29 07:32:49 h1962932 sshd[21843]: Invalid user poster from 106.13.107.196 port 54570 Apr 29 07:32:51 h1962932 sshd[21843]: Failed password for invalid user poster from 106.13.107.196 port 54570 ssh2 Apr 29 07:37:50 h1962932 sshd[22016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.107.196 user=root Apr 29 07:37:53 h1962932 sshd[22016]: Failed password for root from 106.13.107.196 port 55402 ssh2 |
2020-04-29 16:25:19 |
| 106.13.230.250 | attackspambots | 2020-04-29T07:41:59.538801amanda2.illicoweb.com sshd\[39470\]: Invalid user krammer from 106.13.230.250 port 37254 2020-04-29T07:41:59.545105amanda2.illicoweb.com sshd\[39470\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.230.250 2020-04-29T07:42:01.364489amanda2.illicoweb.com sshd\[39470\]: Failed password for invalid user krammer from 106.13.230.250 port 37254 ssh2 2020-04-29T07:46:40.203764amanda2.illicoweb.com sshd\[39881\]: Invalid user ana from 106.13.230.250 port 37464 2020-04-29T07:46:40.209008amanda2.illicoweb.com sshd\[39881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.230.250 ... |
2020-04-29 16:27:21 |
| 171.231.168.45 | attackspambots | Automatic report - Port Scan Attack |
2020-04-29 15:52:17 |
| 103.40.28.111 | attack | [Aegis] @ 2019-07-01 02:54:39 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack |
2020-04-29 16:00:34 |
| 94.102.56.181 | attackspam | firewall-block, port(s): 5011/tcp |
2020-04-29 16:33:54 |
| 167.114.114.193 | attackspambots | leo_www |
2020-04-29 16:18:57 |
| 128.199.143.58 | attack | Invalid user web from 128.199.143.58 port 48226 |
2020-04-29 15:52:48 |