City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.6.106.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28354
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;48.6.106.149. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020101 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 02 06:40:58 CST 2025
;; MSG SIZE rcvd: 105Host 149.106.6.48.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 149.106.6.48.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 200.194.28.116 | attack | Jul 19 18:16:03 server sshd[14527]: Failed password for root from 200.194.28.116 port 50440 ssh2 Jul 19 18:16:07 server sshd[14527]: Failed password for root from 200.194.28.116 port 50440 ssh2 Jul 19 18:16:10 server sshd[14527]: Failed password for root from 200.194.28.116 port 50440 ssh2 |
2020-07-20 00:35:03 |
| 64.227.2.96 | attackspambots | Tried sshing with brute force. |
2020-07-20 00:15:49 |
| 23.105.196.142 | attack | $f2bV_matches |
2020-07-20 00:08:56 |
| 103.239.84.134 | attackbots | 2020-07-19T19:04:21.235111mail.standpoint.com.ua sshd[934]: Invalid user ftpuser from 103.239.84.134 port 38550 2020-07-19T19:04:21.237911mail.standpoint.com.ua sshd[934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.239.84.134 2020-07-19T19:04:21.235111mail.standpoint.com.ua sshd[934]: Invalid user ftpuser from 103.239.84.134 port 38550 2020-07-19T19:04:22.897193mail.standpoint.com.ua sshd[934]: Failed password for invalid user ftpuser from 103.239.84.134 port 38550 ssh2 2020-07-19T19:08:35.181713mail.standpoint.com.ua sshd[1531]: Invalid user client from 103.239.84.134 port 40606 ... |
2020-07-20 00:10:47 |
| 176.74.13.170 | attackspam | Jul 19 18:22:31 meumeu sshd[1039656]: Invalid user old from 176.74.13.170 port 50552 Jul 19 18:22:31 meumeu sshd[1039656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.74.13.170 Jul 19 18:22:31 meumeu sshd[1039656]: Invalid user old from 176.74.13.170 port 50552 Jul 19 18:22:33 meumeu sshd[1039656]: Failed password for invalid user old from 176.74.13.170 port 50552 ssh2 Jul 19 18:25:44 meumeu sshd[1039799]: Invalid user farhad from 176.74.13.170 port 45630 Jul 19 18:25:44 meumeu sshd[1039799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.74.13.170 Jul 19 18:25:44 meumeu sshd[1039799]: Invalid user farhad from 176.74.13.170 port 45630 Jul 19 18:25:45 meumeu sshd[1039799]: Failed password for invalid user farhad from 176.74.13.170 port 45630 ssh2 Jul 19 18:29:16 meumeu sshd[1039910]: Invalid user mm from 176.74.13.170 port 40706 ... |
2020-07-20 00:42:53 |
| 222.186.173.183 | attackspambots | Jul 19 18:30:45 ovpn sshd\[23273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183 user=root Jul 19 18:30:46 ovpn sshd\[23273\]: Failed password for root from 222.186.173.183 port 61234 ssh2 Jul 19 18:30:56 ovpn sshd\[23273\]: Failed password for root from 222.186.173.183 port 61234 ssh2 Jul 19 18:30:59 ovpn sshd\[23273\]: Failed password for root from 222.186.173.183 port 61234 ssh2 Jul 19 18:31:03 ovpn sshd\[23350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183 user=root |
2020-07-20 00:46:27 |
| 103.61.102.74 | attackspambots | Jul 19 18:03:30 server sshd[5024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.61.102.74 Jul 19 18:03:32 server sshd[5024]: Failed password for invalid user hexin from 103.61.102.74 port 55074 ssh2 Jul 19 18:09:27 server sshd[5813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.61.102.74 ... |
2020-07-20 00:25:05 |
| 46.38.150.191 | attack | Jul 19 18:35:15 srv01 postfix/smtpd\[32480\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 18:35:24 srv01 postfix/smtpd\[32468\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 18:35:28 srv01 postfix/smtpd\[5054\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 18:35:51 srv01 postfix/smtpd\[25720\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 18:36:05 srv01 postfix/smtpd\[5054\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-20 00:36:34 |
| 193.112.143.141 | attack | B: Abusive ssh attack |
2020-07-20 00:36:55 |
| 69.94.158.121 | attack | SpamScore above: 10.0 |
2020-07-20 00:41:41 |
| 193.27.228.214 | attack | IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking. |
2020-07-20 00:29:12 |
| 185.176.27.102 | attack | [H1.VM1] Blocked by UFW |
2020-07-20 00:31:17 |
| 192.241.236.62 | attackspam | "Found User-Agent associated with security scanner - Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x" |
2020-07-20 00:43:54 |
| 122.228.19.80 | attackbots | Jul 19 18:09:05 debian-2gb-nbg1-2 kernel: \[17433489.818864\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=122.228.19.80 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=111 ID=6869 PROTO=TCP SPT=24163 DPT=49155 WINDOW=29200 RES=0x00 SYN URGP=0 |
2020-07-20 00:45:22 |
| 193.122.167.164 | attackbots | Jul 19 18:04:07 server sshd[12926]: Failed password for invalid user gd from 193.122.167.164 port 43106 ssh2 Jul 19 18:06:42 server sshd[14855]: Failed password for invalid user cr from 193.122.167.164 port 57542 ssh2 Jul 19 18:09:23 server sshd[17067]: Failed password for invalid user app from 193.122.167.164 port 43748 ssh2 |
2020-07-20 00:30:40 |