City: unknown
Region: unknown
Country: Nepal
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.244.97.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56160
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;49.244.97.55. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 17:42:46 CST 2025
;; MSG SIZE rcvd: 105
55.97.244.49.in-addr.arpa domain name pointer 55-ftth.ntc.net.np.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
55.97.244.49.in-addr.arpa name = 55-ftth.ntc.net.np.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 128.199.144.99 | attackspam | Looking for resource vulnerabilities |
2019-06-25 21:13:19 |
| 110.78.183.114 | attackspambots | Unauthorized connection attempt from IP address 110.78.183.114 on Port 445(SMB) |
2019-06-25 21:43:28 |
| 180.121.90.40 | attack | 2019-06-25T06:36:25.295559 X postfix/smtpd[11524]: warning: unknown[180.121.90.40]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-25T08:52:29.452797 X postfix/smtpd[30084]: warning: unknown[180.121.90.40]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-25T08:52:46.336848 X postfix/smtpd[30084]: warning: unknown[180.121.90.40]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-06-25 21:47:03 |
| 157.230.234.222 | attackspambots | Jun 25 15:17:20 mail sshd\[28218\]: Invalid user prod from 157.230.234.222 port 49646 Jun 25 15:17:20 mail sshd\[28218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.234.222 Jun 25 15:17:22 mail sshd\[28218\]: Failed password for invalid user prod from 157.230.234.222 port 49646 ssh2 Jun 25 15:18:51 mail sshd\[28386\]: Invalid user operador from 157.230.234.222 port 38348 Jun 25 15:18:51 mail sshd\[28386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.234.222 |
2019-06-25 21:28:10 |
| 60.241.23.58 | attackspam | Jun 25 14:50:05 ns37 sshd[20139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.241.23.58 Jun 25 14:50:05 ns37 sshd[20139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.241.23.58 |
2019-06-25 21:14:22 |
| 222.252.16.75 | attackbotsspam | Unauthorised access (Jun 25) SRC=222.252.16.75 LEN=52 TTL=116 ID=4817 DF TCP DPT=445 WINDOW=8192 SYN |
2019-06-25 21:25:44 |
| 203.171.227.205 | attackbots | Jun 25 15:03:47 h2177944 sshd\[12407\]: Invalid user sonhn from 203.171.227.205 port 50619 Jun 25 15:03:47 h2177944 sshd\[12407\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.171.227.205 Jun 25 15:03:49 h2177944 sshd\[12407\]: Failed password for invalid user sonhn from 203.171.227.205 port 50619 ssh2 Jun 25 15:06:00 h2177944 sshd\[12430\]: Invalid user pisica from 203.171.227.205 port 58807 ... |
2019-06-25 22:04:33 |
| 218.236.19.3 | attack | Jun 25 09:23:25 vtv3 sshd\[5109\]: Invalid user alex from 218.236.19.3 port 27523 Jun 25 09:23:25 vtv3 sshd\[5109\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.236.19.3 Jun 25 09:23:27 vtv3 sshd\[5109\]: Failed password for invalid user alex from 218.236.19.3 port 27523 ssh2 Jun 25 09:27:07 vtv3 sshd\[9059\]: Invalid user clarisse from 218.236.19.3 port 45265 Jun 25 09:27:07 vtv3 sshd\[9059\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.236.19.3 Jun 25 09:37:45 vtv3 sshd\[14733\]: Invalid user redmine from 218.236.19.3 port 42482 Jun 25 09:37:45 vtv3 sshd\[14733\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.236.19.3 Jun 25 09:37:46 vtv3 sshd\[14733\]: Failed password for invalid user redmine from 218.236.19.3 port 42482 ssh2 Jun 25 09:39:37 vtv3 sshd\[15432\]: Invalid user user10 from 218.236.19.3 port 51457 Jun 25 09:39:37 vtv3 sshd\[15432\]: pam_unix\(ssh |
2019-06-25 22:01:54 |
| 204.48.17.40 | attackspam | www.xn--netzfundstckderwoche-yec.de 204.48.17.40 \[25/Jun/2019:08:53:41 +0200\] "POST /wp-login.php HTTP/1.1" 200 5660 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.xn--netzfundstckderwoche-yec.de 204.48.17.40 \[25/Jun/2019:08:53:45 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4094 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-06-25 21:24:48 |
| 23.94.156.29 | attackbotsspam | Jun 25 08:26:00 debian sshd\[10528\]: Invalid user ann from 23.94.156.29 port 45984 Jun 25 08:26:00 debian sshd\[10528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.156.29 ... |
2019-06-25 21:40:22 |
| 119.28.14.154 | attackspambots | Jun 25 14:54:47 mail sshd\[29918\]: Invalid user cynthia from 119.28.14.154 port 49516 Jun 25 14:54:47 mail sshd\[29918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.14.154 Jun 25 14:54:49 mail sshd\[29918\]: Failed password for invalid user cynthia from 119.28.14.154 port 49516 ssh2 Jun 25 14:58:00 mail sshd\[31596\]: Invalid user noc from 119.28.14.154 port 54158 Jun 25 14:58:00 mail sshd\[31596\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.14.154 ... |
2019-06-25 21:20:16 |
| 165.22.124.220 | attack | Jun 25 15:37:33 s64-1 sshd[11824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.124.220 Jun 25 15:37:35 s64-1 sshd[11824]: Failed password for invalid user xiao from 165.22.124.220 port 53182 ssh2 Jun 25 15:40:13 s64-1 sshd[11868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.124.220 ... |
2019-06-25 21:57:05 |
| 95.79.111.63 | attack | [portscan] Port scan |
2019-06-25 21:25:15 |
| 178.255.24.73 | attackbots | php WP PHPmyadamin ABUSE blocked for 12h |
2019-06-25 21:10:55 |
| 52.124.18.32 | attackbots | NAME : BLAZINGSEO-US-28 CIDR : 52.124.18.0/23 | STATUS : 200 ROBOT {Looking for resource vulnerabilities} DDoS Attack USA - Nebraska - block certain countries :) IP: 52.124.18.32 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-06-25 21:23:35 |