City: Elk Grove
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: Frontier Communications of America, Inc.
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 50.126.134.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50861
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;50.126.134.57. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019080201 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 03 03:48:47 CST 2019
;; MSG SIZE rcvd: 117Host 57.134.126.50.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 57.134.126.50.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 220.76.173.53 | attackspam | Lines containing failures of 220.76.173.53 auth.log:Aug 10 02:22:01 omfg sshd[27885]: Connection from 220.76.173.53 port 47892 on 78.46.60.40 port 22 auth.log:Aug 10 02:22:01 omfg sshd[27885]: Bad protocol version identification '' from 220.76.173.53 port 47892 auth.log:Aug 10 02:22:02 omfg sshd[27886]: Connection from 220.76.173.53 port 47980 on 78.46.60.40 port 22 auth.log:Aug 10 02:22:03 omfg sshd[27886]: Connection closed by authenticating user r.r 220.76.173.53 port 47980 [preauth] auth.log:Aug 10 02:22:04 omfg sshd[27888]: Connection from 220.76.173.53 port 48179 on 78.46.60.40 port 22 auth.log:Aug 10 02:22:05 omfg sshd[27888]: Connection closed by authenticating user r.r 220.76.173.53 port 48179 [preauth] auth.log:Aug 10 02:22:06 omfg sshd[27890]: Connection from 220.76.173.53 port 48387 on 78.46.60.40 port 22 auth.log:Aug 10 02:22:07 omfg sshd[27890]: Connection closed by authenticating user r.r 220.76.173.53 port 48387 [preauth] auth.log:Aug 10 02:22:07 omfg ssh........ ------------------------------ |
2020-08-10 22:10:10 |
| 54.37.158.218 | attackspam | 2020-08-10T14:34:42.092199+02:00 |
2020-08-10 22:44:48 |
| 141.98.9.137 | attack | Aug 10 16:23:24 piServer sshd[14568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.137 Aug 10 16:23:27 piServer sshd[14568]: Failed password for invalid user operator from 141.98.9.137 port 59302 ssh2 Aug 10 16:23:58 piServer sshd[14689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.137 ... |
2020-08-10 22:48:54 |
| 65.49.205.39 | attack | Aug 10 14:42:26 vm0 sshd[14827]: Failed password for root from 65.49.205.39 port 44328 ssh2 ... |
2020-08-10 22:43:16 |
| 141.98.9.161 | attackspambots | Aug 10 16:23:15 piServer sshd[14539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.161 Aug 10 16:23:17 piServer sshd[14539]: Failed password for invalid user admin from 141.98.9.161 port 38619 ssh2 Aug 10 16:23:47 piServer sshd[14652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.161 ... |
2020-08-10 22:51:06 |
| 61.91.202.10 | attackbots | Unauthorised access (Aug 10) SRC=61.91.202.10 LEN=52 TTL=113 ID=32715 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Aug 10) SRC=61.91.202.10 LEN=52 TTL=113 ID=16696 DF TCP DPT=445 WINDOW=8192 SYN |
2020-08-10 22:22:36 |
| 201.220.153.218 | attackspambots | Automatic report - Port Scan Attack |
2020-08-10 22:13:00 |
| 110.49.71.244 | attack | Aug 10 07:36:16 vm0 sshd[13857]: Failed password for root from 110.49.71.244 port 41438 ssh2 Aug 10 14:06:59 vm0 sshd[9263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.71.244 ... |
2020-08-10 22:44:04 |
| 188.226.167.212 | attackspam | Bruteforce detected by fail2ban |
2020-08-10 22:27:50 |
| 84.47.171.253 | attackspambots | Aug 10 05:19:56 mail sshd\[22160\]: Did not receive identification string from 84.47.171.253 Aug 10 08:30:10 mail sshd\[24565\]: Did not receive identification string from 84.47.171.253 Aug 10 13:31:31 mail sshd\[32568\]: Did not receive identification string from 84.47.171.253 Aug 10 14:06:33 mail sshd\[1378\]: Did not receive identification string from 84.47.171.253 Aug 10 14:07:22 mail sshd\[1406\]: Did not receive identification string from 84.47.171.253 ... |
2020-08-10 22:21:34 |
| 202.187.14.42 | attack | Automatic report - Port Scan Attack |
2020-08-10 22:47:53 |
| 175.24.4.5 | attackspam | Lines containing failures of 175.24.4.5 Aug 10 07:47:55 kmh-vmh-003-fsn07 sshd[31649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.4.5 user=r.r Aug 10 07:47:57 kmh-vmh-003-fsn07 sshd[31649]: Failed password for r.r from 175.24.4.5 port 35346 ssh2 Aug 10 07:47:58 kmh-vmh-003-fsn07 sshd[31649]: Received disconnect from 175.24.4.5 port 35346:11: Bye Bye [preauth] Aug 10 07:47:58 kmh-vmh-003-fsn07 sshd[31649]: Disconnected from authenticating user r.r 175.24.4.5 port 35346 [preauth] Aug 10 08:05:03 kmh-vmh-003-fsn07 sshd[1652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.4.5 user=r.r Aug 10 08:05:05 kmh-vmh-003-fsn07 sshd[1652]: Failed password for r.r from 175.24.4.5 port 55744 ssh2 Aug 10 08:05:07 kmh-vmh-003-fsn07 sshd[1652]: Received disconnect from 175.24.4.5 port 55744:11: Bye Bye [preauth] Aug 10 08:05:07 kmh-vmh-003-fsn07 sshd[1652]: Disconnected from authenticatin........ ------------------------------ |
2020-08-10 22:37:19 |
| 134.209.18.220 | attackbots | Aug 10 14:07:57 vm0 sshd[9400]: Failed password for root from 134.209.18.220 port 38610 ssh2 ... |
2020-08-10 22:45:21 |
| 192.144.218.101 | attackbotsspam | Aug 10 13:56:33 roki-contabo sshd\[14573\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.218.101 user=root Aug 10 13:56:36 roki-contabo sshd\[14573\]: Failed password for root from 192.144.218.101 port 43930 ssh2 Aug 10 14:03:43 roki-contabo sshd\[14711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.218.101 user=root Aug 10 14:03:45 roki-contabo sshd\[14711\]: Failed password for root from 192.144.218.101 port 35560 ssh2 Aug 10 14:07:19 roki-contabo sshd\[14765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.218.101 user=root ... |
2020-08-10 22:23:29 |
| 192.241.202.169 | attack | Aug 10 18:58:33 gw1 sshd[984]: Failed password for root from 192.241.202.169 port 58306 ssh2 ... |
2020-08-10 22:19:37 |