City: Marietta
Region: Georgia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 50.214.63.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43533
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;50.214.63.50. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019082401 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 25 02:26:27 CST 2019
;; MSG SIZE rcvd: 116Host 50.63.214.50.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 50.63.214.50.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 114.67.68.224 | attackbotsspam | Fail2Ban - SSH Bruteforce Attempt |
2019-11-11 03:47:27 |
| 118.24.246.208 | attackbots | Nov 10 20:10:15 srv1 sshd[21742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.246.208 Nov 10 20:10:17 srv1 sshd[21742]: Failed password for invalid user server from 118.24.246.208 port 36850 ssh2 ... |
2019-11-11 03:49:59 |
| 145.239.8.229 | attackspam | $f2bV_matches |
2019-11-11 03:43:27 |
| 49.145.76.109 | attackspambots | /wp-login.php |
2019-11-11 03:20:44 |
| 213.202.230.240 | attackspam | ssh failed login |
2019-11-11 03:36:52 |
| 51.68.198.75 | attackbots | Lines containing failures of 51.68.198.75 (max 1000) Nov 10 14:02:42 localhost sshd[31349]: Invalid user admin from 51.68.198.75 port 33560 Nov 10 14:02:42 localhost sshd[31349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.198.75 Nov 10 14:02:44 localhost sshd[31349]: Failed password for invalid user admin from 51.68.198.75 port 33560 ssh2 Nov 10 14:02:44 localhost sshd[31349]: Received disconnect from 51.68.198.75 port 33560:11: Bye Bye [preauth] Nov 10 14:02:44 localhost sshd[31349]: Disconnected from invalid user admin 51.68.198.75 port 33560 [preauth] Nov 10 14:19:23 localhost sshd[6342]: User r.r from 51.68.198.75 not allowed because listed in DenyUsers Nov 10 14:19:23 localhost sshd[6342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.198.75 user=r.r Nov 10 14:19:24 localhost sshd[6342]: Failed password for invalid user r.r from 51.68.198.75 port 55278 ssh2 Nov 10 14........ ------------------------------ |
2019-11-11 03:48:53 |
| 222.218.17.189 | attack | Brute force attempt |
2019-11-11 03:55:57 |
| 142.93.214.20 | attackspam | Nov 10 09:35:09 web9 sshd\[14364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.214.20 user=root Nov 10 09:35:12 web9 sshd\[14364\]: Failed password for root from 142.93.214.20 port 52310 ssh2 Nov 10 09:41:58 web9 sshd\[15476\]: Invalid user from 142.93.214.20 Nov 10 09:41:58 web9 sshd\[15476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.214.20 Nov 10 09:42:00 web9 sshd\[15476\]: Failed password for invalid user from 142.93.214.20 port 33376 ssh2 |
2019-11-11 03:52:19 |
| 185.254.68.171 | attackbots | Nov 10 19:57:06 h2177944 kernel: \[6287794.126085\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.68.171 DST=85.214.117.9 LEN=671 TOS=0x00 PREC=0x00 TTL=121 ID=31055 PROTO=UDP SPT=40535 DPT=6002 LEN=651 Nov 10 19:57:06 h2177944 kernel: \[6287794.126354\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.68.171 DST=85.214.117.9 LEN=671 TOS=0x00 PREC=0x00 TTL=122 ID=31056 PROTO=UDP SPT=10255 DPT=6780 LEN=651 Nov 10 19:57:06 h2177944 kernel: \[6287794.143668\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.68.171 DST=85.214.117.9 LEN=673 TOS=0x00 PREC=0x00 TTL=122 ID=31057 PROTO=UDP SPT=37922 DPT=48100 LEN=653 Nov 10 19:57:44 h2177944 kernel: \[6287831.794127\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.68.171 DST=85.214.117.9 LEN=673 TOS=0x00 PREC=0x00 TTL=121 ID=31058 PROTO=UDP SPT=14310 DPT=37000 LEN=653 Nov 10 19:57:44 h2177944 kernel: \[6287831.798619\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.68.171 DST=85.214.117.9 LEN=671 TOS=0x00 PREC=0x00 TTL=122 ID=31059 PROTO=UDP SPT=48076 DPT=3040 LEN=651 .. |
2019-11-11 03:40:07 |
| 193.205.162.163 | attackspam | Nov 10 20:13:39 root sshd[8993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.205.162.163 Nov 10 20:13:41 root sshd[8993]: Failed password for invalid user 371 from 193.205.162.163 port 51104 ssh2 Nov 10 20:18:09 root sshd[9027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.205.162.163 ... |
2019-11-11 03:21:19 |
| 222.186.173.154 | attackbotsspam | Nov 10 09:40:49 auw2 sshd\[28117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root Nov 10 09:40:52 auw2 sshd\[28117\]: Failed password for root from 222.186.173.154 port 64020 ssh2 Nov 10 09:41:08 auw2 sshd\[28139\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root Nov 10 09:41:10 auw2 sshd\[28139\]: Failed password for root from 222.186.173.154 port 6848 ssh2 Nov 10 09:41:13 auw2 sshd\[28139\]: Failed password for root from 222.186.173.154 port 6848 ssh2 |
2019-11-11 03:42:38 |
| 123.50.7.134 | attackbotsspam | Nov 10 09:08:34 php1 sshd\[20707\]: Invalid user teste from 123.50.7.134 Nov 10 09:08:34 php1 sshd\[20707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.50.7.134 Nov 10 09:08:37 php1 sshd\[20707\]: Failed password for invalid user teste from 123.50.7.134 port 61993 ssh2 Nov 10 09:12:46 php1 sshd\[21171\]: Invalid user user from 123.50.7.134 Nov 10 09:12:46 php1 sshd\[21171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.50.7.134 |
2019-11-11 03:31:39 |
| 221.231.47.42 | attack | Nov 10 17:01:51 mxgate1 postfix/postscreen[24419]: CONNECT from [221.231.47.42]:44256 to [176.31.12.44]:25 Nov 10 17:01:51 mxgate1 postfix/dnsblog[24421]: addr 221.231.47.42 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 10 17:01:51 mxgate1 postfix/dnsblog[24423]: addr 221.231.47.42 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 10 17:01:51 mxgate1 postfix/dnsblog[24423]: addr 221.231.47.42 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 10 17:01:51 mxgate1 postfix/dnsblog[24423]: addr 221.231.47.42 listed by domain zen.spamhaus.org as 127.0.0.3 Nov 10 17:01:51 mxgate1 postfix/dnsblog[24420]: addr 221.231.47.42 listed by domain bl.spamcop.net as 127.0.0.2 Nov 10 17:01:51 mxgate1 postfix/dnsblog[24424]: addr 221.231.47.42 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Nov 10 17:01:52 mxgate1 postfix/dnsblog[24422]: addr 221.231.47.42 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 10 17:01:53 mxgate1 postfix/postscreen[24419]: PREGREET 56 after 1.5........ ------------------------------- |
2019-11-11 03:51:39 |
| 51.77.148.87 | attackspambots | Nov 10 18:29:04 vps691689 sshd[27359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.148.87 Nov 10 18:29:06 vps691689 sshd[27359]: Failed password for invalid user WinDows!@ from 51.77.148.87 port 52982 ssh2 ... |
2019-11-11 03:49:25 |
| 123.207.108.51 | attackbotsspam | no |
2019-11-11 03:32:10 |