City: San Jose
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.246.64.23
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61904
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.246.64.23. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024121001 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 11 09:20:51 CST 2024
;; MSG SIZE rcvd: 105Host 23.64.246.52.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 23.64.246.52.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 161.35.99.173 | attack | 2020-10-09T17:56:12.912055galaxy.wi.uni-potsdam.de sshd[27468]: Failed password for invalid user sage from 161.35.99.173 port 48366 ssh2 2020-10-09T17:57:18.060145galaxy.wi.uni-potsdam.de sshd[27608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.99.173 user=root 2020-10-09T17:57:19.623064galaxy.wi.uni-potsdam.de sshd[27608]: Failed password for root from 161.35.99.173 port 36454 ssh2 2020-10-09T17:58:18.628984galaxy.wi.uni-potsdam.de sshd[27718]: Invalid user backup from 161.35.99.173 port 52770 2020-10-09T17:58:18.633948galaxy.wi.uni-potsdam.de sshd[27718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.99.173 2020-10-09T17:58:18.628984galaxy.wi.uni-potsdam.de sshd[27718]: Invalid user backup from 161.35.99.173 port 52770 2020-10-09T17:58:20.770306galaxy.wi.uni-potsdam.de sshd[27718]: Failed password for invalid user backup from 161.35.99.173 port 52770 ssh2 2020-10-09T17:59:20.599649gal ... |
2020-10-10 02:35:57 |
| 106.12.100.206 | attackspam | $f2bV_matches |
2020-10-10 02:34:31 |
| 39.77.30.194 | attackbots | Fail2Ban Ban Triggered |
2020-10-10 02:32:16 |
| 162.158.94.198 | attackspam | srv02 DDoS Malware Target(80:http) .. |
2020-10-10 02:27:15 |
| 144.217.42.212 | attackbotsspam | 2020-10-09T10:46:20.753032cyberdyne sshd[1676903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.42.212 user=root 2020-10-09T10:46:22.466407cyberdyne sshd[1676903]: Failed password for root from 144.217.42.212 port 39322 ssh2 2020-10-09T10:47:43.282429cyberdyne sshd[1676933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.42.212 user=root 2020-10-09T10:47:45.723243cyberdyne sshd[1676933]: Failed password for root from 144.217.42.212 port 48853 ssh2 ... |
2020-10-10 02:30:17 |
| 203.130.242.68 | attackbots | (sshd) Failed SSH login from 203.130.242.68 (ID/Indonesia/ts14.techscape.co.id): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 9 13:32:51 optimus sshd[4446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.130.242.68 user=root Oct 9 13:32:53 optimus sshd[4446]: Failed password for root from 203.130.242.68 port 51000 ssh2 Oct 9 13:48:31 optimus sshd[9463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.130.242.68 user=root Oct 9 13:48:33 optimus sshd[9463]: Failed password for root from 203.130.242.68 port 52387 ssh2 Oct 9 13:52:43 optimus sshd[10816]: Invalid user rpm from 203.130.242.68 |
2020-10-10 02:02:42 |
| 13.94.245.44 | attackbotsspam | xmlrpc attack |
2020-10-10 02:41:26 |
| 112.48.22.52 | attackbots | Port probing on unauthorized port 23 |
2020-10-10 02:19:00 |
| 223.247.130.4 | attack | (sshd) Failed SSH login from 223.247.130.4 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 9 19:49:33 server sshd[15824]: Invalid user testing from 223.247.130.4 Oct 9 19:49:33 server sshd[15824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.130.4 Oct 9 19:49:35 server sshd[15824]: Failed password for invalid user testing from 223.247.130.4 port 56896 ssh2 Oct 9 20:13:41 server sshd[19503]: Invalid user a from 223.247.130.4 Oct 9 20:13:41 server sshd[19503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.130.4 |
2020-10-10 02:22:27 |
| 79.155.93.160 | attackspambots | Automatic report - Port Scan Attack |
2020-10-10 02:09:15 |
| 162.158.91.183 | attackbotsspam | srv02 DDoS Malware Target(80:http) .. |
2020-10-10 02:27:44 |
| 49.88.112.74 | attackspambots | Oct 9 19:05:10 ift sshd\[57063\]: Failed password for root from 49.88.112.74 port 44808 ssh2Oct 9 19:09:24 ift sshd\[57463\]: Failed password for root from 49.88.112.74 port 21867 ssh2Oct 9 19:10:55 ift sshd\[57729\]: Failed password for root from 49.88.112.74 port 56412 ssh2Oct 9 19:12:40 ift sshd\[57824\]: Failed password for root from 49.88.112.74 port 63394 ssh2Oct 9 19:14:23 ift sshd\[58021\]: Failed password for root from 49.88.112.74 port 15991 ssh2 ... |
2020-10-10 02:16:55 |
| 116.85.64.100 | attackspam | 116.85.64.100 (CN/China/-), 7 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 9 06:23:47 jbs1 sshd[23194]: Failed password for root from 58.185.183.60 port 59898 ssh2 Oct 9 06:26:45 jbs1 sshd[24140]: Failed password for root from 58.185.183.60 port 46414 ssh2 Oct 9 06:30:11 jbs1 sshd[25196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.85.64.100 user=root Oct 9 06:29:34 jbs1 sshd[24965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.152.124.24 user=root Oct 9 06:24:46 jbs1 sshd[23347]: Failed password for root from 3.22.223.189 port 34346 ssh2 Oct 9 06:29:35 jbs1 sshd[24965]: Failed password for root from 177.152.124.24 port 39668 ssh2 Oct 9 06:29:40 jbs1 sshd[25024]: Failed password for root from 58.185.183.60 port 32926 ssh2 IP Addresses Blocked: 58.185.183.60 (SG/Singapore/-) |
2020-10-10 02:39:03 |
| 203.195.164.81 | attack | Failed password for invalid user git from 203.195.164.81 port 42210 ssh2 |
2020-10-10 02:14:49 |
| 45.143.221.96 | attackspambots | [2020-10-09 14:37:40] NOTICE[1182][C-00002386] chan_sip.c: Call from '' (45.143.221.96:5074) to extension '972595778361' rejected because extension not found in context 'public'. [2020-10-09 14:37:40] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-09T14:37:40.093-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="972595778361",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.96/5074",ACLName="no_extension_match" [2020-10-09 14:39:25] NOTICE[1182][C-00002388] chan_sip.c: Call from '' (45.143.221.96:5074) to extension '011972595778361' rejected because extension not found in context 'public'. [2020-10-09 14:39:25] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-09T14:39:25.058-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595778361",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.22 ... |
2020-10-10 02:41:57 |