City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 55.20.114.46
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27872
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;55.20.114.46. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025010600 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 06 21:09:16 CST 2025
;; MSG SIZE rcvd: 105b'Host 46.114.20.55.in-addr.arpa not found: 2(SERVFAIL)
'Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 46.114.20.55.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.248.25.171 | attackspam | $f2bV_matches |
2019-11-14 06:53:19 |
| 103.237.144.136 | attackspambots | fail2ban honeypot |
2019-11-14 06:39:54 |
| 124.160.83.138 | attackspam | Nov 13 22:58:02 lnxmail61 sshd[16094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.160.83.138 |
2019-11-14 06:59:12 |
| 112.197.192.244 | attackspambots | Honeypot attack, port: 5555, PTR: PTR record not found |
2019-11-14 07:00:13 |
| 159.89.115.126 | attackspambots | $f2bV_matches |
2019-11-14 07:01:08 |
| 159.89.165.127 | attack | Nov 13 20:43:20 xeon sshd[53043]: Failed password for invalid user oracle from 159.89.165.127 port 48634 ssh2 |
2019-11-14 06:35:13 |
| 63.88.23.173 | attackspambots | 63.88.23.173 was recorded 8 times by 3 hosts attempting to connect to the following ports: 80. Incident counter (4h, 24h, all-time): 8, 29, 59 |
2019-11-14 07:10:02 |
| 180.76.56.69 | attackspam | Lines containing failures of 180.76.56.69 Nov 13 18:51:12 majoron sshd[22218]: User backup from 180.76.56.69 not allowed because none of user's groups are listed in AllowGroups Nov 13 18:51:12 majoron sshd[22218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.56.69 user=backup Nov 13 18:51:15 majoron sshd[22218]: Failed password for invalid user backup from 180.76.56.69 port 38628 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=180.76.56.69 |
2019-11-14 06:44:27 |
| 92.119.160.106 | attackbots | Nov 13 23:52:04 h2177944 kernel: \[6561043.222228\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.106 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=46710 PROTO=TCP SPT=51182 DPT=63664 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 13 23:55:16 h2177944 kernel: \[6561235.337198\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.106 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=3184 PROTO=TCP SPT=51182 DPT=63586 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 13 23:56:51 h2177944 kernel: \[6561329.988943\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.106 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=13632 PROTO=TCP SPT=51182 DPT=63571 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 14 00:01:31 h2177944 kernel: \[6561609.984818\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.106 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=14263 PROTO=TCP SPT=51182 DPT=63649 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 14 00:01:46 h2177944 kernel: \[6561625.320985\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.106 DST=85.2 |
2019-11-14 07:07:43 |
| 212.237.4.214 | attack | 2019-11-13T22:49:53.312696shield sshd\[12428\]: Invalid user manol from 212.237.4.214 port 41404 2019-11-13T22:49:53.318573shield sshd\[12428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.4.214 2019-11-13T22:49:55.082919shield sshd\[12428\]: Failed password for invalid user manol from 212.237.4.214 port 41404 ssh2 2019-11-13T22:53:35.723321shield sshd\[12788\]: Invalid user farrelly from 212.237.4.214 port 50024 2019-11-13T22:53:35.729218shield sshd\[12788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.4.214 |
2019-11-14 06:58:56 |
| 114.40.147.227 | attackspam | Honeypot attack, port: 23, PTR: 114-40-147-227.dynamic-ip.hinet.net. |
2019-11-14 06:34:49 |
| 5.181.108.239 | attack | Nov 13 18:38:27 server sshd\[6951\]: Failed password for root from 5.181.108.239 port 46930 ssh2 Nov 14 01:30:45 server sshd\[17530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.181.108.239 user=root Nov 14 01:30:46 server sshd\[17530\]: Failed password for root from 5.181.108.239 port 53378 ssh2 Nov 14 01:44:33 server sshd\[20615\]: Invalid user benyamin from 5.181.108.239 Nov 14 01:44:33 server sshd\[20615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.181.108.239 ... |
2019-11-14 06:47:50 |
| 192.144.184.199 | attackspam | Nov 14 00:01:38 MK-Soft-VM4 sshd[9719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.184.199 Nov 14 00:01:40 MK-Soft-VM4 sshd[9719]: Failed password for invalid user vempati from 192.144.184.199 port 58847 ssh2 ... |
2019-11-14 07:04:46 |
| 193.194.91.198 | attack | Invalid user no from 193.194.91.198 port 45064 |
2019-11-14 06:46:22 |
| 200.89.174.176 | attackbotsspam | 2019-11-13T16:33:19.923144shield sshd\[11432\]: Invalid user pcap from 200.89.174.176 port 57100 2019-11-13T16:33:19.927679shield sshd\[11432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176-174-89-200.fibertel.com.ar 2019-11-13T16:33:21.602856shield sshd\[11432\]: Failed password for invalid user pcap from 200.89.174.176 port 57100 ssh2 2019-11-13T16:38:50.271996shield sshd\[11779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176-174-89-200.fibertel.com.ar user=root 2019-11-13T16:38:52.051256shield sshd\[11779\]: Failed password for root from 200.89.174.176 port 37018 ssh2 |
2019-11-14 06:40:24 |