City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 55.252.21.175
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12290
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;55.252.21.175. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021300 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 23:15:30 CST 2025
;; MSG SIZE rcvd: 106Host 175.21.252.55.in-addr.arpa not found: 2(SERVFAIL)
server can't find 55.252.21.175.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.190.2 | attack | Time: Mon Sep 28 00:08:08 2020 +0000 IP: 222.186.190.2 (-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 28 00:07:56 18-1 sshd[58906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.2 user=root Sep 28 00:07:58 18-1 sshd[58906]: Failed password for root from 222.186.190.2 port 26896 ssh2 Sep 28 00:08:01 18-1 sshd[58906]: Failed password for root from 222.186.190.2 port 26896 ssh2 Sep 28 00:08:05 18-1 sshd[58906]: Failed password for root from 222.186.190.2 port 26896 ssh2 Sep 28 00:08:08 18-1 sshd[58906]: Failed password for root from 222.186.190.2 port 26896 ssh2 |
2020-09-29 03:39:16 |
| 112.85.42.69 | attackbotsspam | Sep 28 08:25:37 serwer sshd\[32583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.69 user=root Sep 28 08:25:39 serwer sshd\[32583\]: Failed password for root from 112.85.42.69 port 56322 ssh2 Sep 28 08:25:42 serwer sshd\[32583\]: Failed password for root from 112.85.42.69 port 56322 ssh2 Sep 28 08:25:45 serwer sshd\[32583\]: Failed password for root from 112.85.42.69 port 56322 ssh2 Sep 28 08:25:48 serwer sshd\[32583\]: Failed password for root from 112.85.42.69 port 56322 ssh2 Sep 28 08:25:51 serwer sshd\[32583\]: Failed password for root from 112.85.42.69 port 56322 ssh2 Sep 28 08:25:51 serwer sshd\[32583\]: error: maximum authentication attempts exceeded for root from 112.85.42.69 port 56322 ssh2 \[preauth\] Sep 28 08:25:54 serwer sshd\[32616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.69 user=root Sep 28 08:25:56 serwer sshd\[32616\]: Failed password for root from ... |
2020-09-29 03:52:34 |
| 91.134.242.199 | attack | Sep 28 14:37:29 sip sshd[22510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.242.199 Sep 28 14:37:31 sip sshd[22510]: Failed password for invalid user admin from 91.134.242.199 port 34100 ssh2 Sep 28 14:52:24 sip sshd[26414]: Failed password for root from 91.134.242.199 port 45444 ssh2 |
2020-09-29 04:01:44 |
| 222.186.175.215 | attack | Time: Sun Sep 27 09:42:02 2020 +0000 IP: 222.186.175.215 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 27 09:41:46 47-1 sshd[18926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215 user=root Sep 27 09:41:48 47-1 sshd[18926]: Failed password for root from 222.186.175.215 port 37168 ssh2 Sep 27 09:41:51 47-1 sshd[18926]: Failed password for root from 222.186.175.215 port 37168 ssh2 Sep 27 09:41:54 47-1 sshd[18926]: Failed password for root from 222.186.175.215 port 37168 ssh2 Sep 27 09:41:57 47-1 sshd[18926]: Failed password for root from 222.186.175.215 port 37168 ssh2 |
2020-09-29 03:45:22 |
| 190.143.137.114 | attack | Invalid user user from 190.143.137.114 port 53216 |
2020-09-29 03:29:04 |
| 183.240.132.21 | attack | Failed password for invalid user informix from 183.240.132.21 port 52742 ssh2 |
2020-09-29 03:47:56 |
| 46.164.9.143 | attack | Port Scan: TCP/443 |
2020-09-29 03:32:39 |
| 106.54.112.173 | attack | 2020-09-28T17:59:14.284681abusebot-6.cloudsearch.cf sshd[9351]: Invalid user teamspeak from 106.54.112.173 port 44482 2020-09-28T17:59:14.290120abusebot-6.cloudsearch.cf sshd[9351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.112.173 2020-09-28T17:59:14.284681abusebot-6.cloudsearch.cf sshd[9351]: Invalid user teamspeak from 106.54.112.173 port 44482 2020-09-28T17:59:16.516711abusebot-6.cloudsearch.cf sshd[9351]: Failed password for invalid user teamspeak from 106.54.112.173 port 44482 ssh2 2020-09-28T18:02:15.487597abusebot-6.cloudsearch.cf sshd[9413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.112.173 user=root 2020-09-28T18:02:17.895106abusebot-6.cloudsearch.cf sshd[9413]: Failed password for root from 106.54.112.173 port 55242 ssh2 2020-09-28T18:05:07.097950abusebot-6.cloudsearch.cf sshd[9425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost ... |
2020-09-29 03:57:48 |
| 85.209.0.251 | attack | Sep 28 22:30:56 server2 sshd\[17232\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers Sep 28 22:30:57 server2 sshd\[17237\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers Sep 28 22:30:57 server2 sshd\[17231\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers Sep 28 22:30:57 server2 sshd\[17235\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers Sep 28 22:30:58 server2 sshd\[17242\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers Sep 28 22:30:58 server2 sshd\[17244\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers |
2020-09-29 03:38:53 |
| 192.232.208.130 | attackbots | 192.232.208.130 - - [28/Sep/2020:15:32:52 +0100] "POST /wp-login.php HTTP/1.1" 200 2463 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 192.232.208.130 - - [28/Sep/2020:15:32:54 +0100] "POST /wp-login.php HTTP/1.1" 200 2407 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 192.232.208.130 - - [28/Sep/2020:15:32:56 +0100] "POST /wp-login.php HTTP/1.1" 200 2441 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-29 03:28:33 |
| 93.174.93.195 | attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 82 - port: 7681 proto: udp cat: Misc Attackbytes: 71 |
2020-09-29 03:27:04 |
| 115.146.121.79 | attackbotsspam | 2 SSH login attempts. |
2020-09-29 03:48:53 |
| 112.85.42.173 | attack | [MK-VM4] SSH login failed |
2020-09-29 03:49:45 |
| 117.211.192.70 | attackspam | SSH login attempts. |
2020-09-29 03:41:58 |
| 80.252.22.111 | attackspam | (sshd) Failed SSH login from 80.252.22.111 (RU/Russia/Samara Oblast/Samara/-/[AS39042 LLC Global Telecom Co]): 10 in the last 3600 secs |
2020-09-29 03:35:03 |