City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 56.117.139.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49331
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;56.117.139.252. IN A
;; AUTHORITY SECTION:
. 157 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011101 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 12 06:07:24 CST 2022
;; MSG SIZE rcvd: 107Host 252.139.117.56.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 252.139.117.56.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 128.199.220.207 | attackbots | Jun 2 14:04:33 melroy-server sshd[4407]: Failed password for root from 128.199.220.207 port 38776 ssh2 ... |
2020-06-02 21:06:00 |
| 45.138.102.25 | attack | This address is a hacker - they attempted to access my account |
2020-06-02 21:11:23 |
| 221.148.45.168 | attackspambots | 2020-06-02T13:00:53.134404shield sshd\[30049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.148.45.168 user=root 2020-06-02T13:00:55.804814shield sshd\[30049\]: Failed password for root from 221.148.45.168 port 47283 ssh2 2020-06-02T13:05:10.130470shield sshd\[30781\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.148.45.168 user=root 2020-06-02T13:05:12.083108shield sshd\[30781\]: Failed password for root from 221.148.45.168 port 49513 ssh2 2020-06-02T13:09:42.171176shield sshd\[31452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.148.45.168 user=root |
2020-06-02 21:14:52 |
| 149.34.4.123 | attackbotsspam | Jun 2 08:07:45 www sshd\[875\]: Invalid user admin from 149.34.4.123 Jun 2 08:08:15 www sshd\[955\]: Invalid user ubnt from 149.34.4.123 ... |
2020-06-02 21:12:53 |
| 211.224.148.159 | attackbotsspam | Jun 2 14:08:35 fhem-rasp sshd[7963]: Failed password for root from 211.224.148.159 port 59126 ssh2 Jun 2 14:08:37 fhem-rasp sshd[7963]: Connection closed by authenticating user root 211.224.148.159 port 59126 [preauth] ... |
2020-06-02 20:47:00 |
| 104.236.137.194 | attack | 2020-06-02T13:54:15.221144v22018076590370373 sshd[5699]: Failed password for root from 104.236.137.194 port 53818 ssh2 2020-06-02T14:01:34.432638v22018076590370373 sshd[24246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.137.194 user=root 2020-06-02T14:01:36.512005v22018076590370373 sshd[24246]: Failed password for root from 104.236.137.194 port 56482 ssh2 2020-06-02T14:08:40.158959v22018076590370373 sshd[7729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.137.194 user=root 2020-06-02T14:08:42.388628v22018076590370373 sshd[7729]: Failed password for root from 104.236.137.194 port 59142 ssh2 ... |
2020-06-02 20:41:06 |
| 45.143.220.127 | attackspambots | Jun 2 14:18:46 debian-2gb-nbg1-2 kernel: \[13359093.131802\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.143.220.127 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=24981 PROTO=TCP SPT=59026 DPT=5060 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-02 20:52:31 |
| 122.160.45.4 | attackspambots | Jun 2 12:35:28 db01 sshd[10243]: reveeclipse mapping checking getaddrinfo for abts-north-static-004.45.160.122.airtelbroadband.in [122.160.45.4] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 2 12:35:28 db01 sshd[10243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.160.45.4 user=r.r Jun 2 12:35:30 db01 sshd[10243]: Failed password for r.r from 122.160.45.4 port 46198 ssh2 Jun 2 12:35:30 db01 sshd[10243]: Received disconnect from 122.160.45.4: 11: Bye Bye [preauth] Jun 2 12:37:30 db01 sshd[10352]: reveeclipse mapping checking getaddrinfo for abts-north-static-004.45.160.122.airtelbroadband.in [122.160.45.4] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 2 12:37:30 db01 sshd[10352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.160.45.4 user=r.r Jun 2 12:37:32 db01 sshd[10352]: Failed password for r.r from 122.160.45.4 port 39878 ssh2 Jun 2 12:37:32 db01 sshd[10352]: Received disconne........ ------------------------------- |
2020-06-02 20:40:01 |
| 223.18.227.3 | attackspambots | Jun 2 14:08:34 fhem-rasp sshd[7981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.18.227.3 user=root Jun 2 14:08:36 fhem-rasp sshd[7981]: Failed password for root from 223.18.227.3 port 57591 ssh2 ... |
2020-06-02 20:47:49 |
| 182.155.155.72 | attackspam | Jun 2 14:08:28 fhem-rasp sshd[7893]: Failed password for root from 182.155.155.72 port 48938 ssh2 Jun 2 14:08:30 fhem-rasp sshd[7893]: Connection closed by authenticating user root 182.155.155.72 port 48938 [preauth] ... |
2020-06-02 20:57:52 |
| 106.13.31.93 | attack | Jun 2 14:40:03 vps639187 sshd\[5024\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.31.93 user=root Jun 2 14:40:05 vps639187 sshd\[5024\]: Failed password for root from 106.13.31.93 port 43630 ssh2 Jun 2 14:43:40 vps639187 sshd\[5108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.31.93 user=root ... |
2020-06-02 21:18:02 |
| 117.199.224.120 | attackspam | 1591099706 - 06/02/2020 14:08:26 Host: 117.199.224.120/117.199.224.120 Port: 445 TCP Blocked |
2020-06-02 21:03:29 |
| 187.94.221.230 | attackspambots | Jun 2 14:08:29 fhem-rasp sshd[7895]: Failed password for root from 187.94.221.230 port 45439 ssh2 Jun 2 14:08:30 fhem-rasp sshd[7895]: Connection closed by authenticating user root 187.94.221.230 port 45439 [preauth] ... |
2020-06-02 20:57:08 |
| 183.48.35.108 | attackspam | Jun 2 12:47:55 nxxxxxxx sshd[24485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.48.35.108 user=r.r Jun 2 12:47:57 nxxxxxxx sshd[24485]: Failed password for r.r from 183.48.35.108 port 54260 ssh2 Jun 2 12:47:57 nxxxxxxx sshd[24485]: Received disconnect from 183.48.35.108: 11: Bye Bye [preauth] Jun 2 12:49:47 nxxxxxxx sshd[24669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.48.35.108 user=r.r Jun 2 12:49:49 nxxxxxxx sshd[24669]: Failed password for r.r from 183.48.35.108 port 40868 ssh2 Jun 2 12:49:49 nxxxxxxx sshd[24669]: Received disconnect from 183.48.35.108: 11: Bye Bye [preauth] Jun 2 12:50:32 nxxxxxxx sshd[24798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.48.35.108 user=r.r Jun 2 12:50:34 nxxxxxxx sshd[24798]: Failed password for r.r from 183.48.35.108 port 45596 ssh2 Jun 2 12:50:35 nxxxxxxx sshd[24798]: Recei........ ------------------------------- |
2020-06-02 21:16:43 |
| 187.138.39.45 | attackbotsspam | Lines containing failures of 187.138.39.45 Jun 2 13:53:13 kmh-wsh-001-nbg01 sshd[25919]: Invalid user pi from 187.138.39.45 port 49552 Jun 2 13:53:13 kmh-wsh-001-nbg01 sshd[25920]: Invalid user pi from 187.138.39.45 port 49550 Jun 2 13:53:13 kmh-wsh-001-nbg01 sshd[25919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.138.39.45 Jun 2 13:53:13 kmh-wsh-001-nbg01 sshd[25920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.138.39.45 Jun 2 13:53:15 kmh-wsh-001-nbg01 sshd[25919]: Failed password for invalid user pi from 187.138.39.45 port 49552 ssh2 Jun 2 13:53:15 kmh-wsh-001-nbg01 sshd[25920]: Failed password for invalid user pi from 187.138.39.45 port 49550 ssh2 Jun 2 13:53:15 kmh-wsh-001-nbg01 sshd[25919]: Connection closed by invalid user pi 187.138.39.45 port 49552 [preauth] Jun 2 13:53:15 kmh-wsh-001-nbg01 sshd[25920]: Connection closed by invalid user pi 187.138.39.45 por........ ------------------------------ |
2020-06-02 21:13:55 |