City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 56.14.152.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29396
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;56.14.152.254. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025030100 1800 900 604800 86400
;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 22:42:30 CST 2025
;; MSG SIZE rcvd: 106b'Host 254.152.14.56.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 56.14.152.254.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.115.19.34 | attackspambots | Sep 23 18:10:26 zimbra sshd[13843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.115.19.34 user=r.r Sep 23 18:10:28 zimbra sshd[13843]: Failed password for r.r from 142.115.19.34 port 39494 ssh2 Sep 23 18:10:28 zimbra sshd[13843]: Received disconnect from 142.115.19.34 port 39494:11: Bye Bye [preauth] Sep 23 18:10:28 zimbra sshd[13843]: Disconnected from 142.115.19.34 port 39494 [preauth] Sep 23 18:22:27 zimbra sshd[23306]: Invalid user jy from 142.115.19.34 Sep 23 18:22:27 zimbra sshd[23306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.115.19.34 Sep 23 18:22:28 zimbra sshd[23306]: Failed password for invalid user jy from 142.115.19.34 port 46698 ssh2 Sep 23 18:22:29 zimbra sshd[23306]: Received disconnect from 142.115.19.34 port 46698:11: Bye Bye [preauth] Sep 23 18:22:29 zimbra sshd[23306]: Disconnected from 142.115.19.34 port 46698 [preauth] Sep 23 18:26:00 zimbra sshd[257........ ------------------------------- |
2020-09-24 20:39:00 |
| 58.153.153.63 | attackspam | Sep 23 20:05:42 root sshd[25181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=n058153153063.netvigator.com user=root Sep 23 20:05:45 root sshd[25181]: Failed password for root from 58.153.153.63 port 40169 ssh2 ... |
2020-09-24 20:25:29 |
| 201.234.238.10 | attack | Sep 24 14:12:08 inter-technics sshd[340]: Invalid user root1 from 201.234.238.10 port 46832 Sep 24 14:12:08 inter-technics sshd[340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.234.238.10 Sep 24 14:12:08 inter-technics sshd[340]: Invalid user root1 from 201.234.238.10 port 46832 Sep 24 14:12:11 inter-technics sshd[340]: Failed password for invalid user root1 from 201.234.238.10 port 46832 ssh2 Sep 24 14:16:37 inter-technics sshd[646]: Invalid user vmuser from 201.234.238.10 port 56114 ... |
2020-09-24 20:30:28 |
| 218.92.0.185 | attackspam | 2020-09-24T12:22:58.209185shield sshd\[3161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.185 user=root 2020-09-24T12:23:00.094476shield sshd\[3161\]: Failed password for root from 218.92.0.185 port 28145 ssh2 2020-09-24T12:23:02.959774shield sshd\[3161\]: Failed password for root from 218.92.0.185 port 28145 ssh2 2020-09-24T12:23:08.048767shield sshd\[3161\]: Failed password for root from 218.92.0.185 port 28145 ssh2 2020-09-24T12:23:11.350808shield sshd\[3161\]: Failed password for root from 218.92.0.185 port 28145 ssh2 |
2020-09-24 20:32:38 |
| 115.160.242.110 | attackspam | 20/9/23@17:39:22: FAIL: Alarm-Network address from=115.160.242.110 ... |
2020-09-24 21:01:49 |
| 49.88.112.115 | attackbotsspam | Sep 24 14:04:38 mail sshd[27865]: refused connect from 49.88.112.115 (49.88.112.115) Sep 24 14:05:51 mail sshd[27990]: refused connect from 49.88.112.115 (49.88.112.115) Sep 24 14:07:01 mail sshd[28045]: refused connect from 49.88.112.115 (49.88.112.115) Sep 24 14:08:10 mail sshd[28114]: refused connect from 49.88.112.115 (49.88.112.115) Sep 24 14:09:21 mail sshd[28184]: refused connect from 49.88.112.115 (49.88.112.115) ... |
2020-09-24 20:23:28 |
| 49.88.112.68 | attack | Sep 24 14:40:43 v22018053744266470 sshd[26473]: Failed password for root from 49.88.112.68 port 48472 ssh2 Sep 24 14:41:54 v22018053744266470 sshd[26552]: Failed password for root from 49.88.112.68 port 39428 ssh2 ... |
2020-09-24 20:52:59 |
| 111.229.34.121 | attackbots | Brute%20Force%20SSH |
2020-09-24 20:52:32 |
| 138.36.193.21 | attackspam | Sep 23 18:48:27 mail.srvfarm.net postfix/smtps/smtpd[196163]: warning: unknown[138.36.193.21]: SASL PLAIN authentication failed: Sep 23 18:48:28 mail.srvfarm.net postfix/smtps/smtpd[196163]: lost connection after AUTH from unknown[138.36.193.21] Sep 23 18:49:34 mail.srvfarm.net postfix/smtps/smtpd[191709]: warning: unknown[138.36.193.21]: SASL PLAIN authentication failed: Sep 23 18:49:34 mail.srvfarm.net postfix/smtps/smtpd[191709]: lost connection after AUTH from unknown[138.36.193.21] Sep 23 18:56:50 mail.srvfarm.net postfix/smtps/smtpd[197152]: warning: unknown[138.36.193.21]: SASL PLAIN authentication failed: |
2020-09-24 20:41:35 |
| 189.251.73.140 | attack | 1600880744 - 09/23/2020 19:05:44 Host: 189.251.73.140/189.251.73.140 Port: 445 TCP Blocked |
2020-09-24 20:28:23 |
| 81.163.15.138 | attackspambots | Sep 23 18:50:10 mail.srvfarm.net postfix/smtpd[194163]: warning: 81-163-15-138.net.lasnet.pl[81.163.15.138]: SASL PLAIN authentication failed: Sep 23 18:50:10 mail.srvfarm.net postfix/smtpd[194163]: lost connection after AUTH from 81-163-15-138.net.lasnet.pl[81.163.15.138] Sep 23 18:55:39 mail.srvfarm.net postfix/smtpd[198463]: warning: 81-163-15-138.net.lasnet.pl[81.163.15.138]: SASL PLAIN authentication failed: Sep 23 18:55:39 mail.srvfarm.net postfix/smtpd[198463]: lost connection after AUTH from 81-163-15-138.net.lasnet.pl[81.163.15.138] Sep 23 18:59:08 mail.srvfarm.net postfix/smtps/smtpd[199015]: warning: 81-163-15-138.net.lasnet.pl[81.163.15.138]: SASL PLAIN authentication failed: |
2020-09-24 20:43:39 |
| 5.202.146.233 | attackspambots | Automatic report - Port Scan Attack |
2020-09-24 20:55:40 |
| 193.187.101.126 | attack | Automatic report - Banned IP Access |
2020-09-24 20:51:53 |
| 128.14.236.157 | attack | Sep 24 09:06:59 rocket sshd[7756]: Failed password for admin from 128.14.236.157 port 57582 ssh2 Sep 24 09:11:21 rocket sshd[8409]: Failed password for root from 128.14.236.157 port 38052 ssh2 ... |
2020-09-24 20:37:33 |
| 172.105.89.161 | attackbots | Found on Binary Defense / proto=6 . srcport=46894 . dstport=443 . (1406) |
2020-09-24 20:28:49 |