City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.243.49.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51664
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;58.243.49.48. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022800 1800 900 604800 86400
;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 13:58:34 CST 2025
;; MSG SIZE rcvd: 105Host 48.49.243.58.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 48.49.243.58.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 111.67.206.186 | attackbotsspam | Jun 13 17:08:21 *** sshd[32431]: Invalid user MGR from 111.67.206.186 |
2020-06-14 01:21:13 |
| 46.38.150.191 | attackbots | Jun 13 11:01:39 mail.srvfarm.net postfix/smtpd[1078530]: warning: unknown[46.38.150.191]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 13 11:03:13 mail.srvfarm.net postfix/smtpd[1078537]: warning: unknown[46.38.150.191]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 13 11:04:46 mail.srvfarm.net postfix/smtpd[1079326]: warning: unknown[46.38.150.191]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 13 11:06:20 mail.srvfarm.net postfix/smtpd[1078537]: warning: unknown[46.38.150.191]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 13 11:07:53 mail.srvfarm.net postfix/smtpd[1078537]: warning: unknown[46.38.150.191]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-06-14 01:15:11 |
| 138.68.226.234 | attackspambots | sshd |
2020-06-14 01:43:34 |
| 51.255.173.222 | attackbotsspam | SSH Brute-Force. Ports scanning. |
2020-06-14 01:12:00 |
| 137.74.197.94 | attackbotsspam | Automatic report - Banned IP Access |
2020-06-14 01:34:33 |
| 200.8.44.42 | attackbots | Invalid user uvc from 200.8.44.42 port 38620 |
2020-06-14 01:43:03 |
| 185.16.12.158 | attackbots | Fail2Ban - HTTP Auth Bruteforce Attempt |
2020-06-14 01:22:01 |
| 62.138.0.57 | attackbotsspam | Jun 13 08:31:53 kmh-wmh-003-nbg03 sshd[24293]: Invalid user dino from 62.138.0.57 port 49776 Jun 13 08:31:53 kmh-wmh-003-nbg03 sshd[24293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.138.0.57 Jun 13 08:31:55 kmh-wmh-003-nbg03 sshd[24293]: Failed password for invalid user dino from 62.138.0.57 port 49776 ssh2 Jun 13 08:31:55 kmh-wmh-003-nbg03 sshd[24293]: Received disconnect from 62.138.0.57 port 49776:11: Bye Bye [preauth] Jun 13 08:31:55 kmh-wmh-003-nbg03 sshd[24293]: Disconnected from 62.138.0.57 port 49776 [preauth] Jun 13 08:42:09 kmh-wmh-003-nbg03 sshd[25434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.138.0.57 user=r.r Jun 13 08:42:11 kmh-wmh-003-nbg03 sshd[25434]: Failed password for r.r from 62.138.0.57 port 42846 ssh2 Jun 13 08:42:11 kmh-wmh-003-nbg03 sshd[25434]: Received disconnect from 62.138.0.57 port 42846:11: Bye Bye [preauth] Jun 13 08:42:11 kmh-wmh-003-nbg03........ ------------------------------- |
2020-06-14 01:55:14 |
| 37.70.1.234 | attack | 2020-06-13T17:09:39.019021shield sshd\[29431\]: Invalid user mhr from 37.70.1.234 port 47084 2020-06-13T17:09:39.023133shield sshd\[29431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=234.1.70.37.rev.sfr.net 2020-06-13T17:09:40.901915shield sshd\[29431\]: Failed password for invalid user mhr from 37.70.1.234 port 47084 ssh2 2020-06-13T17:14:48.749102shield sshd\[30242\]: Invalid user test from 37.70.1.234 port 40114 2020-06-13T17:14:48.752789shield sshd\[30242\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=234.1.70.37.rev.sfr.net |
2020-06-14 01:26:21 |
| 207.154.235.23 | attackspam | serveres are UTC Lines containing failures of 207.154.235.23 Jun 13 00:57:00 tux2 sshd[23202]: Invalid user usq from 207.154.235.23 port 33630 Jun 13 00:57:00 tux2 sshd[23202]: Failed password for invalid user usq from 207.154.235.23 port 33630 ssh2 Jun 13 00:57:00 tux2 sshd[23202]: Received disconnect from 207.154.235.23 port 33630:11: Bye Bye [preauth] Jun 13 00:57:00 tux2 sshd[23202]: Disconnected from invalid user usq 207.154.235.23 port 33630 [preauth] Jun 13 01:01:10 tux2 sshd[23429]: Failed password for r.r from 207.154.235.23 port 33012 ssh2 Jun 13 01:01:10 tux2 sshd[23429]: Received disconnect from 207.154.235.23 port 33012:11: Bye Bye [preauth] Jun 13 01:01:10 tux2 sshd[23429]: Disconnected from authenticating user r.r 207.154.235.23 port 33012 [preauth] Jun 13 01:04:30 tux2 sshd[23613]: Invalid user hema from 207.154.235.23 port 52706 Jun 13 01:04:30 tux2 sshd[23613]: Failed password for invalid user hema from 207.154.235.23 port 52706 ssh2 Jun 13 01:04:30 tu........ ------------------------------ |
2020-06-14 01:44:00 |
| 218.92.0.208 | attack | Jun 13 19:28:25 server sshd[12557]: Failed password for root from 218.92.0.208 port 55796 ssh2 Jun 13 19:29:51 server sshd[13984]: Failed password for root from 218.92.0.208 port 14431 ssh2 Jun 13 19:29:53 server sshd[13984]: Failed password for root from 218.92.0.208 port 14431 ssh2 |
2020-06-14 01:46:15 |
| 37.252.188.130 | attackbots | Bruteforce detected by fail2ban |
2020-06-14 01:27:40 |
| 218.4.240.163 | attackspam | Probing for vulnerable services |
2020-06-14 01:56:10 |
| 203.6.149.195 | attackspambots | Jun 13 13:04:42 marvibiene sshd[39761]: Invalid user student07 from 203.6.149.195 port 37766 Jun 13 13:04:42 marvibiene sshd[39761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.6.149.195 Jun 13 13:04:42 marvibiene sshd[39761]: Invalid user student07 from 203.6.149.195 port 37766 Jun 13 13:04:44 marvibiene sshd[39761]: Failed password for invalid user student07 from 203.6.149.195 port 37766 ssh2 ... |
2020-06-14 01:35:26 |
| 144.91.94.185 | attackbotsspam | Invalid user vago from 144.91.94.185 port 35930 |
2020-06-14 01:25:27 |