City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.248.145.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42727
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;66.248.145.195. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020400 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 15:12:24 CST 2025
;; MSG SIZE rcvd: 107Host 195.145.248.66.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 195.145.248.66.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 119.40.84.138 | attack | Jul 17 14:38:05 mxgate1 postfix/postscreen[27932]: CONNECT from [119.40.84.138]:51144 to [176.31.12.44]:25 Jul 17 14:38:05 mxgate1 postfix/dnsblog[27933]: addr 119.40.84.138 listed by domain zen.spamhaus.org as 127.0.0.4 Jul 17 14:38:05 mxgate1 postfix/dnsblog[27933]: addr 119.40.84.138 listed by domain zen.spamhaus.org as 127.0.0.3 Jul 17 14:38:05 mxgate1 postfix/dnsblog[27936]: addr 119.40.84.138 listed by domain cbl.abuseat.org as 127.0.0.2 Jul 17 14:38:05 mxgate1 postfix/dnsblog[27934]: addr 119.40.84.138 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jul 17 14:38:05 mxgate1 postfix/dnsblog[28253]: addr 119.40.84.138 listed by domain b.barracudacentral.org as 127.0.0.2 Jul 17 14:38:05 mxgate1 postfix/postscreen[27932]: PREGREET 18 after 0.57 from [119.40.84.138]:51144: EHLO 1supply.com Jul 17 14:38:05 mxgate1 postfix/postscreen[27932]: DNSBL rank 5 for [119.40.84.138]:51144 Jul x@x Jul 17 14:38:07 mxgate1 postfix/postscreen[27932]: HANGUP after 1.5 from [119.40......... ------------------------------- |
2019-07-18 02:03:50 |
| 51.75.204.92 | attack | Jul 17 13:10:30 vps200512 sshd\[6460\]: Invalid user prashant from 51.75.204.92 Jul 17 13:10:30 vps200512 sshd\[6460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.204.92 Jul 17 13:10:32 vps200512 sshd\[6460\]: Failed password for invalid user prashant from 51.75.204.92 port 40906 ssh2 Jul 17 13:15:09 vps200512 sshd\[6599\]: Invalid user zorin from 51.75.204.92 Jul 17 13:15:09 vps200512 sshd\[6599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.204.92 |
2019-07-18 01:21:44 |
| 165.22.248.215 | attack | Jul 17 19:40:53 ubuntu-2gb-nbg1-dc3-1 sshd[27664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.248.215 Jul 17 19:40:55 ubuntu-2gb-nbg1-dc3-1 sshd[27664]: Failed password for invalid user teamspeak from 165.22.248.215 port 46582 ssh2 ... |
2019-07-18 02:11:58 |
| 92.82.236.100 | attackspambots | Honeypot attack, port: 23, PTR: adsl92-82-236-100.romtelecom.net. |
2019-07-18 01:56:06 |
| 41.37.39.161 | attack | 019-07-17 19:29:16 syn flood TCP (W to L) (Repeated: 4) 41.37.39.161:54242 10.0.0.25:445 ATTACK |
2019-07-18 01:33:14 |
| 46.101.242.117 | attack | Jul 17 19:11:17 eventyay sshd[22092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.242.117 Jul 17 19:11:20 eventyay sshd[22092]: Failed password for invalid user chris from 46.101.242.117 port 40288 ssh2 Jul 17 19:15:55 eventyay sshd[23376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.242.117 ... |
2019-07-18 01:20:35 |
| 180.124.4.4 | attackbots | Brute force SMTP login attempts. |
2019-07-18 02:06:29 |
| 94.29.73.233 | attackbotsspam | 1,24-06/31 concatform PostRequest-Spammer scoring: Durban01 |
2019-07-18 01:31:47 |
| 203.15.33.116 | attackspam | Jul 17 18:37:44 ArkNodeAT sshd\[29192\]: Invalid user steam from 203.15.33.116 Jul 17 18:37:44 ArkNodeAT sshd\[29192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.15.33.116 Jul 17 18:37:45 ArkNodeAT sshd\[29192\]: Failed password for invalid user steam from 203.15.33.116 port 34014 ssh2 |
2019-07-18 02:07:18 |
| 217.219.132.254 | attackspambots | Jul 17 17:47:22 mail sshd\[19583\]: Invalid user quange from 217.219.132.254 port 43514 Jul 17 17:47:22 mail sshd\[19583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.219.132.254 Jul 17 17:47:24 mail sshd\[19583\]: Failed password for invalid user quange from 217.219.132.254 port 43514 ssh2 Jul 17 17:52:05 mail sshd\[19638\]: Invalid user nextcloud from 217.219.132.254 port 33768 Jul 17 17:52:05 mail sshd\[19638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.219.132.254 ... |
2019-07-18 01:57:58 |
| 178.128.150.158 | attackspambots | Jan 24 01:25:15 vtv3 sshd\[25676\]: Invalid user hadoop from 178.128.150.158 port 57602 Jan 24 01:25:15 vtv3 sshd\[25676\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.150.158 Jan 24 01:25:17 vtv3 sshd\[25676\]: Failed password for invalid user hadoop from 178.128.150.158 port 57602 ssh2 Jan 24 01:28:54 vtv3 sshd\[26183\]: Invalid user imaculada from 178.128.150.158 port 59674 Jan 24 01:28:54 vtv3 sshd\[26183\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.150.158 Jan 26 00:49:29 vtv3 sshd\[20375\]: Invalid user workshop from 178.128.150.158 port 47904 Jan 26 00:49:29 vtv3 sshd\[20375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.150.158 Jan 26 00:49:32 vtv3 sshd\[20375\]: Failed password for invalid user workshop from 178.128.150.158 port 47904 ssh2 Jan 26 00:53:10 vtv3 sshd\[21523\]: Invalid user cloud-user from 178.128.150.158 port 49952 Jan 26 |
2019-07-18 01:34:53 |
| 203.75.29.68 | attack | Honeypot attack, port: 23, PTR: 203-75-29-68.HINET-IP.hinet.net. |
2019-07-18 01:45:34 |
| 51.223.94.191 | attack | port scan and connect, tcp 23 (telnet) |
2019-07-18 01:39:16 |
| 162.238.213.216 | attackspam | Jul 17 19:15:19 lnxweb62 sshd[23115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.238.213.216 Jul 17 19:15:19 lnxweb62 sshd[23115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.238.213.216 |
2019-07-18 01:55:21 |
| 164.132.209.242 | attack | Jul 17 19:05:04 vps647732 sshd[7436]: Failed password for root from 164.132.209.242 port 45286 ssh2 Jul 17 19:09:34 vps647732 sshd[7701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.209.242 ... |
2019-07-18 01:32:53 |