City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 71.116.85.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47255
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;71.116.85.104. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 23:43:15 CST 2025
;; MSG SIZE rcvd: 106Host 104.85.116.71.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 104.85.116.71.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 113.88.248.229 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root |
2020-09-09 15:27:52 |
| 138.68.52.53 | attackspam | Automatic report - XMLRPC Attack |
2020-09-09 14:52:40 |
| 118.67.215.141 | attackspam | Sep 7 09:46:51 zimbra sshd[953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.67.215.141 user=r.r Sep 7 09:46:53 zimbra sshd[953]: Failed password for r.r from 118.67.215.141 port 51714 ssh2 Sep 7 09:46:53 zimbra sshd[953]: Received disconnect from 118.67.215.141 port 51714:11: Bye Bye [preauth] Sep 7 09:46:53 zimbra sshd[953]: Disconnected from 118.67.215.141 port 51714 [preauth] Sep 7 09:49:03 zimbra sshd[2692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.67.215.141 user=r.r Sep 7 09:49:04 zimbra sshd[2692]: Failed password for r.r from 118.67.215.141 port 47078 ssh2 Sep 7 09:49:05 zimbra sshd[2692]: Received disconnect from 118.67.215.141 port 47078:11: Bye Bye [preauth] Sep 7 09:49:05 zimbra sshd[2692]: Disconnected from 118.67.215.141 port 47078 [preauth] Sep 7 09:50:24 zimbra sshd[3929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ss........ ------------------------------- |
2020-09-09 15:04:20 |
| 59.1.28.70 | attackspambots | Sep 8 14:11:42 dns1 sshd[18296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.1.28.70 Sep 8 14:11:42 dns1 sshd[18295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.1.28.70 Sep 8 14:11:43 dns1 sshd[18296]: Failed password for invalid user pi from 59.1.28.70 port 36448 ssh2 Sep 8 14:11:44 dns1 sshd[18295]: Failed password for invalid user pi from 59.1.28.70 port 36440 ssh2 |
2020-09-09 14:52:09 |
| 106.15.250.167 | attack | Sep 9 04:38:14 gospond sshd[16117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.15.250.167 Sep 9 04:38:14 gospond sshd[16117]: Invalid user john from 106.15.250.167 port 45286 Sep 9 04:38:16 gospond sshd[16117]: Failed password for invalid user john from 106.15.250.167 port 45286 ssh2 ... |
2020-09-09 15:14:23 |
| 190.148.53.6 | attackbotsspam | 1599584021 - 09/08/2020 18:53:41 Host: 190.148.53.6/190.148.53.6 Port: 445 TCP Blocked |
2020-09-09 15:23:58 |
| 185.50.37.152 | attackbotsspam | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): |
2020-09-09 14:53:40 |
| 49.88.112.67 | attackspam | Sep 8 23:49:07 firewall sshd[23977]: Failed password for root from 49.88.112.67 port 43038 ssh2 Sep 8 23:49:09 firewall sshd[23977]: Failed password for root from 49.88.112.67 port 43038 ssh2 Sep 8 23:49:12 firewall sshd[23977]: Failed password for root from 49.88.112.67 port 43038 ssh2 ... |
2020-09-09 15:13:11 |
| 138.197.213.233 | attackspam | (sshd) Failed SSH login from 138.197.213.233 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 8 14:56:58 server sshd[11116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.213.233 user=root Sep 8 14:57:01 server sshd[11116]: Failed password for root from 138.197.213.233 port 50444 ssh2 Sep 8 15:09:39 server sshd[14891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.213.233 user=root Sep 8 15:09:41 server sshd[14891]: Failed password for root from 138.197.213.233 port 37672 ssh2 Sep 8 15:12:24 server sshd[15846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.213.233 user=root |
2020-09-09 14:47:14 |
| 80.24.149.228 | attack | (sshd) Failed SSH login from 80.24.149.228 (ES/Spain/228.red-80-24-149.staticip.rima-tde.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 9 01:12:28 server sshd[23442]: Failed password for root from 80.24.149.228 port 41264 ssh2 Sep 9 01:16:30 server sshd[24570]: Invalid user deployer from 80.24.149.228 port 47014 Sep 9 01:16:32 server sshd[24570]: Failed password for invalid user deployer from 80.24.149.228 port 47014 ssh2 Sep 9 01:19:41 server sshd[25199]: Failed password for root from 80.24.149.228 port 44268 ssh2 Sep 9 01:22:56 server sshd[26096]: Failed password for root from 80.24.149.228 port 41526 ssh2 |
2020-09-09 15:02:51 |
| 129.204.129.170 | attackspam | Sep 9 04:23:05 *** sshd[20187]: User root from 129.204.129.170 not allowed because not listed in AllowUsers |
2020-09-09 15:28:41 |
| 45.142.120.215 | attack | Sep 9 00:47:27 marvibiene postfix/smtpd[2154]: warning: unknown[45.142.120.215]: SASL LOGIN authentication failed: VXNlcm5hbWU6 Sep 9 01:43:32 marvibiene postfix/smtpd[3941]: warning: unknown[45.142.120.215]: SASL LOGIN authentication failed: VXNlcm5hbWU6 |
2020-09-09 15:06:55 |
| 122.143.116.198 | attackspambots | RDP brute force attack detected by fail2ban |
2020-09-09 14:49:41 |
| 206.189.228.120 | attack | Sep 9 07:50:31 pipo sshd[25511]: Invalid user merlin from 206.189.228.120 port 37942 Sep 9 07:50:31 pipo sshd[25511]: Disconnected from invalid user merlin 206.189.228.120 port 37942 [preauth] Sep 9 07:50:55 pipo sshd[26083]: Disconnected from authenticating user gnats 206.189.228.120 port 44946 [preauth] Sep 9 07:51:19 pipo sshd[26901]: Invalid user guest from 206.189.228.120 port 51938 ... |
2020-09-09 14:53:12 |
| 106.13.203.62 | attackspam | Sep 8 20:50:00 sso sshd[8195]: Failed password for root from 106.13.203.62 port 48382 ssh2 ... |
2020-09-09 15:11:20 |