City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.149.211.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61250
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;80.149.211.143. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024121000 1800 900 604800 86400
;; Query time: 223 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 10 14:12:50 CST 2024
;; MSG SIZE rcvd: 107Host 143.211.149.80.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 143.211.149.80.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.241.82.62 | attackspam | 1591272136 - 06/04/2020 14:02:16 Host: 14.241.82.62/14.241.82.62 Port: 445 TCP Blocked |
2020-06-05 02:41:39 |
| 111.229.142.17 | attackbotsspam | Jun 4 13:53:12 serwer sshd\[23249\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.142.17 user=root Jun 4 13:53:14 serwer sshd\[23249\]: Failed password for root from 111.229.142.17 port 59348 ssh2 Jun 4 14:02:34 serwer sshd\[24788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.142.17 user=root ... |
2020-06-05 02:24:16 |
| 106.12.95.45 | attackbots | prod11 ... |
2020-06-05 02:24:45 |
| 178.239.147.197 | attack | Jun 4 13:57:39 mail.srvfarm.net postfix/smtps/smtpd[2499183]: warning: unknown[178.239.147.197]: SASL PLAIN authentication failed: Jun 4 13:57:40 mail.srvfarm.net postfix/smtps/smtpd[2499183]: lost connection after AUTH from unknown[178.239.147.197] Jun 4 13:58:36 mail.srvfarm.net postfix/smtps/smtpd[2499186]: warning: unknown[178.239.147.197]: SASL PLAIN authentication failed: Jun 4 13:58:39 mail.srvfarm.net postfix/smtps/smtpd[2499186]: lost connection after AUTH from unknown[178.239.147.197] Jun 4 14:01:35 mail.srvfarm.net postfix/smtpd[2504252]: warning: unknown[178.239.147.197]: SASL PLAIN authentication failed: |
2020-06-05 02:47:08 |
| 51.68.94.177 | attackspambots | Jun 4 17:57:32 ns382633 sshd\[3670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.94.177 user=root Jun 4 17:57:34 ns382633 sshd\[3670\]: Failed password for root from 51.68.94.177 port 44866 ssh2 Jun 4 18:03:55 ns382633 sshd\[4773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.94.177 user=root Jun 4 18:03:57 ns382633 sshd\[4773\]: Failed password for root from 51.68.94.177 port 56832 ssh2 Jun 4 18:07:56 ns382633 sshd\[5645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.94.177 user=root |
2020-06-05 02:26:18 |
| 101.51.30.89 | attack | Jun 4 08:02:04 Tower sshd[31640]: Connection from 101.51.30.89 port 61983 on 192.168.10.220 port 22 rdomain "" Jun 4 08:02:05 Tower sshd[31640]: Invalid user service from 101.51.30.89 port 61983 Jun 4 08:02:05 Tower sshd[31640]: error: Could not get shadow information for NOUSER Jun 4 08:02:05 Tower sshd[31640]: Failed password for invalid user service from 101.51.30.89 port 61983 ssh2 Jun 4 08:02:05 Tower sshd[31640]: Connection closed by invalid user service 101.51.30.89 port 61983 [preauth] |
2020-06-05 02:43:33 |
| 185.220.101.201 | attackbotsspam | prod6 ... |
2020-06-05 02:37:54 |
| 182.61.105.104 | attack | Jun 4 18:50:18 cloud sshd[31888]: Failed password for root from 182.61.105.104 port 52776 ssh2 |
2020-06-05 02:31:38 |
| 41.234.167.248 | attackspambots | Unauthorized connection attempt from IP address 41.234.167.248 on Port 445(SMB) |
2020-06-05 02:52:39 |
| 109.111.250.70 | attackspam | Unauthorized connection attempt from IP address 109.111.250.70 on Port 445(SMB) |
2020-06-05 02:50:03 |
| 139.186.69.92 | attackbotsspam | SSH bruteforce |
2020-06-05 02:19:54 |
| 188.2.101.136 | attack | Automatic report - XMLRPC Attack |
2020-06-05 02:30:01 |
| 211.218.123.222 | attackspambots | Jun 4 15:02:15 debian kernel: [174698.494878] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=211.218.123.222 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=42 ID=62223 PROTO=TCP SPT=51054 DPT=2323 WINDOW=61790 RES=0x00 SYN URGP=0 |
2020-06-05 02:42:09 |
| 193.169.212.203 | attackbots | SpamScore above: 10.0 |
2020-06-05 02:56:22 |
| 106.12.77.183 | attackspam | Lines containing failures of 106.12.77.183 Jun 4 05:09:19 shared11 sshd[23482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.77.183 user=r.r Jun 4 05:09:21 shared11 sshd[23482]: Failed password for r.r from 106.12.77.183 port 43140 ssh2 Jun 4 05:09:21 shared11 sshd[23482]: Received disconnect from 106.12.77.183 port 43140:11: Bye Bye [preauth] Jun 4 05:09:21 shared11 sshd[23482]: Disconnected from authenticating user r.r 106.12.77.183 port 43140 [preauth] Jun 4 05:32:47 shared11 sshd[840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.77.183 user=r.r Jun 4 05:32:49 shared11 sshd[840]: Failed password for r.r from 106.12.77.183 port 47100 ssh2 Jun 4 05:32:51 shared11 sshd[840]: Received disconnect from 106.12.77.183 port 47100:11: Bye Bye [preauth] Jun 4 05:32:51 shared11 sshd[840]: Disconnected from authenticating user r.r 106.12.77.183 port 47100 [preauth] Jun 4........ ------------------------------ |
2020-06-05 02:32:55 |