City: unknown
Region: unknown
Country: Italy
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 91.255.164.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9055
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;91.255.164.55. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 06:02:11 CST 2025
;; MSG SIZE rcvd: 106Host 55.164.255.91.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 55.164.255.91.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.180.6 | attack | Sep 13 16:48:11 santamaria sshd\[31196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6 user=root Sep 13 16:48:13 santamaria sshd\[31196\]: Failed password for root from 222.186.180.6 port 46802 ssh2 Sep 13 16:48:23 santamaria sshd\[31196\]: Failed password for root from 222.186.180.6 port 46802 ssh2 ... |
2020-09-13 23:00:41 |
| 164.132.183.196 | attackspam | 8292/tcp 9000/tcp 9042/tcp... [2020-07-13/09-13]80pkt,47pt.(tcp) |
2020-09-13 22:40:40 |
| 117.99.165.168 | attackbots | 1599929857 - 09/12/2020 18:57:37 Host: 117.99.165.168/117.99.165.168 Port: 445 TCP Blocked |
2020-09-13 22:27:43 |
| 112.85.42.181 | attack | $f2bV_matches |
2020-09-13 23:01:59 |
| 115.99.159.33 | attack | Port probing on unauthorized port 23 |
2020-09-13 22:35:05 |
| 45.55.233.213 | attackspam | Sep 13 14:08:08 ovpn sshd\[30027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.233.213 user=root Sep 13 14:08:11 ovpn sshd\[30027\]: Failed password for root from 45.55.233.213 port 38662 ssh2 Sep 13 14:23:49 ovpn sshd\[1414\]: Invalid user music from 45.55.233.213 Sep 13 14:23:49 ovpn sshd\[1414\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.233.213 Sep 13 14:23:51 ovpn sshd\[1414\]: Failed password for invalid user music from 45.55.233.213 port 33104 ssh2 |
2020-09-13 22:43:57 |
| 45.148.10.28 | attackspambots |
|
2020-09-13 23:10:43 |
| 181.129.165.139 | attackspam | Sep 13 10:40:48 plex-server sshd[2183454]: Failed password for invalid user redmine from 181.129.165.139 port 41032 ssh2 Sep 13 10:45:13 plex-server sshd[2185454]: Invalid user ubnt from 181.129.165.139 port 53680 Sep 13 10:45:13 plex-server sshd[2185454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.129.165.139 Sep 13 10:45:13 plex-server sshd[2185454]: Invalid user ubnt from 181.129.165.139 port 53680 Sep 13 10:45:15 plex-server sshd[2185454]: Failed password for invalid user ubnt from 181.129.165.139 port 53680 ssh2 ... |
2020-09-13 22:36:31 |
| 118.97.128.83 | attack | Sep 12 18:55:15 pipo sshd[2899]: Disconnected from authenticating user gnats 118.97.128.83 port 55623 [preauth] Sep 12 18:55:54 pipo sshd[3788]: Disconnected from authenticating user root 118.97.128.83 port 59104 [preauth] Sep 12 18:56:32 pipo sshd[5222]: Invalid user if from 118.97.128.83 port 34356 Sep 12 18:56:33 pipo sshd[5222]: Disconnected from invalid user if 118.97.128.83 port 34356 [preauth] ... |
2020-09-13 23:03:19 |
| 40.73.67.85 | attack | (sshd) Failed SSH login from 40.73.67.85 (CN/China/-): 5 in the last 3600 secs |
2020-09-13 23:04:26 |
| 45.145.66.67 | attack | scans once in preceeding hours on the ports (in chronological order) 20425 resulting in total of 13 scans from 45.145.66.0/23 block. |
2020-09-13 22:45:10 |
| 201.216.120.59 | attackbots | Sep 12 11:57:13 mailman postfix/smtpd[12159]: warning: unknown[201.216.120.59]: SASL PLAIN authentication failed: authentication failure |
2020-09-13 22:39:21 |
| 148.101.229.107 | attackbots | Sep 12 20:44:06 kunden sshd[22642]: Address 148.101.229.107 maps to 107.229.101.148.d.dyn.claro.net.do, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 12 20:44:06 kunden sshd[22642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.101.229.107 user=r.r Sep 12 20:44:09 kunden sshd[22642]: Failed password for r.r from 148.101.229.107 port 37398 ssh2 Sep 12 20:44:09 kunden sshd[22642]: Received disconnect from 148.101.229.107: 11: Bye Bye [preauth] Sep 12 20:50:54 kunden sshd[28292]: Address 148.101.229.107 maps to 107.229.101.148.d.dyn.claro.net.do, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 12 20:50:54 kunden sshd[28292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.101.229.107 user=r.r Sep 12 20:50:57 kunden sshd[28292]: Failed password for r.r from 148.101.229.107 port 52499 ssh2 Sep 12 20:50:57 kunden sshd[28292]: Rece........ ------------------------------- |
2020-09-13 22:46:08 |
| 185.220.102.252 | attackbotsspam | Sep 13 14:37:22 vpn01 sshd[9410]: Failed password for root from 185.220.102.252 port 22110 ssh2 Sep 13 14:37:29 vpn01 sshd[9410]: Failed password for root from 185.220.102.252 port 22110 ssh2 ... |
2020-09-13 22:38:13 |
| 95.85.34.53 | attackbotsspam | 2020-09-13T13:22:26.138880abusebot-6.cloudsearch.cf sshd[990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.34.53 user=root 2020-09-13T13:22:28.481324abusebot-6.cloudsearch.cf sshd[990]: Failed password for root from 95.85.34.53 port 49868 ssh2 2020-09-13T13:27:08.387169abusebot-6.cloudsearch.cf sshd[1007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.34.53 user=root 2020-09-13T13:27:10.107740abusebot-6.cloudsearch.cf sshd[1007]: Failed password for root from 95.85.34.53 port 33814 ssh2 2020-09-13T13:31:34.704157abusebot-6.cloudsearch.cf sshd[1128]: Invalid user jasoncreek from 95.85.34.53 port 46010 2020-09-13T13:31:34.709474abusebot-6.cloudsearch.cf sshd[1128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.34.53 2020-09-13T13:31:34.704157abusebot-6.cloudsearch.cf sshd[1128]: Invalid user jasoncreek from 95.85.34.53 port 46010 2020-09-13T1 ... |
2020-09-13 22:48:44 |