City: unknown
Region: unknown
Country: Germany
Internet Service Provider: Telekom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.248.85.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 969
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;93.248.85.54. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019091300 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Sep 14 01:35:44 CST 2019
;; MSG SIZE rcvd: 116Host 54.85.248.93.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 54.85.248.93.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 186.122.148.216 | attackbots | Aug 6 16:21:17 ns382633 sshd\[15329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.122.148.216 user=root Aug 6 16:21:19 ns382633 sshd\[15329\]: Failed password for root from 186.122.148.216 port 59878 ssh2 Aug 6 16:32:05 ns382633 sshd\[17302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.122.148.216 user=root Aug 6 16:32:07 ns382633 sshd\[17302\]: Failed password for root from 186.122.148.216 port 37324 ssh2 Aug 6 16:38:08 ns382633 sshd\[18233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.122.148.216 user=root |
2020-08-07 01:43:54 |
| 45.72.61.63 | attackspam | (mod_security) mod_security (id:210740) triggered by 45.72.61.63 (US/United States/-): 5 in the last 3600 secs |
2020-08-07 01:17:19 |
| 104.131.249.57 | attackbots | Aug 6 17:20:44 ovpn sshd\[14252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.249.57 user=root Aug 6 17:20:45 ovpn sshd\[14252\]: Failed password for root from 104.131.249.57 port 40972 ssh2 Aug 6 17:32:47 ovpn sshd\[20550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.249.57 user=root Aug 6 17:32:49 ovpn sshd\[20550\]: Failed password for root from 104.131.249.57 port 38795 ssh2 Aug 6 17:36:45 ovpn sshd\[22288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.249.57 user=root |
2020-08-07 01:38:31 |
| 51.91.109.220 | attack | Aug 6 06:14:46 pixelmemory sshd[2983167]: Failed password for root from 51.91.109.220 port 35650 ssh2 Aug 6 06:18:48 pixelmemory sshd[2998028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.109.220 user=root Aug 6 06:18:50 pixelmemory sshd[2998028]: Failed password for root from 51.91.109.220 port 46242 ssh2 Aug 6 06:22:40 pixelmemory sshd[3007475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.109.220 user=root Aug 6 06:22:42 pixelmemory sshd[3007475]: Failed password for root from 51.91.109.220 port 56834 ssh2 ... |
2020-08-07 01:20:13 |
| 49.235.141.203 | attackbots | [Mon Jul 13 19:06:19 2020] - DDoS Attack From IP: 49.235.141.203 Port: 57865 |
2020-08-07 01:33:31 |
| 52.167.172.27 | attackbotsspam | 2020-08-06T16:31:16.505671randservbullet-proofcloud-66.localdomain sshd[6591]: Invalid user aleksey from 52.167.172.27 port 52002 2020-08-06T16:31:16.510058randservbullet-proofcloud-66.localdomain sshd[6591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.167.172.27 2020-08-06T16:31:16.505671randservbullet-proofcloud-66.localdomain sshd[6591]: Invalid user aleksey from 52.167.172.27 port 52002 2020-08-06T16:31:18.420223randservbullet-proofcloud-66.localdomain sshd[6591]: Failed password for invalid user aleksey from 52.167.172.27 port 52002 ssh2 ... |
2020-08-07 01:47:31 |
| 83.189.40.61 | attackbotsspam | 2020-08-06T17:53:51.594527 sshd[1467045]: Invalid user support from 83.189.40.61 port 60642 2020-08-06T17:54:11.408407 sshd[1467249]: Invalid user NetLinx from 83.189.40.61 port 53856 2020-08-06T17:54:34.880738 sshd[1467414]: Invalid user netscreen from 83.189.40.61 port 53896 |
2020-08-07 01:46:17 |
| 187.41.141.110 | attackbots | " " |
2020-08-07 01:45:19 |
| 194.26.29.166 | attack | [Tue Jul 14 08:00:49 2020] - DDoS Attack From IP: 194.26.29.166 Port: 44828 |
2020-08-07 01:32:16 |
| 122.51.10.222 | attack | Aug 6 15:09:25 ovpn sshd\[29554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.10.222 user=root Aug 6 15:09:28 ovpn sshd\[29554\]: Failed password for root from 122.51.10.222 port 46314 ssh2 Aug 6 15:16:34 ovpn sshd\[32136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.10.222 user=root Aug 6 15:16:36 ovpn sshd\[32136\]: Failed password for root from 122.51.10.222 port 57086 ssh2 Aug 6 15:22:23 ovpn sshd\[2100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.10.222 user=root |
2020-08-07 01:38:05 |
| 50.66.157.156 | attackbots | "$f2bV_matches" |
2020-08-07 01:39:11 |
| 201.159.127.154 | attack | Icarus honeypot on github |
2020-08-07 01:18:09 |
| 54.79.183.195 | attackspambots | Brute forcing RDP port 3389 |
2020-08-07 01:57:50 |
| 175.45.10.101 | attack | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-06T16:16:49Z and 2020-08-06T16:25:18Z |
2020-08-07 01:58:48 |
| 79.172.214.198 | attackspam | Lines containing failures of 79.172.214.198 Aug 6 14:54:41 dns01 sshd[19835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.172.214.198 user=r.r Aug 6 14:54:43 dns01 sshd[19835]: Failed password for r.r from 79.172.214.198 port 54316 ssh2 Aug 6 14:54:43 dns01 sshd[19835]: Received disconnect from 79.172.214.198 port 54316:11: Bye Bye [preauth] Aug 6 14:54:43 dns01 sshd[19835]: Disconnected from authenticating user r.r 79.172.214.198 port 54316 [preauth] Aug 6 15:05:44 dns01 sshd[22423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.172.214.198 user=r.r Aug 6 15:05:45 dns01 sshd[22423]: Failed password for r.r from 79.172.214.198 port 60700 ssh2 Aug 6 15:05:45 dns01 sshd[22423]: Received disconnect from 79.172.214.198 port 60700:11: Bye Bye [preauth] Aug 6 15:05:45 dns01 sshd[22423]: Disconnected from authenticating user r.r 79.172.214.198 port 60700 [preauth] Aug 6 15:09:........ ------------------------------ |
2020-08-07 01:51:41 |