City: unknown
Region: unknown
Country: Italy
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.68.92.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52450
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;93.68.92.2. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 05:56:48 CST 2025
;; MSG SIZE rcvd: 103Host 2.92.68.93.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 2.92.68.93.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 211.169.249.231 | attackbotsspam | May 26 03:16:28 sip sshd[15006]: Failed password for root from 211.169.249.231 port 33818 ssh2 May 26 03:33:07 sip sshd[21118]: Failed password for root from 211.169.249.231 port 33014 ssh2 |
2020-05-26 12:42:15 |
| 182.61.172.57 | attackbots | 2020-05-25T22:51:42.302689morrigan.ad5gb.com sshd[10035]: Invalid user testuser from 182.61.172.57 port 56150 2020-05-25T22:51:44.537401morrigan.ad5gb.com sshd[10035]: Failed password for invalid user testuser from 182.61.172.57 port 56150 ssh2 2020-05-25T22:51:45.120526morrigan.ad5gb.com sshd[10035]: Disconnected from invalid user testuser 182.61.172.57 port 56150 [preauth] |
2020-05-26 12:44:24 |
| 121.227.152.235 | attackbotsspam | Brute force attempt |
2020-05-26 12:27:33 |
| 58.211.191.20 | attackspambots | Failed password for invalid user jacqmin from 58.211.191.20 port 54890 ssh2 |
2020-05-26 12:38:05 |
| 167.71.146.220 | attack | May 25 22:30:18 server1 sshd\[2729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.146.220 user=root May 25 22:30:20 server1 sshd\[2729\]: Failed password for root from 167.71.146.220 port 34316 ssh2 May 25 22:33:56 server1 sshd\[3807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.146.220 user=root May 25 22:33:58 server1 sshd\[3807\]: Failed password for root from 167.71.146.220 port 40822 ssh2 May 25 22:37:34 server1 sshd\[4842\]: Invalid user chimistry from 167.71.146.220 ... |
2020-05-26 12:53:01 |
| 41.77.146.98 | attackbotsspam | (sshd) Failed SSH login from 41.77.146.98 (ZM/Zambia/41.77.146.98.liquidtelecom.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 25 21:49:16 host sshd[91689]: Invalid user splunk from 41.77.146.98 port 53206 |
2020-05-26 12:53:35 |
| 222.186.180.6 | attackbots | 2020-05-26T07:40:05.916252afi-git.jinr.ru sshd[9477]: Failed password for root from 222.186.180.6 port 23340 ssh2 2020-05-26T07:40:09.226991afi-git.jinr.ru sshd[9477]: Failed password for root from 222.186.180.6 port 23340 ssh2 2020-05-26T07:40:12.617823afi-git.jinr.ru sshd[9477]: Failed password for root from 222.186.180.6 port 23340 ssh2 2020-05-26T07:40:12.617994afi-git.jinr.ru sshd[9477]: error: maximum authentication attempts exceeded for root from 222.186.180.6 port 23340 ssh2 [preauth] 2020-05-26T07:40:12.618008afi-git.jinr.ru sshd[9477]: Disconnecting: Too many authentication failures [preauth] ... |
2020-05-26 12:41:59 |
| 89.25.116.106 | attack | Automatic report - Banned IP Access |
2020-05-26 12:38:51 |
| 170.80.44.135 | attackbotsspam | Unauthorized connection attempt detected from IP address 170.80.44.135 to port 23 |
2020-05-26 12:34:43 |
| 116.203.87.150 | attackbots | Lines containing failures of 116.203.87.150 May 26 00:57:06 shared03 sshd[27355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.87.150 user=r.r May 26 00:57:09 shared03 sshd[27355]: Failed password for r.r from 116.203.87.150 port 33962 ssh2 May 26 00:57:09 shared03 sshd[27355]: Received disconnect from 116.203.87.150 port 33962:11: Bye Bye [preauth] May 26 00:57:09 shared03 sshd[27355]: Disconnected from authenticating user r.r 116.203.87.150 port 33962 [preauth] May 26 01:03:24 shared03 sshd[5709]: Invalid user jcoffey from 116.203.87.150 port 46852 May 26 01:03:24 shared03 sshd[5709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.87.150 May 26 01:03:26 shared03 sshd[5709]: Failed password for invalid user jcoffey from 116.203.87.150 port 46852 ssh2 May 26 01:03:26 shared03 sshd[5709]: Received disconnect from 116.203.87.150 port 46852:11: Bye Bye [preauth] May 26 01:03........ ------------------------------ |
2020-05-26 13:03:45 |
| 59.127.1.12 | attack | Tried sshing with brute force. |
2020-05-26 12:48:02 |
| 121.7.127.92 | attack | May 26 03:09:24 host sshd[19752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=bb121-7-127-92.singnet.com.sg user=root May 26 03:09:26 host sshd[19752]: Failed password for root from 121.7.127.92 port 59107 ssh2 ... |
2020-05-26 12:58:02 |
| 196.52.43.103 | attack | firewall-block, port(s): 5000/tcp |
2020-05-26 13:05:03 |
| 36.226.51.5 | attackspambots | " " |
2020-05-26 12:39:07 |
| 106.12.204.75 | attackspam | May 26 03:12:56 eventyay sshd[18004]: Failed password for root from 106.12.204.75 port 38934 ssh2 May 26 03:15:59 eventyay sshd[18122]: Failed password for root from 106.12.204.75 port 55372 ssh2 May 26 03:19:05 eventyay sshd[18210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.204.75 ... |
2020-05-26 12:57:03 |