City: unknown
Region: unknown
Country: Denmark
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.148.55.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7938
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.148.55.57. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019063001 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 01 05:00:40 CST 2019
;; MSG SIZE rcvd: 116Host 57.55.148.94.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 57.55.148.94.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 167.172.39.59 | attackspambots | Lines containing failures of 167.172.39.59 auth.log:Dec 27 15:14:08 omfg sshd[26907]: Connection from 167.172.39.59 port 47250 on 78.46.60.53 port 22 auth.log:Dec 27 15:14:08 omfg sshd[26907]: Did not receive identification string from 167.172.39.59 auth.log:Dec 27 15:14:44 omfg sshd[27042]: Connection from 167.172.39.59 port 52234 on 78.46.60.53 port 22 auth.log:Dec 27 15:14:44 omfg sshd[27042]: Received disconnect from 167.172.39.59 port 52234:11: Normal Shutdown, Thank you for playing [preauth] auth.log:Dec 27 15:14:44 omfg sshd[27042]: Disconnected from 167.172.39.59 port 52234 [preauth] auth.log:Dec 27 15:15:10 omfg sshd[27885]: Connection from 167.172.39.59 port 59360 on 78.46.60.53 port 22 auth.log:Dec 27 15:15:10 omfg sshd[27885]: Invalid user test from 167.172.39.59 auth.log:Dec 27 15:15:10 omfg sshd[27885]: Received disconnect from 167.172.39.59 port 59360:11: Normal Shutdown, Thank you for playing [preauth] auth.log:Dec 27 15:15:10 omfg sshd[27885]: Disconnect........ ------------------------------ |
2019-12-28 00:59:39 |
| 122.200.93.22 | attack | SIP/5060 Probe, BF, Hack - |
2019-12-28 00:37:55 |
| 185.202.215.165 | attack | Honeypot hit: [2019-12-27 17:55:02 +0300] Connected from 185.202.215.165 to (HoneypotIP):21 |
2019-12-28 01:01:15 |
| 197.50.114.6 | attackbots | Unauthorised access (Dec 27) SRC=197.50.114.6 LEN=40 TTL=53 ID=8311 TCP DPT=23 WINDOW=48419 SYN Unauthorised access (Dec 26) SRC=197.50.114.6 LEN=40 TTL=51 ID=61298 TCP DPT=8080 WINDOW=42299 SYN Unauthorised access (Dec 26) SRC=197.50.114.6 LEN=40 TTL=51 ID=21335 TCP DPT=8080 WINDOW=42299 SYN Unauthorised access (Dec 26) SRC=197.50.114.6 LEN=40 TTL=51 ID=24557 TCP DPT=8080 WINDOW=42299 SYN Unauthorised access (Dec 25) SRC=197.50.114.6 LEN=40 TTL=51 ID=19131 TCP DPT=8080 WINDOW=42299 SYN |
2019-12-28 00:41:27 |
| 159.192.98.3 | attackspambots | Dec 27 21:47:08 itv-usvr-02 sshd[28070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.192.98.3 user=root Dec 27 21:47:10 itv-usvr-02 sshd[28070]: Failed password for root from 159.192.98.3 port 58764 ssh2 Dec 27 21:51:08 itv-usvr-02 sshd[28084]: Invalid user allison from 159.192.98.3 port 35380 Dec 27 21:51:08 itv-usvr-02 sshd[28084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.192.98.3 Dec 27 21:51:08 itv-usvr-02 sshd[28084]: Invalid user allison from 159.192.98.3 port 35380 Dec 27 21:51:10 itv-usvr-02 sshd[28084]: Failed password for invalid user allison from 159.192.98.3 port 35380 ssh2 |
2019-12-28 00:44:25 |
| 122.165.184.94 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-12-28 00:40:29 |
| 122.228.19.79 | attackspambots | 122.228.19.79 was recorded 15 times by 5 hosts attempting to connect to the following ports: 8001,69,13,3001,4567,41795,2049,16993,990,6001,3050,123,7002,79. Incident counter (4h, 24h, all-time): 15, 84, 7454 |
2019-12-28 00:27:20 |
| 106.13.45.212 | attackbots | Dec 27 06:36:17 web9 sshd\[11494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.212 user=root Dec 27 06:36:19 web9 sshd\[11494\]: Failed password for root from 106.13.45.212 port 56566 ssh2 Dec 27 06:40:26 web9 sshd\[12077\]: Invalid user svelaste from 106.13.45.212 Dec 27 06:40:26 web9 sshd\[12077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.212 Dec 27 06:40:29 web9 sshd\[12077\]: Failed password for invalid user svelaste from 106.13.45.212 port 52734 ssh2 |
2019-12-28 00:57:39 |
| 98.14.209.24 | attackbotsspam | Unauthorized connection attempt detected from IP address 98.14.209.24 to port 8080 |
2019-12-28 00:30:19 |
| 60.29.31.194 | attack | Dec 27 09:51:18 web1 postfix/smtpd[6010]: warning: unknown[60.29.31.194]: SASL LOGIN authentication failed: authentication failure ... |
2019-12-28 00:33:34 |
| 223.247.129.84 | attackspambots | Dec 27 17:18:36 sso sshd[25351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.129.84 Dec 27 17:18:38 sso sshd[25351]: Failed password for invalid user zarbis from 223.247.129.84 port 36698 ssh2 ... |
2019-12-28 00:51:20 |
| 162.214.21.81 | attackbots | Automatic report - XMLRPC Attack |
2019-12-28 00:50:22 |
| 178.128.221.237 | attackbots | Dec 27 16:55:00 ArkNodeAT sshd\[18781\]: Invalid user yuso from 178.128.221.237 Dec 27 16:55:00 ArkNodeAT sshd\[18781\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.221.237 Dec 27 16:55:02 ArkNodeAT sshd\[18781\]: Failed password for invalid user yuso from 178.128.221.237 port 33978 ssh2 |
2019-12-28 00:46:21 |
| 121.164.107.10 | attackbots | Dec 27 14:37:38 raspberrypi sshd\[28144\]: Invalid user web from 121.164.107.10Dec 27 14:37:41 raspberrypi sshd\[28144\]: Failed password for invalid user web from 121.164.107.10 port 39804 ssh2Dec 27 14:53:55 raspberrypi sshd\[29641\]: Invalid user katashi from 121.164.107.10 ... |
2019-12-28 01:00:09 |
| 122.118.215.122 | attack | SIP/5060 Probe, BF, Hack - |
2019-12-28 00:48:55 |