City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 96.145.50.37
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1419
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;96.145.50.37. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 22:55:52 CST 2025
;; MSG SIZE rcvd: 105Host 37.50.145.96.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 37.50.145.96.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.21.191.252 | attack | Tried sshing with brute force. |
2020-04-07 17:32:34 |
| 103.95.221.2 | attack | Brute force attack against VPN service |
2020-04-07 17:48:47 |
| 152.136.36.250 | attack | Apr 7 09:00:48 v22019038103785759 sshd\[17423\]: Invalid user admin from 152.136.36.250 port 47898 Apr 7 09:00:48 v22019038103785759 sshd\[17423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.36.250 Apr 7 09:00:50 v22019038103785759 sshd\[17423\]: Failed password for invalid user admin from 152.136.36.250 port 47898 ssh2 Apr 7 09:05:58 v22019038103785759 sshd\[17921\]: Invalid user test from 152.136.36.250 port 50453 Apr 7 09:05:58 v22019038103785759 sshd\[17921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.36.250 ... |
2020-04-07 17:51:36 |
| 60.186.196.54 | attack | (ftpd) Failed FTP login from 60.186.196.54 (CN/China/54.196.186.60.broad.hz.zj.dynamic.163data.com.cn): 10 in the last 3600 secs |
2020-04-07 17:58:18 |
| 14.241.248.57 | attackbotsspam | 2020-04-07T10:36:09.040078librenms sshd[15012]: Invalid user admin from 14.241.248.57 port 54124 2020-04-07T10:36:11.065595librenms sshd[15012]: Failed password for invalid user admin from 14.241.248.57 port 54124 ssh2 2020-04-07T10:43:41.392753librenms sshd[15736]: Invalid user test from 14.241.248.57 port 45950 ... |
2020-04-07 17:34:49 |
| 180.167.195.167 | attackbotsspam | 2020-04-07T10:42:49.156374librenms sshd[15719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.195.167 2020-04-07T10:42:49.153475librenms sshd[15719]: Invalid user ovidio from 180.167.195.167 port 35290 2020-04-07T10:42:51.421627librenms sshd[15719]: Failed password for invalid user ovidio from 180.167.195.167 port 35290 ssh2 ... |
2020-04-07 17:31:36 |
| 211.5.228.19 | attackspam | Apr 7 03:31:08 server1 sshd\[28638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.5.228.19 Apr 7 03:31:10 server1 sshd\[28638\]: Failed password for invalid user teampspeak from 211.5.228.19 port 33627 ssh2 Apr 7 03:33:30 server1 sshd\[29779\]: Invalid user test from 211.5.228.19 Apr 7 03:33:31 server1 sshd\[29779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.5.228.19 Apr 7 03:33:33 server1 sshd\[29779\]: Failed password for invalid user test from 211.5.228.19 port 52273 ssh2 ... |
2020-04-07 17:36:42 |
| 45.95.168.162 | attackbotsspam | Apr 7 08:11:17 pi sshd[18270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.162 user=root Apr 7 08:11:18 pi sshd[18272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.162 user=root |
2020-04-07 17:38:46 |
| 88.90.123.247 | attack | Triggered by Fail2Ban at Ares web server |
2020-04-07 17:27:44 |
| 45.148.120.150 | attackspambots | [Tue Apr 07 00:48:43.054737 2020] [:error] [pid 135802] [client 45.148.120.150:55588] [client 45.148.120.150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "127.0.0.1"] [uri "/cgi-bin/ViewLog.asp"] [unique_id "Xov4GsTCSdcWHEV@F8KFXAAAAB8"] ... |
2020-04-07 17:53:09 |
| 189.41.116.247 | attackbots | Automatic report - Port Scan Attack |
2020-04-07 17:49:53 |
| 113.67.18.240 | attack | FTP/21 MH Probe, BF, Hack - |
2020-04-07 17:42:28 |
| 148.70.125.42 | attackspambots | Apr 7 10:25:05 ns392434 sshd[12503]: Invalid user lobo from 148.70.125.42 port 45370 Apr 7 10:25:05 ns392434 sshd[12503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.125.42 Apr 7 10:25:05 ns392434 sshd[12503]: Invalid user lobo from 148.70.125.42 port 45370 Apr 7 10:25:07 ns392434 sshd[12503]: Failed password for invalid user lobo from 148.70.125.42 port 45370 ssh2 Apr 7 10:32:53 ns392434 sshd[12812]: Invalid user mauro from 148.70.125.42 port 44466 Apr 7 10:32:53 ns392434 sshd[12812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.125.42 Apr 7 10:32:53 ns392434 sshd[12812]: Invalid user mauro from 148.70.125.42 port 44466 Apr 7 10:32:55 ns392434 sshd[12812]: Failed password for invalid user mauro from 148.70.125.42 port 44466 ssh2 Apr 7 10:36:47 ns392434 sshd[13025]: Invalid user sbserver from 148.70.125.42 port 52974 |
2020-04-07 17:29:32 |
| 219.150.189.215 | attackspam | Excessive Port-Scanning |
2020-04-07 17:22:10 |
| 187.190.236.88 | attack | Apr 6 18:48:01 server sshd\[15414\]: Failed password for root from 187.190.236.88 port 56750 ssh2 Apr 7 10:10:56 server sshd\[27860\]: Invalid user user from 187.190.236.88 Apr 7 10:10:56 server sshd\[27860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=fixed-187-190-236-88.totalplay.net Apr 7 10:10:58 server sshd\[27860\]: Failed password for invalid user user from 187.190.236.88 port 33486 ssh2 Apr 7 10:14:52 server sshd\[28585\]: Invalid user user from 187.190.236.88 ... |
2020-04-07 17:28:47 |