City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.16.131.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4157
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.16.131.53. IN A
;; AUTHORITY SECTION:
. 46 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 19:19:31 CST 2022
;; MSG SIZE rcvd: 106
Host 53.131.16.104.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 53.131.16.104.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 212.70.149.67 | attack | 2020-07-26 01:45:14 dovecot_login authenticator failed for \(User\) \[212.70.149.67\]: 535 Incorrect authentication data \(set_id=ted@no-server.de\) 2020-07-26 01:45:14 dovecot_login authenticator failed for \(User\) \[212.70.149.67\]: 535 Incorrect authentication data \(set_id=ted@no-server.de\) 2020-07-26 01:47:01 dovecot_login authenticator failed for \(User\) \[212.70.149.67\]: 535 Incorrect authentication data \(set_id=teddy@no-server.de\) 2020-07-26 01:47:03 dovecot_login authenticator failed for \(User\) \[212.70.149.67\]: 535 Incorrect authentication data \(set_id=teddy@no-server.de\) 2020-07-26 01:48:52 dovecot_login authenticator failed for \(User\) \[212.70.149.67\]: 535 Incorrect authentication data \(set_id=teresa@no-server.de\) 2020-07-26 01:48:52 dovecot_login authenticator failed for \(User\) \[212.70.149.67\]: 535 Incorrect authentication data \(set_id=teresa@no-server.de\) ... |
2020-07-26 07:53:52 |
| 106.12.55.170 | attackspambots | Jul 26 00:51:22 server sshd[46587]: Failed password for invalid user martin from 106.12.55.170 port 38544 ssh2 Jul 26 01:04:26 server sshd[51496]: Failed password for invalid user msr from 106.12.55.170 port 46700 ssh2 Jul 26 01:08:42 server sshd[52945]: Failed password for invalid user amsftp from 106.12.55.170 port 41644 ssh2 |
2020-07-26 07:55:12 |
| 222.186.52.39 | attackbotsspam | Jul 25 19:30:53 plusreed sshd[24670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.39 user=root Jul 25 19:30:55 plusreed sshd[24670]: Failed password for root from 222.186.52.39 port 46574 ssh2 ... |
2020-07-26 07:42:09 |
| 49.234.27.90 | attack | 2020-07-26T06:11:49.396412hostname sshd[109900]: Invalid user akazam from 49.234.27.90 port 34722 ... |
2020-07-26 08:14:40 |
| 182.61.27.149 | attack | Jul 26 01:34:26 ns392434 sshd[31150]: Invalid user lisa from 182.61.27.149 port 33062 Jul 26 01:34:26 ns392434 sshd[31150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.27.149 Jul 26 01:34:26 ns392434 sshd[31150]: Invalid user lisa from 182.61.27.149 port 33062 Jul 26 01:34:28 ns392434 sshd[31150]: Failed password for invalid user lisa from 182.61.27.149 port 33062 ssh2 Jul 26 01:46:57 ns392434 sshd[31454]: Invalid user steffen from 182.61.27.149 port 38600 Jul 26 01:46:57 ns392434 sshd[31454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.27.149 Jul 26 01:46:57 ns392434 sshd[31454]: Invalid user steffen from 182.61.27.149 port 38600 Jul 26 01:46:59 ns392434 sshd[31454]: Failed password for invalid user steffen from 182.61.27.149 port 38600 ssh2 Jul 26 01:51:12 ns392434 sshd[31578]: Invalid user syy from 182.61.27.149 port 36378 |
2020-07-26 07:58:56 |
| 139.198.17.144 | attack | 2020-07-26T01:27:01.316093sd-86998 sshd[39321]: Invalid user lori from 139.198.17.144 port 41162 2020-07-26T01:27:01.319399sd-86998 sshd[39321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.17.144 2020-07-26T01:27:01.316093sd-86998 sshd[39321]: Invalid user lori from 139.198.17.144 port 41162 2020-07-26T01:27:03.494166sd-86998 sshd[39321]: Failed password for invalid user lori from 139.198.17.144 port 41162 ssh2 2020-07-26T01:31:25.955648sd-86998 sshd[39961]: Invalid user prasath from 139.198.17.144 port 45800 ... |
2020-07-26 08:18:03 |
| 203.195.191.249 | attackbotsspam | 2020-07-26T01:28:46.491258centos sshd[8454]: Invalid user user from 203.195.191.249 port 35292 2020-07-26T01:28:48.088196centos sshd[8454]: Failed password for invalid user user from 203.195.191.249 port 35292 ssh2 2020-07-26T01:33:03.483243centos sshd[8696]: Invalid user tma from 203.195.191.249 port 50420 ... |
2020-07-26 07:54:27 |
| 211.80.102.182 | attack | SSH brute force |
2020-07-26 08:13:28 |
| 136.144.191.239 | attackspambots | Jul 24 16:28:13 s30-ffm-r02 sshd[15398]: Invalid user kafka from 136.144.191.239 Jul 24 16:28:13 s30-ffm-r02 sshd[15398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136-144-191-239.colo.transip.net Jul 24 16:28:15 s30-ffm-r02 sshd[15398]: Failed password for invalid user kafka from 136.144.191.239 port 43734 ssh2 Jul 24 16:43:09 s30-ffm-r02 sshd[15832]: Invalid user solution from 136.144.191.239 Jul 24 16:43:09 s30-ffm-r02 sshd[15832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136-144-191-239.colo.transip.net Jul 24 16:43:11 s30-ffm-r02 sshd[15832]: Failed password for invalid user solution from 136.144.191.239 port 59738 ssh2 Jul 24 16:47:12 s30-ffm-r02 sshd[15936]: Invalid user growth from 136.144.191.239 Jul 24 16:47:12 s30-ffm-r02 sshd[15936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136-144-191-239.colo.transip.net Jul 24 16:4........ ------------------------------- |
2020-07-26 08:13:52 |
| 46.146.136.8 | attackbots | Jul 26 01:38:46 mout sshd[5057]: Invalid user testuser from 46.146.136.8 port 37324 |
2020-07-26 07:51:39 |
| 5.188.62.140 | attack | 5.188.62.140 - - [26/Jul/2020:00:08:24 +0100] "POST /wp-login.php HTTP/1.1" 200 2098 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 5.188.62.140 - - [26/Jul/2020:00:08:25 +0100] "POST /wp-login.php HTTP/1.1" 200 2109 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 5.188.62.140 - - [26/Jul/2020:00:08:25 +0100] "POST /wp-login.php HTTP/1.1" 200 2098 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" ... |
2020-07-26 08:13:12 |
| 112.169.152.105 | attackbotsspam | web-1 [ssh] SSH Attack |
2020-07-26 07:39:22 |
| 218.81.244.26 | attackbotsspam | Jul 23 22:32:45 hostnameproxy sshd[30510]: Invalid user live from 218.81.244.26 port 49816 Jul 23 22:32:45 hostnameproxy sshd[30510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.81.244.26 Jul 23 22:32:47 hostnameproxy sshd[30510]: Failed password for invalid user live from 218.81.244.26 port 49816 ssh2 Jul 23 22:36:00 hostnameproxy sshd[30658]: Invalid user demo from 218.81.244.26 port 33282 Jul 23 22:36:00 hostnameproxy sshd[30658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.81.244.26 Jul 23 22:36:01 hostnameproxy sshd[30658]: Failed password for invalid user demo from 218.81.244.26 port 33282 ssh2 Jul 23 22:39:13 hostnameproxy sshd[30818]: Invalid user ftpuser from 218.81.244.26 port 44976 Jul 23 22:39:13 hostnameproxy sshd[30818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.81.244.26 Jul 23 22:39:15 hostnameproxy sshd[30818]:........ ------------------------------ |
2020-07-26 07:40:58 |
| 179.109.7.205 | attackbots | (smtpauth) Failed SMTP AUTH login from 179.109.7.205 (BR/Brazil/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-26 03:38:44 plain authenticator failed for ([179.109.7.205]) [179.109.7.205]: 535 Incorrect authentication data (set_id=info@bornaplastic.com) |
2020-07-26 07:48:59 |
| 61.177.172.159 | attack | Scanned 77 times in the last 24 hours on port 22 |
2020-07-26 08:07:46 |