City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.16.94.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11532
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.16.94.52. IN A
;; AUTHORITY SECTION:
. 258 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400
;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 17:03:08 CST 2022
;; MSG SIZE rcvd: 105Host 52.94.16.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 52.94.16.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 195.181.242.183 | attackbots | $f2bV_matches_ltvn |
2019-11-04 13:07:25 |
| 158.69.182.99 | attackspambots | Automatic report - XMLRPC Attack |
2019-11-04 13:04:15 |
| 51.75.163.218 | attackbots | Nov 4 02:16:25 server sshd\[11938\]: Invalid user rf from 51.75.163.218 Nov 4 02:16:25 server sshd\[11938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.ip-51-75-163.eu Nov 4 02:16:27 server sshd\[11938\]: Failed password for invalid user rf from 51.75.163.218 port 33266 ssh2 Nov 4 02:22:21 server sshd\[13579\]: Invalid user tomcat from 51.75.163.218 Nov 4 02:22:21 server sshd\[13579\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.ip-51-75-163.eu ... |
2019-11-04 08:05:48 |
| 80.82.64.212 | attackspam | eintrachtkultkellerfulda.de 80.82.64.212 \[04/Nov/2019:06:11:25 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 578 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/74.0.3729.169 Safari/537.36" eintrachtkultkellerfulda.de 80.82.64.212 \[04/Nov/2019:06:11:25 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 578 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/74.0.3729.169 Safari/537.36" |
2019-11-04 13:30:16 |
| 51.77.157.78 | attack | Nov 4 05:53:46 MK-Soft-VM6 sshd[19199]: Failed password for root from 51.77.157.78 port 33680 ssh2 ... |
2019-11-04 13:03:04 |
| 150.95.174.36 | attack | Nov 3 19:10:04 auw2 sshd\[22322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v150-95-174-36.a0d5.g.tyo1.static.cnode.io user=root Nov 3 19:10:06 auw2 sshd\[22322\]: Failed password for root from 150.95.174.36 port 53020 ssh2 Nov 3 19:14:30 auw2 sshd\[22685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v150-95-174-36.a0d5.g.tyo1.static.cnode.io user=root Nov 3 19:14:33 auw2 sshd\[22685\]: Failed password for root from 150.95.174.36 port 35314 ssh2 Nov 3 19:18:59 auw2 sshd\[23029\]: Invalid user smmsp from 150.95.174.36 |
2019-11-04 13:28:15 |
| 52.58.75.133 | attackbotsspam | 11/04/2019-00:11:27.213473 52.58.75.133 Protocol: 6 ET SCAN Potential SSH Scan |
2019-11-04 13:13:00 |
| 122.192.33.102 | attackbotsspam | Nov 4 05:52:16 meumeu sshd[2105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.192.33.102 Nov 4 05:52:18 meumeu sshd[2105]: Failed password for invalid user 1203 from 122.192.33.102 port 54964 ssh2 Nov 4 05:57:26 meumeu sshd[2830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.192.33.102 ... |
2019-11-04 13:04:59 |
| 54.36.214.76 | attackspam | 2019-11-04T05:56:13.333989mail01 postfix/smtpd[20146]: warning: ip76.ip-54-36-214.eu[54.36.214.76]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-04T05:56:45.482109mail01 postfix/smtpd[20146]: warning: ip76.ip-54-36-214.eu[54.36.214.76]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-04T05:57:30.381356mail01 postfix/smtpd[20146]: warning: ip76.ip-54-36-214.eu[54.36.214.76]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-04T05:57:30.381794mail01 postfix/smtpd[5536]: warning: ip76.ip-54-36-214.eu[54.36.214.76]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-04 13:01:50 |
| 91.121.172.194 | attack | Nov 4 05:58:33 dev0-dcde-rnet sshd[5231]: Failed password for root from 91.121.172.194 port 39382 ssh2 Nov 4 06:02:14 dev0-dcde-rnet sshd[5268]: Failed password for root from 91.121.172.194 port 49378 ssh2 |
2019-11-04 13:12:45 |
| 190.210.9.66 | attack | WordPress login Brute force / Web App Attack on client site. |
2019-11-04 13:11:11 |
| 124.42.117.243 | attackbotsspam | Nov 4 00:13:02 plusreed sshd[12342]: Invalid user ftpuser from 124.42.117.243 ... |
2019-11-04 13:25:54 |
| 163.172.145.170 | attack | Nov 4 05:57:16 cvbnet sshd[30353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.145.170 Nov 4 05:57:18 cvbnet sshd[30353]: Failed password for invalid user 46.231.126.13 from 163.172.145.170 port 54224 ssh2 ... |
2019-11-04 13:11:46 |
| 5.45.6.66 | attackbotsspam | 2019-11-04 06:04:39,447 fail2ban.actions: WARNING [ssh] Ban 5.45.6.66 |
2019-11-04 13:13:34 |
| 51.254.220.20 | attackbots | Nov 4 05:53:33 SilenceServices sshd[16647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.220.20 Nov 4 05:53:35 SilenceServices sshd[16647]: Failed password for invalid user as3662202 from 51.254.220.20 port 32825 ssh2 Nov 4 05:57:17 SilenceServices sshd[17679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.220.20 |
2019-11-04 13:13:13 |