City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.166.154.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64415
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.166.154.48. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020300 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 03 17:58:19 CST 2025
;; MSG SIZE rcvd: 107b'Host 48.154.166.134.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 134.166.154.48.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 123.108.35.186 | attackspam | $f2bV_matches |
2019-06-23 23:36:26 |
| 162.243.149.130 | attackbots | 27357/tcp 59911/tcp 41498/tcp... [2019-04-22/06-23]64pkt,50pt.(tcp),3pt.(udp) |
2019-06-24 00:09:31 |
| 198.108.67.101 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-06-24 00:19:10 |
| 167.99.196.172 | attackspambots | 167.99.196.172 - - \[23/Jun/2019:11:52:37 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 167.99.196.172 - - \[23/Jun/2019:11:52:42 +0200\] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 167.99.196.172 - - \[23/Jun/2019:11:52:47 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 167.99.196.172 - - \[23/Jun/2019:11:52:48 +0200\] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 167.99.196.172 - - \[23/Jun/2019:11:52:48 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 167.99.196.172 - - \[23/Jun/2019:11:52:49 +0200\] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:6 |
2019-06-24 00:08:54 |
| 192.241.226.241 | attackbotsspam | 23.06.2019 15:47:54 Connection to port 17185 blocked by firewall |
2019-06-24 00:04:43 |
| 92.63.194.115 | attackspambots | 23.06.2019 16:15:54 Connection to port 27369 blocked by firewall |
2019-06-24 00:27:20 |
| 87.241.162.56 | attackbots | " " |
2019-06-24 00:24:59 |
| 91.236.116.253 | attackbotsspam | TCP port 445 (SMB) attempt blocked by firewall. [2019-06-23 11:51:53] |
2019-06-24 00:06:03 |
| 50.31.8.186 | attackspam | NAME : STEADFAST-6 CIDR : 50.31.0.0/17 | STATUS : 200 ROBOT {Looking for resource vulnerabilities} DDoS Attack USA - Illinois - block certain countries :) IP: 50.31.8.186 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-06-23 23:40:59 |
| 213.228.143.2 | attackspam | Jun 23 17:25:29 giegler sshd[10999]: Invalid user su from 213.228.143.2 port 17473 Jun 23 17:25:31 giegler sshd[10999]: Failed password for invalid user su from 213.228.143.2 port 17473 ssh2 Jun 23 17:25:29 giegler sshd[10999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.228.143.2 Jun 23 17:25:29 giegler sshd[10999]: Invalid user su from 213.228.143.2 port 17473 Jun 23 17:25:31 giegler sshd[10999]: Failed password for invalid user su from 213.228.143.2 port 17473 ssh2 |
2019-06-23 23:31:33 |
| 186.223.229.247 | attackspam | SSH/22 MH Probe, BF, Hack - |
2019-06-24 00:17:10 |
| 213.32.12.3 | attackbotsspam | ssh failed login |
2019-06-23 23:32:05 |
| 62.133.58.66 | attack | Jun 23 18:00:39 mail postfix/smtpd\[31481\]: warning: unknown\[62.133.58.66\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 23 18:02:55 mail postfix/smtpd\[31486\]: warning: unknown\[62.133.58.66\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 23 18:06:51 mail postfix/smtpd\[31057\]: warning: unknown\[62.133.58.66\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-06-24 00:16:00 |
| 193.112.48.249 | attackbotsspam | xmlrpc attack |
2019-06-24 00:27:59 |
| 177.40.158.255 | attackbotsspam | TCP port 445 (SMB) attempt blocked by firewall. [2019-06-23 11:52:27] |
2019-06-23 23:55:49 |