City: unknown
Region: unknown
Country: Netherlands (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.152.64.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57651
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;145.152.64.19. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022001 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 05:54:33 CST 2025
;; MSG SIZE rcvd: 10619.64.152.145.in-addr.arpa domain name pointer 145.152.EARLY-REGISTRATION.of.SURFnet.invalid.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
19.64.152.145.in-addr.arpa name = 145.152.EARLY-REGISTRATION.of.SURFnet.invalid.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 39.106.12.194 | attackspam |
|
2020-09-03 19:36:40 |
| 118.76.188.43 | attackspam | Unauthorised access (Sep 3) SRC=118.76.188.43 LEN=40 TTL=46 ID=55373 TCP DPT=8080 WINDOW=54094 SYN Unauthorised access (Sep 2) SRC=118.76.188.43 LEN=40 TTL=46 ID=57650 TCP DPT=8080 WINDOW=54094 SYN Unauthorised access (Sep 2) SRC=118.76.188.43 LEN=40 TTL=46 ID=15088 TCP DPT=8080 WINDOW=59479 SYN Unauthorised access (Sep 2) SRC=118.76.188.43 LEN=40 TTL=46 ID=25431 TCP DPT=8080 WINDOW=59479 SYN Unauthorised access (Sep 2) SRC=118.76.188.43 LEN=40 TTL=46 ID=2325 TCP DPT=8080 WINDOW=59479 SYN Unauthorised access (Sep 1) SRC=118.76.188.43 LEN=40 TTL=46 ID=61807 TCP DPT=8080 WINDOW=54094 SYN Unauthorised access (Aug 31) SRC=118.76.188.43 LEN=40 TTL=46 ID=30372 TCP DPT=8080 WINDOW=54094 SYN Unauthorised access (Aug 30) SRC=118.76.188.43 LEN=40 TTL=46 ID=60720 TCP DPT=8080 WINDOW=59479 SYN Unauthorised access (Aug 30) SRC=118.76.188.43 LEN=40 TTL=46 ID=54456 TCP DPT=8080 WINDOW=54094 SYN |
2020-09-03 19:41:26 |
| 165.227.101.226 | attackbots | $f2bV_matches |
2020-09-03 19:45:37 |
| 213.158.10.101 | attackbots | Sep 3 09:29:55 abendstille sshd\[25063\]: Invalid user svnuser from 213.158.10.101 Sep 3 09:29:55 abendstille sshd\[25063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.158.10.101 Sep 3 09:29:57 abendstille sshd\[25063\]: Failed password for invalid user svnuser from 213.158.10.101 port 56235 ssh2 Sep 3 09:33:48 abendstille sshd\[28993\]: Invalid user timemachine from 213.158.10.101 Sep 3 09:33:48 abendstille sshd\[28993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.158.10.101 ... |
2020-09-03 19:10:22 |
| 106.13.50.219 | attackspam | (sshd) Failed SSH login from 106.13.50.219 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 3 01:43:25 server sshd[13990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.50.219 user=root Sep 3 01:43:27 server sshd[13990]: Failed password for root from 106.13.50.219 port 49370 ssh2 Sep 3 02:00:52 server sshd[18563]: Invalid user guest from 106.13.50.219 port 50700 Sep 3 02:00:54 server sshd[18563]: Failed password for invalid user guest from 106.13.50.219 port 50700 ssh2 Sep 3 02:03:49 server sshd[19321]: Invalid user postgres from 106.13.50.219 port 56616 |
2020-09-03 19:25:41 |
| 122.52.48.92 | attackbotsspam | Invalid user oracle from 122.52.48.92 port 42685 |
2020-09-03 19:15:53 |
| 27.254.130.67 | attackspam | SSH Brute Force |
2020-09-03 19:23:13 |
| 218.92.0.247 | attack | Sep 3 13:33:25 marvibiene sshd[19228]: Failed password for root from 218.92.0.247 port 59196 ssh2 Sep 3 13:33:28 marvibiene sshd[19228]: Failed password for root from 218.92.0.247 port 59196 ssh2 Sep 3 13:33:32 marvibiene sshd[19228]: Failed password for root from 218.92.0.247 port 59196 ssh2 Sep 3 13:33:35 marvibiene sshd[19228]: Failed password for root from 218.92.0.247 port 59196 ssh2 |
2020-09-03 19:38:17 |
| 220.161.81.131 | attack | $f2bV_matches |
2020-09-03 19:26:31 |
| 46.161.27.150 | attackspambots | 2020-09-02 14:02:39 Reject access to port(s):3389 1 times a day |
2020-09-03 19:47:17 |
| 36.90.60.20 | attackspam |
|
2020-09-03 19:43:09 |
| 111.43.3.36 | attack |
|
2020-09-03 19:52:20 |
| 207.166.186.217 | attackspambots | 207.166.186.217 - - [03/Sep/2020:11:15:48 +0100] "POST /wp-login.php HTTP/1.1" 200 1836 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 207.166.186.217 - - [03/Sep/2020:11:15:49 +0100] "POST /wp-login.php HTTP/1.1" 200 1835 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 207.166.186.217 - - [03/Sep/2020:11:15:50 +0100] "POST /wp-login.php HTTP/1.1" 200 1809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-03 19:24:07 |
| 173.254.225.99 | attack | SP-Scan 48277:445 detected 2020.09.02 02:08:07 blocked until 2020.10.21 19:10:54 |
2020-09-03 19:39:39 |
| 178.19.182.43 | attack |
|
2020-09-03 19:44:44 |