City: unknown
Region: unknown
Country: Netherlands (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.16.6.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55722
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;145.16.6.52. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 22:59:50 CST 2025
;; MSG SIZE rcvd: 104Host 52.6.16.145.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 52.6.16.145.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 2.191.33.136 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/2.191.33.136/ IR - 1H : (38) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IR NAME ASN : ASN12880 IP : 2.191.33.136 CIDR : 2.191.0.0/16 PREFIX COUNT : 276 UNIQUE IP COUNT : 1035264 ATTACKS DETECTED ASN12880 : 1H - 4 3H - 5 6H - 5 12H - 7 24H - 10 DateTime : 2019-10-27 04:55:36 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-27 13:53:44 |
| 75.183.130.158 | attackbotsspam | postfix (unknown user, SPF fail or relay access denied) |
2019-10-27 13:21:27 |
| 51.75.255.166 | attackbotsspam | Oct 27 06:00:01 dedicated sshd[3901]: Invalid user super from 51.75.255.166 port 48238 |
2019-10-27 13:09:54 |
| 190.129.173.157 | attack | Oct 27 06:37:02 sauna sshd[17761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.129.173.157 Oct 27 06:37:04 sauna sshd[17761]: Failed password for invalid user !QWE!@# from 190.129.173.157 port 19114 ssh2 ... |
2019-10-27 13:49:37 |
| 189.163.182.99 | attackspambots | Automatic report - Port Scan Attack |
2019-10-27 13:10:22 |
| 87.184.248.197 | attackspam | Oct 27 06:53:50 mout sshd[24567]: Invalid user mother from 87.184.248.197 port 49038 Oct 27 06:53:52 mout sshd[24567]: Failed password for invalid user mother from 87.184.248.197 port 49038 ssh2 Oct 27 06:53:52 mout sshd[24567]: Connection closed by 87.184.248.197 port 49038 [preauth] |
2019-10-27 14:01:07 |
| 73.22.54.40 | attack | Oct 27 04:56:58 localhost sshd\[14392\]: Invalid user pi from 73.22.54.40 port 50926 Oct 27 04:56:58 localhost sshd\[14391\]: Invalid user pi from 73.22.54.40 port 50916 Oct 27 04:56:58 localhost sshd\[14392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.22.54.40 |
2019-10-27 13:10:35 |
| 167.86.77.39 | attackbotsspam | xmlrpc attack |
2019-10-27 13:57:21 |
| 81.22.45.107 | attackspam | Oct 27 06:20:44 mc1 kernel: \[3439978.475644\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=63851 PROTO=TCP SPT=46683 DPT=31158 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 27 06:22:40 mc1 kernel: \[3440094.497536\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=52720 PROTO=TCP SPT=46683 DPT=30977 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 27 06:23:37 mc1 kernel: \[3440152.080174\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=24778 PROTO=TCP SPT=46683 DPT=31488 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-27 13:51:24 |
| 188.239.112.86 | attack | port scan and connect, tcp 23 (telnet) |
2019-10-27 13:56:17 |
| 159.89.229.244 | attackspam | Oct 26 19:29:02 hpm sshd\[3630\]: Invalid user mserver from 159.89.229.244 Oct 26 19:29:02 hpm sshd\[3630\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.229.244 Oct 26 19:29:03 hpm sshd\[3630\]: Failed password for invalid user mserver from 159.89.229.244 port 48330 ssh2 Oct 26 19:33:03 hpm sshd\[3938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.229.244 user=root Oct 26 19:33:05 hpm sshd\[3938\]: Failed password for root from 159.89.229.244 port 57486 ssh2 |
2019-10-27 13:47:45 |
| 80.211.116.102 | attack | Oct 27 07:39:20 server sshd\[18288\]: User root from 80.211.116.102 not allowed because listed in DenyUsers Oct 27 07:39:20 server sshd\[18288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.116.102 user=root Oct 27 07:39:22 server sshd\[18288\]: Failed password for invalid user root from 80.211.116.102 port 56972 ssh2 Oct 27 07:43:10 server sshd\[14318\]: User root from 80.211.116.102 not allowed because listed in DenyUsers Oct 27 07:43:10 server sshd\[14318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.116.102 user=root |
2019-10-27 13:53:02 |
| 49.88.112.72 | attackspam | 5x Failed Password |
2019-10-27 13:10:53 |
| 185.176.27.254 | attack | 10/27/2019-01:40:01.857617 185.176.27.254 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-10-27 13:40:46 |
| 222.186.180.9 | attackbots | Oct 27 01:16:15 TORMINT sshd\[14140\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.9 user=root Oct 27 01:16:17 TORMINT sshd\[14140\]: Failed password for root from 222.186.180.9 port 52390 ssh2 Oct 27 01:16:30 TORMINT sshd\[14140\]: Failed password for root from 222.186.180.9 port 52390 ssh2 ... |
2019-10-27 13:25:08 |