City: unknown
Region: unknown
Country: Netherlands
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.213.16.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56175
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;145.213.16.55. IN A
;; AUTHORITY SECTION:
. 162 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023102600 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 27 00:45:57 CST 2023
;; MSG SIZE rcvd: 10655.16.213.145.in-addr.arpa domain name pointer 145.213.EARLY-REGISTRATION.of.SURFnet.invalid.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
55.16.213.145.in-addr.arpa name = 145.213.EARLY-REGISTRATION.of.SURFnet.invalid.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 74.141.89.35 | attackbotsspam | Nov 12 10:26:50 meumeu sshd[14956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.141.89.35 Nov 12 10:26:52 meumeu sshd[14956]: Failed password for invalid user 1234 from 74.141.89.35 port 20001 ssh2 Nov 12 10:31:53 meumeu sshd[15508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.141.89.35 ... |
2019-11-12 17:35:18 |
| 190.64.68.178 | attack | frenzy |
2019-11-12 17:30:45 |
| 195.189.71.78 | attackspambots | Unauthorised access (Nov 12) SRC=195.189.71.78 LEN=52 TTL=120 ID=9977 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-12 17:44:27 |
| 202.73.9.76 | attackspambots | SSH bruteforce |
2019-11-12 17:25:57 |
| 193.56.28.130 | attackbots | Nov 12 08:24:06 heicom postfix/smtpd\[26150\]: warning: unknown\[193.56.28.130\]: SASL LOGIN authentication failed: authentication failure Nov 12 08:24:06 heicom postfix/smtpd\[26150\]: warning: unknown\[193.56.28.130\]: SASL LOGIN authentication failed: authentication failure Nov 12 08:24:07 heicom postfix/smtpd\[26150\]: warning: unknown\[193.56.28.130\]: SASL LOGIN authentication failed: authentication failure Nov 12 08:24:07 heicom postfix/smtpd\[26150\]: warning: unknown\[193.56.28.130\]: SASL LOGIN authentication failed: authentication failure Nov 12 08:24:07 heicom postfix/smtpd\[26150\]: warning: unknown\[193.56.28.130\]: SASL LOGIN authentication failed: authentication failure ... |
2019-11-12 17:46:21 |
| 159.89.154.19 | attack | Nov 12 07:32:12 localhost sshd\[26762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.154.19 user=nobody Nov 12 07:32:14 localhost sshd\[26762\]: Failed password for nobody from 159.89.154.19 port 49380 ssh2 Nov 12 07:35:57 localhost sshd\[26844\]: Invalid user mailsyndq from 159.89.154.19 port 57238 Nov 12 07:35:57 localhost sshd\[26844\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.154.19 Nov 12 07:35:58 localhost sshd\[26844\]: Failed password for invalid user mailsyndq from 159.89.154.19 port 57238 ssh2 ... |
2019-11-12 17:26:11 |
| 27.184.81.17 | attackspam | Automatic report - Port Scan Attack |
2019-11-12 17:12:55 |
| 84.91.128.47 | attackspam | Nov 12 03:54:18 TORMINT sshd\[4865\]: Invalid user Losenord_111 from 84.91.128.47 Nov 12 03:54:18 TORMINT sshd\[4865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.91.128.47 Nov 12 03:54:20 TORMINT sshd\[4865\]: Failed password for invalid user Losenord_111 from 84.91.128.47 port 59404 ssh2 ... |
2019-11-12 17:37:45 |
| 181.114.140.2 | attack | Nov 12 07:22:41 pl3server sshd[11874]: Failed password for r.r from 181.114.140.2 port 58391 ssh2 Nov 12 07:22:43 pl3server sshd[11874]: Failed password for r.r from 181.114.140.2 port 58391 ssh2 Nov 12 07:22:46 pl3server sshd[11874]: Failed password for r.r from 181.114.140.2 port 58391 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=181.114.140.2 |
2019-11-12 17:34:06 |
| 146.66.244.246 | attackspam | Nov 11 21:29:07 sachi sshd\[3250\]: Invalid user test from 146.66.244.246 Nov 11 21:29:07 sachi sshd\[3250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.66.244.246 Nov 11 21:29:09 sachi sshd\[3250\]: Failed password for invalid user test from 146.66.244.246 port 41264 ssh2 Nov 11 21:33:18 sachi sshd\[3565\]: Invalid user dbus from 146.66.244.246 Nov 11 21:33:18 sachi sshd\[3565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.66.244.246 |
2019-11-12 17:47:26 |
| 149.56.16.168 | attackspambots | Nov 11 22:47:06 php1 sshd\[5612\]: Invalid user thora from 149.56.16.168 Nov 11 22:47:06 php1 sshd\[5612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.16.168 Nov 11 22:47:08 php1 sshd\[5612\]: Failed password for invalid user thora from 149.56.16.168 port 36764 ssh2 Nov 11 22:50:49 php1 sshd\[5953\]: Invalid user roelofs from 149.56.16.168 Nov 11 22:50:49 php1 sshd\[5953\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.16.168 |
2019-11-12 17:40:23 |
| 193.70.124.5 | attack | SCHUETZENMUSIKANTEN.DE 193.70.124.5 \[12/Nov/2019:07:28:53 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4285 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/60.0.3112.113 Safari/537.36" schuetzenmusikanten.de 193.70.124.5 \[12/Nov/2019:07:28:53 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4285 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/60.0.3112.113 Safari/537.36" |
2019-11-12 17:16:36 |
| 114.67.79.2 | attack | Nov 12 08:26:39 dedicated sshd[900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.79.2 user=root Nov 12 08:26:41 dedicated sshd[900]: Failed password for root from 114.67.79.2 port 43826 ssh2 |
2019-11-12 17:47:09 |
| 212.152.35.78 | attackbotsspam | SSH Brute-Force reported by Fail2Ban |
2019-11-12 17:43:51 |
| 103.236.201.174 | attackspam | 103.236.201.174 - - [12/Nov/2019:08:30:22 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.236.201.174 - - [12/Nov/2019:08:31:05 +0100] "POST /wp-login.php HTTP/1.1" 200 1239 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.236.201.174 - - [12/Nov/2019:08:31:12 +0100] "POST /wp-login.php HTTP/1.1" 200 1239 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.236.201.174 - - [12/Nov/2019:08:31:17 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.236.201.174 - - [12/Nov/2019:08:31:34 +0100] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.236.201.174 - - [12/Nov/2019:08:32:14 +0100] "POST /wp-login.php HTTP/1.1" 200 1239 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-11-12 17:16:04 |