City: unknown
Region: unknown
Country: Poland
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.50.100.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55394
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.50.100.243. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 16:01:36 CST 2025
;; MSG SIZE rcvd: 107Host 243.100.50.149.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 243.100.50.149.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 148.81.194.161 | attackbots | NAME : NASK-ACADEMIC CIDR : 148.81.192.0/22 | STATUS : 200 ROBOT {Looking for resource vulnerabilities} DDoS Attack Poland - block certain countries :) IP: 148.81.194.161 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-06-23 09:07:34 |
| 188.92.75.248 | attackspam | 2019-06-23T02:23:01.407833test01.cajus.name sshd\[1874\]: Invalid user 0 from 188.92.75.248 port 56474 2019-06-23T02:23:01.495283test01.cajus.name sshd\[1874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.92.75.248 2019-06-23T02:23:03.411923test01.cajus.name sshd\[1874\]: Failed password for invalid user 0 from 188.92.75.248 port 56474 ssh2 |
2019-06-23 08:50:21 |
| 114.141.104.45 | attack | Automatic report - Web App Attack |
2019-06-23 09:05:56 |
| 45.32.255.50 | attackspam | Dictionary attack on login resource. |
2019-06-23 09:10:33 |
| 45.61.247.214 | attackspam | Unauthorised access (Jun 23) SRC=45.61.247.214 LEN=40 TOS=0x14 TTL=241 ID=61325 TCP DPT=23 WINDOW=0 SYN Unauthorised access (Jun 22) SRC=45.61.247.214 LEN=40 TOS=0x14 TTL=241 ID=52768 TCP DPT=23 WINDOW=0 SYN |
2019-06-23 09:23:54 |
| 185.26.156.58 | attackbots | [munged]::443 185.26.156.58 - - [23/Jun/2019:02:21:16 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 185.26.156.58 - - [23/Jun/2019:02:21:18 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 185.26.156.58 - - [23/Jun/2019:02:21:18 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 185.26.156.58 - - [23/Jun/2019:02:21:20 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 185.26.156.58 - - [23/Jun/2019:02:21:20 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 185.26.156.58 - - [23/Jun/2019:02:21:22 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubun |
2019-06-23 09:15:20 |
| 188.166.92.10 | attackbotsspam | Jun 23 02:06:03 h2421860 postfix/postscreen[10388]: CONNECT from [188.166.92.10]:38406 to [85.214.119.52]:25 Jun 23 02:06:03 h2421860 postfix/dnsblog[10391]: addr 188.166.92.10 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jun 23 02:06:03 h2421860 postfix/dnsblog[10396]: addr 188.166.92.10 listed by domain zen.spamhaus.org as 127.0.0.4 Jun 23 02:06:03 h2421860 postfix/dnsblog[10396]: addr 188.166.92.10 listed by domain Unknown.trblspam.com as 185.53.179.7 Jun 23 02:06:03 h2421860 postfix/dnsblog[10392]: addr 188.166.92.10 listed by domain bl.spamcop.net as 127.0.0.2 Jun 23 02:06:03 h2421860 postfix/dnsblog[10393]: addr 188.166.92.10 listed by domain b.barracudacentral.org as 127.0.0.2 Jun 23 02:06:03 h2421860 postfix/dnsblog[10390]: addr 188.166.92.10 listed by domain dnsbl.sorbs.net as 127.0.0.6 Jun 23 02:06:09 h2421860 postfix/postscreen[10388]: DNSBL rank 9 for [188.166.92.10]:38406 Jun x@x Jun 23 02:06:09 h2421860 postfix/postscreen[10388]: HANGUP after 0.08 fro........ ------------------------------- |
2019-06-23 08:49:55 |
| 5.181.233.66 | attackspambots | Postfix DNSBL listed. Trying to send SPAM. |
2019-06-23 09:05:00 |
| 142.4.214.159 | attackspam | ENG,WP GET //test/wp-login.php |
2019-06-23 08:58:36 |
| 58.163.88.42 | attack | ports scanning |
2019-06-23 08:54:16 |
| 54.223.168.233 | attackspam | 2019-06-23T00:59:07.745233abusebot-4.cloudsearch.cf sshd\[3471\]: Invalid user db2inst1 from 54.223.168.233 port 42978 |
2019-06-23 09:22:52 |
| 210.14.77.102 | attack | Jun 23 01:37:47 mail sshd\[18672\]: Failed password for invalid user carlos1 from 210.14.77.102 port 10807 ssh2 Jun 23 01:53:13 mail sshd\[18995\]: Invalid user rsync from 210.14.77.102 port 36505 Jun 23 01:53:13 mail sshd\[18995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.14.77.102 ... |
2019-06-23 09:10:59 |
| 2a03:b0c0:1:d0::2329:f001 | attack | Dictionary attack on login resource. |
2019-06-23 08:36:17 |
| 118.24.172.23 | attack | SSHScan |
2019-06-23 08:58:59 |
| 185.111.99.229 | attack | Jun 23 00:13:34 xb3 sshd[15659]: Failed password for invalid user deployer from 185.111.99.229 port 60994 ssh2 Jun 23 00:13:34 xb3 sshd[15659]: Received disconnect from 185.111.99.229: 11: Bye Bye [preauth] Jun 23 00:15:23 xb3 sshd[4804]: Failed password for invalid user dc from 185.111.99.229 port 53470 ssh2 Jun 23 00:15:23 xb3 sshd[4804]: Received disconnect from 185.111.99.229: 11: Bye Bye [preauth] Jun 23 00:17:44 xb3 sshd[12631]: Failed password for invalid user kasia from 185.111.99.229 port 54306 ssh2 Jun 23 00:17:44 xb3 sshd[12631]: Received disconnect from 185.111.99.229: 11: Bye Bye [preauth] Jun 23 00:18:57 xb3 sshd[16223]: Failed password for invalid user yue from 185.111.99.229 port 40606 ssh2 Jun 23 00:18:57 xb3 sshd[16223]: Received disconnect from 185.111.99.229: 11: Bye Bye [preauth] Jun 23 00:21:24 xb3 sshd[9373]: Failed password for invalid user ts3 from 185.111.99.229 port 41440 ssh2 Jun 23 00:21:24 xb3 sshd[9373]: Received disconnect from 185.111.99........ ------------------------------- |
2019-06-23 08:40:12 |