City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 153.52.94.97
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53413
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;153.52.94.97. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013100 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 23:02:57 CST 2025
;; MSG SIZE rcvd: 105Host 97.94.52.153.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 97.94.52.153.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 54.39.151.64 | attackbotsspam | Aug 1 13:48:47 propaganda sshd[22808]: Connection from 54.39.151.64 port 44394 on 10.0.0.160 port 22 rdomain "" Aug 1 13:48:47 propaganda sshd[22808]: Connection closed by 54.39.151.64 port 44394 [preauth] |
2020-08-02 05:31:19 |
| 219.135.179.220 | attack | 20 attempts against mh-ssh on pole |
2020-08-02 05:18:09 |
| 141.98.80.55 | attackbots | Aug 1 22:07:19 mail.srvfarm.net postfix/smtpd[1163185]: warning: unknown[141.98.80.55]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 1 22:07:19 mail.srvfarm.net postfix/smtpd[1163190]: warning: unknown[141.98.80.55]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 1 22:07:19 mail.srvfarm.net postfix/smtpd[1163185]: lost connection after AUTH from unknown[141.98.80.55] Aug 1 22:07:19 mail.srvfarm.net postfix/smtpd[1163190]: lost connection after AUTH from unknown[141.98.80.55] Aug 1 22:07:24 mail.srvfarm.net postfix/smtpd[1159965]: lost connection after AUTH from unknown[141.98.80.55] Aug 1 22:07:24 mail.srvfarm.net postfix/smtpd[1163194]: lost connection after AUTH from unknown[141.98.80.55] |
2020-08-02 05:42:35 |
| 51.68.174.34 | attack | Malicious brute force vulnerability hacking attacks |
2020-08-02 05:28:59 |
| 218.92.0.247 | attackbots | Aug 1 23:25:52 melroy-server sshd[7782]: Failed password for root from 218.92.0.247 port 49929 ssh2 Aug 1 23:25:57 melroy-server sshd[7782]: Failed password for root from 218.92.0.247 port 49929 ssh2 ... |
2020-08-02 05:30:58 |
| 190.155.106.74 | attackspam | $f2bV_matches |
2020-08-02 05:38:48 |
| 222.186.175.151 | attackspambots | Aug 1 23:33:17 vps sshd[813749]: Failed password for root from 222.186.175.151 port 5396 ssh2 Aug 1 23:33:20 vps sshd[813749]: Failed password for root from 222.186.175.151 port 5396 ssh2 Aug 1 23:33:23 vps sshd[813749]: Failed password for root from 222.186.175.151 port 5396 ssh2 Aug 1 23:33:26 vps sshd[813749]: Failed password for root from 222.186.175.151 port 5396 ssh2 Aug 1 23:33:29 vps sshd[813749]: Failed password for root from 222.186.175.151 port 5396 ssh2 ... |
2020-08-02 05:36:21 |
| 218.158.116.252 | attack | Aug 1 13:20:47 mout sshd[21162]: Connection closed by authenticating user pi 218.158.116.252 port 35660 [preauth] Aug 1 22:48:41 mout sshd[1269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.158.116.252 user=pi Aug 1 22:48:43 mout sshd[1269]: Failed password for pi from 218.158.116.252 port 35420 ssh2 |
2020-08-02 05:32:33 |
| 103.232.120.109 | attackbotsspam | SSH Brute-Force attacks |
2020-08-02 05:16:47 |
| 79.137.39.102 | attackbotsspam | 2020/08/01 22:46:27 [error] 29205#29205: *3530096 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 79.137.39.102, server: _, request: "GET /wp-login.php HTTP/1.1", host: "freifunk-wermelskirchen.de" 2020/08/01 22:46:27 [error] 29205#29205: *3530097 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 79.137.39.102, server: _, request: "POST /wp-login.php HTTP/1.1", host: "freifunk-wermelskirchen.de" |
2020-08-02 05:39:49 |
| 45.84.196.4 | attackspambots | Aug 1 22:15:52 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=45.84.196.4 DST=79.143.186.54 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=28340 PROTO=TCP SPT=53520 DPT=992 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 1 22:29:03 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=45.84.196.4 DST=79.143.186.54 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=45462 PROTO=TCP SPT=53520 DPT=23 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 1 22:48:42 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=45.84.196.4 DST=79.143.186.54 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=49394 PROTO=TCP SPT=53520 DPT=6443 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-08-02 05:34:01 |
| 222.186.15.158 | attackspam | $f2bV_matches |
2020-08-02 05:26:16 |
| 134.209.186.238 | attack | Hits on port : 18084 |
2020-08-02 05:16:00 |
| 62.112.11.86 | attackspambots | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-08-01T20:19:23Z and 2020-08-01T20:48:39Z |
2020-08-02 05:37:51 |
| 106.53.2.250 | attack | Port Scan detected! ... |
2020-08-02 05:07:13 |