City: Helsingborg
Region: Skåne County
Country: Sweden
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 161.54.129.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14756
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;161.54.129.137. IN A
;; AUTHORITY SECTION:
. 580 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022051300 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 13 17:08:01 CST 2022
;; MSG SIZE rcvd: 107Host 137.129.54.161.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 137.129.54.161.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.182.210.228 | attack | 5.182.210.228 - - \[30/Nov/2019:09:12:48 +0100\] "POST /wp-login.php HTTP/1.0" 200 7656 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 5.182.210.228 - - \[30/Nov/2019:09:12:49 +0100\] "POST /wp-login.php HTTP/1.0" 200 7486 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 5.182.210.228 - - \[30/Nov/2019:09:12:49 +0100\] "POST /wp-login.php HTTP/1.0" 200 7480 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-30 19:04:27 |
| 178.62.102.177 | attackspam | Nov 30 11:53:03 pornomens sshd\[28503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.102.177 user=www-data Nov 30 11:53:05 pornomens sshd\[28503\]: Failed password for www-data from 178.62.102.177 port 41374 ssh2 Nov 30 11:56:09 pornomens sshd\[28531\]: Invalid user mysql from 178.62.102.177 port 59245 Nov 30 11:56:09 pornomens sshd\[28531\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.102.177 ... |
2019-11-30 19:18:10 |
| 81.215.212.148 | attack | Unauthorised access (Nov 30) SRC=81.215.212.148 LEN=52 TTL=112 ID=19304 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Nov 30) SRC=81.215.212.148 LEN=52 TTL=114 ID=5020 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Nov 30) SRC=81.215.212.148 LEN=52 TTL=114 ID=27605 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-30 19:14:10 |
| 54.39.138.246 | attackbotsspam | Nov 29 21:04:55 web9 sshd\[3213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.138.246 user=root Nov 29 21:04:57 web9 sshd\[3213\]: Failed password for root from 54.39.138.246 port 60778 ssh2 Nov 29 21:07:57 web9 sshd\[3673\]: Invalid user test from 54.39.138.246 Nov 29 21:07:57 web9 sshd\[3673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.138.246 Nov 29 21:07:59 web9 sshd\[3673\]: Failed password for invalid user test from 54.39.138.246 port 39576 ssh2 |
2019-11-30 19:22:54 |
| 78.189.141.181 | attack | Unauthorised access (Nov 30) SRC=78.189.141.181 LEN=52 TTL=114 ID=3813 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Nov 30) SRC=78.189.141.181 LEN=52 TTL=116 ID=19425 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-30 19:32:36 |
| 88.246.2.148 | attackbotsspam | Automatic report - Banned IP Access |
2019-11-30 19:16:46 |
| 79.137.75.5 | attackspambots | 2019-11-30T07:43:39.003314scmdmz1 sshd\[15008\]: Invalid user webmail from 79.137.75.5 port 45894 2019-11-30T07:43:39.007339scmdmz1 sshd\[15008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.ip-79-137-75.eu 2019-11-30T07:43:40.691968scmdmz1 sshd\[15008\]: Failed password for invalid user webmail from 79.137.75.5 port 45894 ssh2 ... |
2019-11-30 19:30:08 |
| 5.188.210.22 | attackbots | Unauthorized access detected from banned ip |
2019-11-30 19:15:50 |
| 103.231.70.170 | attackbotsspam | Nov 17 11:14:41 meumeu sshd[11877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.70.170 Nov 17 11:14:43 meumeu sshd[11877]: Failed password for invalid user karlsson from 103.231.70.170 port 47654 ssh2 Nov 17 11:19:10 meumeu sshd[12392]: Failed password for root from 103.231.70.170 port 54402 ssh2 ... |
2019-11-30 18:58:10 |
| 123.206.69.81 | attackbots | 2019-11-30T11:13:39.149514abusebot-5.cloudsearch.cf sshd\[7325\]: Invalid user laubscher from 123.206.69.81 port 58837 |
2019-11-30 19:31:29 |
| 194.61.26.34 | attack | 2019-11-29 UTC: 5x - |
2019-11-30 19:05:26 |
| 35.189.29.42 | attackbotsspam | Automatic report - XMLRPC Attack |
2019-11-30 19:21:31 |
| 75.82.36.220 | attackspam | Automatic report - Port Scan Attack |
2019-11-30 19:05:57 |
| 159.203.141.208 | attackbotsspam | 2019-11-30T04:37:27.4132731495-001 sshd\[4485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.141.208 user=root 2019-11-30T04:37:29.9319761495-001 sshd\[4485\]: Failed password for root from 159.203.141.208 port 52012 ssh2 2019-11-30T04:47:01.2158621495-001 sshd\[4819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.141.208 user=root 2019-11-30T04:47:03.5339271495-001 sshd\[4819\]: Failed password for root from 159.203.141.208 port 42588 ssh2 2019-11-30T04:49:43.7975621495-001 sshd\[4930\]: Invalid user dev from 159.203.141.208 port 48596 2019-11-30T04:49:43.8010841495-001 sshd\[4930\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.141.208 ... |
2019-11-30 19:00:03 |
| 46.105.244.17 | attack | Automatic report - Banned IP Access |
2019-11-30 19:12:33 |