City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 19.253.133.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54203
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;19.253.133.27. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 23 01:23:58 CST 2025
;; MSG SIZE rcvd: 106Host 27.133.253.19.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 27.133.253.19.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 182.122.21.45 | attack | Lines containing failures of 182.122.21.45 Sep 7 18:44:58 nxxxxxxx sshd[26884]: Invalid user fadmin from 182.122.21.45 port 27234 Sep 7 18:44:58 nxxxxxxx sshd[26884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.122.21.45 Sep 7 18:45:00 nxxxxxxx sshd[26884]: Failed password for invalid user fadmin from 182.122.21.45 port 27234 ssh2 Sep 7 18:45:00 nxxxxxxx sshd[26884]: Received disconnect from 182.122.21.45 port 27234:11: Bye Bye [preauth] Sep 7 18:45:00 nxxxxxxx sshd[26884]: Disconnected from invalid user fadmin 182.122.21.45 port 27234 [preauth] Sep 7 18:59:23 nxxxxxxx sshd[28997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.122.21.45 user=r.r Sep 7 18:59:25 nxxxxxxx sshd[28997]: Failed password for r.r from 182.122.21.45 port 35900 ssh2 Sep 7 18:59:26 nxxxxxxx sshd[28997]: Received disconnect from 182.122.21.45 port 35900:11: Bye Bye [preauth] Sep 7 18:59:26 nxxxxxx........ ------------------------------ |
2020-09-09 03:03:10 |
| 151.26.58.160 | attackspam | port 23 |
2020-09-09 03:04:14 |
| 185.66.233.61 | attack | 2020/08/31 18:19:56 [error] 8814#8814: *3464175 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 185.66.233.61, server: _, request: "GET /wp-login.php HTTP/1.1", host: "1-2-dsl.net" 2020/08/31 18:27:25 [error] 8814#8814: *3465830 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 185.66.233.61, server: _, request: "GET /wp-login.php HTTP/1.1", host: "freifunk-remscheid.de" |
2020-09-09 03:26:21 |
| 103.145.12.14 | attack | 103.145.12.14 was recorded 12 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 12, 49, 1025 |
2020-09-09 02:57:18 |
| 218.92.0.168 | attack | Sep 8 18:34:53 localhost sshd[97251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root Sep 8 18:34:55 localhost sshd[97251]: Failed password for root from 218.92.0.168 port 59884 ssh2 Sep 8 18:34:58 localhost sshd[97251]: Failed password for root from 218.92.0.168 port 59884 ssh2 Sep 8 18:34:53 localhost sshd[97251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root Sep 8 18:34:55 localhost sshd[97251]: Failed password for root from 218.92.0.168 port 59884 ssh2 Sep 8 18:34:58 localhost sshd[97251]: Failed password for root from 218.92.0.168 port 59884 ssh2 Sep 8 18:34:53 localhost sshd[97251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root Sep 8 18:34:55 localhost sshd[97251]: Failed password for root from 218.92.0.168 port 59884 ssh2 Sep 8 18:34:58 localhost sshd[97251]: Failed password fo ... |
2020-09-09 03:29:34 |
| 94.102.56.216 | attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 84 - port: 48128 proto: udp cat: Misc Attackbytes: 71 |
2020-09-09 03:05:14 |
| 85.11.154.212 | attackbots | 2020-09-07 18:47:14 1kFKIT-000078-MT SMTP connection from \(85-11-154-212.sofianet.net\) \[85.11.154.212\]:31416 I=\[193.107.88.166\]:25 closed by DROP in ACL 2020-09-07 18:47:22 1kFKIb-00007J-P1 SMTP connection from \(85-11-154-212.sofianet.net\) \[85.11.154.212\]:31526 I=\[193.107.88.166\]:25 closed by DROP in ACL 2020-09-07 18:47:26 1kFKIf-00007T-UU SMTP connection from \(85-11-154-212.sofianet.net\) \[85.11.154.212\]:31581 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2020-09-09 03:16:54 |
| 115.159.198.41 | attackspambots | Failed password for invalid user oracle from 115.159.198.41 port 60152 ssh2 |
2020-09-09 03:29:50 |
| 42.228.59.226 | attackbots | (smtpauth) Failed SMTP AUTH login from 42.228.59.226 (CN/China/hn.kd.ny.adsl): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-09-08 10:31:09 dovecot_login authenticator failed for (labordayinrosarito.com) [42.228.59.226]:36044: 535 Incorrect authentication data (set_id=nologin) 2020-09-08 10:31:36 dovecot_login authenticator failed for (labordayinrosarito.com) [42.228.59.226]:37728: 535 Incorrect authentication data (set_id=test@labordayinrosarito.com) 2020-09-08 10:32:09 dovecot_login authenticator failed for (labordayinrosarito.com) [42.228.59.226]:39818: 535 Incorrect authentication data (set_id=test) 2020-09-08 10:32:58 dovecot_login authenticator failed for (rosaritofunride.com) [42.228.59.226]:42746: 535 Incorrect authentication data (set_id=nologin) 2020-09-08 10:33:22 dovecot_login authenticator failed for (rosaritofunride.com) [42.228.59.226]:44358: 535 Incorrect authentication data (set_id=test@rosaritofunride.com) |
2020-09-09 03:06:26 |
| 51.222.14.28 | attack | SSH brute force |
2020-09-09 03:03:30 |
| 5.188.86.178 | attackspam | Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-09-08T18:53:04Z |
2020-09-09 02:58:06 |
| 218.255.86.106 | attackspam | firewall-block, port(s): 13083/tcp |
2020-09-09 03:27:32 |
| 178.62.18.9 | attackspambots | firewall-block, port(s): 11493/tcp |
2020-09-09 03:25:45 |
| 41.140.242.36 | attack | SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2020-09-09 03:11:57 |
| 86.247.118.135 | attackspam | Sep 8 15:07:17 vmd26974 sshd[14079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.247.118.135 Sep 8 15:07:19 vmd26974 sshd[14079]: Failed password for invalid user openelec from 86.247.118.135 port 51686 ssh2 ... |
2020-09-09 03:27:46 |