City: unknown
Region: unknown
Country: Netherlands
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 194.242.45.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3402
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;194.242.45.56. IN A
;; AUTHORITY SECTION:
. 458 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 22:15:20 CST 2022
;; MSG SIZE rcvd: 106Host 56.45.242.194.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 56.45.242.194.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 194.183.168.3 | attackspam | [portscan] Port scan |
2019-09-14 09:39:38 |
| 178.32.105.63 | attack | Sep 13 23:48:00 ns3110291 sshd\[2865\]: Invalid user Password123x from 178.32.105.63 Sep 13 23:48:02 ns3110291 sshd\[2865\]: Failed password for invalid user Password123x from 178.32.105.63 port 34040 ssh2 Sep 13 23:51:56 ns3110291 sshd\[3104\]: Invalid user rolivasilva from 178.32.105.63 Sep 13 23:51:58 ns3110291 sshd\[3104\]: Failed password for invalid user rolivasilva from 178.32.105.63 port 53332 ssh2 Sep 13 23:55:47 ns3110291 sshd\[3341\]: Invalid user debora from 178.32.105.63 ... |
2019-09-14 09:20:59 |
| 111.202.151.13 | attack | Sep 14 01:57:31 lukav-desktop sshd\[16988\]: Invalid user hadoop from 111.202.151.13 Sep 14 01:57:31 lukav-desktop sshd\[16988\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.202.151.13 Sep 14 01:57:32 lukav-desktop sshd\[16988\]: Failed password for invalid user hadoop from 111.202.151.13 port 48926 ssh2 Sep 14 01:58:27 lukav-desktop sshd\[16990\]: Invalid user hadoop from 111.202.151.13 Sep 14 01:58:27 lukav-desktop sshd\[16990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.202.151.13 |
2019-09-14 09:56:51 |
| 198.12.149.33 | attack | WordPress wp-login brute force :: 198.12.149.33 0.060 BYPASS [14/Sep/2019:10:43:17 1000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 3989 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-09-14 09:24:20 |
| 187.109.210.148 | attackspambots | proto=tcp . spt=45430 . dpt=25 . (listed on Blocklist de Sep 13) (962) |
2019-09-14 09:28:47 |
| 116.196.94.108 | attack | Sep 13 20:36:43 aat-srv002 sshd[30799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.94.108 Sep 13 20:36:45 aat-srv002 sshd[30799]: Failed password for invalid user test from 116.196.94.108 port 43378 ssh2 Sep 13 20:39:13 aat-srv002 sshd[30858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.94.108 Sep 13 20:39:15 aat-srv002 sshd[30858]: Failed password for invalid user 123456 from 116.196.94.108 port 37348 ssh2 ... |
2019-09-14 09:50:44 |
| 160.119.141.196 | attackbotsspam | Sep 14 01:32:24 email sshd\[4478\]: Invalid user cumulus from 160.119.141.196 Sep 14 01:32:24 email sshd\[4478\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.119.141.196 Sep 14 01:32:26 email sshd\[4478\]: Failed password for invalid user cumulus from 160.119.141.196 port 50692 ssh2 Sep 14 01:32:55 email sshd\[4560\]: Invalid user si from 160.119.141.196 Sep 14 01:32:55 email sshd\[4560\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.119.141.196 ... |
2019-09-14 09:45:40 |
| 14.215.165.131 | attack | Sep 14 03:14:39 dedicated sshd[26901]: Invalid user nuucp from 14.215.165.131 port 36682 |
2019-09-14 09:32:16 |
| 103.83.118.2 | attackspambots | IMAP brute force ... |
2019-09-14 09:37:48 |
| 79.135.245.89 | attackbots | Sep 13 22:41:38 microserver sshd[45747]: Invalid user ts3 from 79.135.245.89 port 52432 Sep 13 22:41:38 microserver sshd[45747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.135.245.89 Sep 13 22:41:39 microserver sshd[45747]: Failed password for invalid user ts3 from 79.135.245.89 port 52432 ssh2 Sep 13 22:46:13 microserver sshd[46408]: Invalid user oracle from 79.135.245.89 port 41906 Sep 13 22:46:13 microserver sshd[46408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.135.245.89 Sep 13 22:59:49 microserver sshd[47966]: Invalid user smbuser from 79.135.245.89 port 38294 Sep 13 22:59:49 microserver sshd[47966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.135.245.89 Sep 13 22:59:52 microserver sshd[47966]: Failed password for invalid user smbuser from 79.135.245.89 port 38294 ssh2 Sep 13 23:04:25 microserver sshd[48656]: Invalid user admin from 79.135.245.89 port 55908 Sep |
2019-09-14 09:35:48 |
| 178.33.178.81 | attackbotsspam | xmlrpc attack |
2019-09-14 09:36:33 |
| 157.230.153.203 | attackspam | xmlrpc attack |
2019-09-14 09:26:16 |
| 123.108.35.186 | attackbotsspam | Sep 14 03:20:31 meumeu sshd[27229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.108.35.186 Sep 14 03:20:34 meumeu sshd[27229]: Failed password for invalid user dabdallxl from 123.108.35.186 port 39566 ssh2 Sep 14 03:25:08 meumeu sshd[27756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.108.35.186 ... |
2019-09-14 09:27:02 |
| 92.222.72.234 | attackbotsspam | Sep 13 11:48:36 kapalua sshd\[30158\]: Invalid user jtsai from 92.222.72.234 Sep 13 11:48:36 kapalua sshd\[30158\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=234.ip-92-222-72.eu Sep 13 11:48:38 kapalua sshd\[30158\]: Failed password for invalid user jtsai from 92.222.72.234 port 52464 ssh2 Sep 13 11:53:41 kapalua sshd\[30677\]: Invalid user test from 92.222.72.234 Sep 13 11:53:41 kapalua sshd\[30677\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=234.ip-92-222-72.eu |
2019-09-14 09:47:35 |
| 128.199.133.114 | attackbots | WordPress wp-login brute force :: 128.199.133.114 0.152 BYPASS [14/Sep/2019:07:15:49 1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-09-14 09:59:34 |