City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.161.66.69
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63062
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.161.66.69. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025030101 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 02 07:42:13 CST 2025
;; MSG SIZE rcvd: 104Host 69.66.161.2.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 69.66.161.2.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 37.204.71.152 | attackbotsspam | Invalid user admin from 37.204.71.152 port 34940 |
2019-10-21 02:04:48 |
| 46.101.81.143 | attackbots | 2019-10-20T17:09:58.168682abusebot-6.cloudsearch.cf sshd\[6300\]: Invalid user aarstad from 46.101.81.143 port 58308 |
2019-10-21 01:47:52 |
| 5.39.79.48 | attackbotsspam | Invalid user User from 5.39.79.48 port 48796 |
2019-10-21 02:06:14 |
| 83.142.52.229 | attack | 83.142.52.229 - - [20/Oct/2019:07:59:46 -0400] "GET /?page=../../etc/passwd%00&action=view&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 16393 "https://newportbrassfaucets.com/?page=../../etc/passwd%00&action=view&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" 83.142.52.229 - - [20/Oct/2019:07:59:47 -0400] "GET /?page=..%2f..%2fetc%2fpasswd%00&action=view&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 16398 "https://newportbrassfaucets.com/?page=..%2f..%2fetc%2fpasswd%00&action=view&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ... |
2019-10-21 01:21:06 |
| 185.40.12.39 | attack | slow and persistent scanner |
2019-10-21 01:23:17 |
| 218.94.143.226 | attackspam | Oct 20 11:59:37 anodpoucpklekan sshd[100280]: Invalid user ubuntu from 218.94.143.226 port 37751 Oct 20 11:59:39 anodpoucpklekan sshd[100280]: Failed password for invalid user ubuntu from 218.94.143.226 port 37751 ssh2 ... |
2019-10-21 01:26:22 |
| 209.141.34.95 | attackspam | www.familiengesundheitszentrum-fulda.de 209.141.34.95 \[20/Oct/2019:18:22:19 +0200\] "POST /xmlrpc.php HTTP/1.0" 301 537 "-" "Mozilla/5.0 \(iPad\; CPU OS 11_4_1 like Mac OS X\) AppleWebKit/605.1.15 \(KHTML, like Gecko\) Version/11.0 Mobile/15E148 Safari/604.1" familiengesundheitszentrum-fulda.de 209.141.34.95 \[20/Oct/2019:18:22:22 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 3777 "-" "Mozilla/5.0 \(iPad\; CPU OS 11_4_1 like Mac OS X\) AppleWebKit/605.1.15 \(KHTML, like Gecko\) Version/11.0 Mobile/15E148 Safari/604.1" |
2019-10-21 02:07:33 |
| 197.53.123.105 | attack | Invalid user admin from 197.53.123.105 port 60161 |
2019-10-21 01:41:00 |
| 83.142.55.249 | attack | 83.142.55.249 - - [20/Oct/2019:07:59:29 -0400] "GET /?page=../../etc/passwd&action=view&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 16391 "https://newportbrassfaucets.com/?page=../../etc/passwd&action=view&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ... |
2019-10-21 01:28:48 |
| 61.177.172.158 | attack | 2019-10-20T17:01:43.876429hub.schaetter.us sshd\[7587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.158 user=root 2019-10-20T17:01:45.977859hub.schaetter.us sshd\[7587\]: Failed password for root from 61.177.172.158 port 19891 ssh2 2019-10-20T17:01:48.696497hub.schaetter.us sshd\[7587\]: Failed password for root from 61.177.172.158 port 19891 ssh2 2019-10-20T17:01:51.025330hub.schaetter.us sshd\[7587\]: Failed password for root from 61.177.172.158 port 19891 ssh2 2019-10-20T17:02:28.023908hub.schaetter.us sshd\[7604\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.158 user=root ... |
2019-10-21 01:28:20 |
| 219.94.95.83 | attackbotsspam | Oct 20 19:30:02 localhost sshd\[29574\]: Invalid user ubuntu from 219.94.95.83 Oct 20 19:30:02 localhost sshd\[29574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.94.95.83 Oct 20 19:30:04 localhost sshd\[29574\]: Failed password for invalid user ubuntu from 219.94.95.83 port 45040 ssh2 Oct 20 19:30:28 localhost sshd\[29728\]: Invalid user zhou from 219.94.95.83 Oct 20 19:30:28 localhost sshd\[29728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.94.95.83 ... |
2019-10-21 01:40:08 |
| 27.79.136.45 | attackbotsspam | Invalid user admin from 27.79.136.45 port 45642 |
2019-10-21 01:48:59 |
| 139.217.131.52 | attackspam | Invalid user test from 139.217.131.52 port 1152 |
2019-10-21 01:57:05 |
| 108.36.110.110 | attackbotsspam | Oct 20 13:16:04 xtremcommunity sshd\[713840\]: Invalid user webmail from 108.36.110.110 port 35138 Oct 20 13:16:04 xtremcommunity sshd\[713840\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.36.110.110 Oct 20 13:16:06 xtremcommunity sshd\[713840\]: Failed password for invalid user webmail from 108.36.110.110 port 35138 ssh2 Oct 20 13:22:51 xtremcommunity sshd\[713958\]: Invalid user sunshine from 108.36.110.110 port 45608 Oct 20 13:22:51 xtremcommunity sshd\[713958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.36.110.110 ... |
2019-10-21 01:26:34 |
| 103.212.235.182 | attack | Invalid user assurento from 103.212.235.182 port 45484 |
2019-10-21 02:00:35 |