City: unknown
Region: unknown
Country: Netherlands (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.54.194.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8813
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.54.194.72. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012700 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 23:59:16 CST 2025
;; MSG SIZE rcvd: 105Host 72.194.54.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 72.194.54.20.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 164.132.104.58 | attack | SSH Brute Force, server-1 sshd[27381]: Failed password for invalid user office from 164.132.104.58 port 59628 ssh2 |
2019-07-05 14:02:02 |
| 190.133.161.3 | attack | 2019-07-04 22:50:55 unexpected disconnection while reading SMTP command from r190-133-161-3.dialup.adsl.anteldata.net.uy [190.133.161.3]:8410 I=[10.100.18.21]:25 (error: Connection reset by peer) 2019-07-04 22:51:24 unexpected disconnection while reading SMTP command from r190-133-161-3.dialup.adsl.anteldata.net.uy [190.133.161.3]:54803 I=[10.100.18.21]:25 (error: Connection reset by peer) 2019-07-05 00:21:34 unexpected disconnection while reading SMTP command from r190-133-161-3.dialup.adsl.anteldata.net.uy [190.133.161.3]:24308 I=[10.100.18.21]:25 (error: Connection reset by peer) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=190.133.161.3 |
2019-07-05 14:10:52 |
| 181.48.244.217 | attack | DATE:2019-07-05_00:44:18, IP:181.48.244.217, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-07-05 14:09:44 |
| 190.242.25.147 | attackspambots | 2019-07-05 00:21:24 unexpected disconnection while reading SMTP command from ([190.242.25.147]) [190.242.25.147]:63735 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-07-05 00:21:42 unexpected disconnection while reading SMTP command from ([190.242.25.147]) [190.242.25.147]:14562 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-07-05 00:21:48 unexpected disconnection while reading SMTP command from ([190.242.25.147]) [190.242.25.147]:8910 I=[10.100.18.23]:25 (error: Connection reset by peer) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=190.242.25.147 |
2019-07-05 14:12:08 |
| 185.244.25.106 | attack | DATE:2019-07-05_03:56:56, IP:185.244.25.106, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-07-05 13:59:40 |
| 112.85.42.177 | attackspambots | 2019-06-14T08:00:16.689968wiz-ks3 sshd[23788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.177 user=root 2019-06-14T08:00:18.911778wiz-ks3 sshd[23788]: Failed password for root from 112.85.42.177 port 58199 ssh2 2019-06-14T08:00:21.112400wiz-ks3 sshd[23788]: Failed password for root from 112.85.42.177 port 58199 ssh2 2019-06-14T08:00:16.689968wiz-ks3 sshd[23788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.177 user=root 2019-06-14T08:00:18.911778wiz-ks3 sshd[23788]: Failed password for root from 112.85.42.177 port 58199 ssh2 2019-06-14T08:00:21.112400wiz-ks3 sshd[23788]: Failed password for root from 112.85.42.177 port 58199 ssh2 2019-06-14T08:00:16.689968wiz-ks3 sshd[23788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.177 user=root 2019-06-14T08:00:18.911778wiz-ks3 sshd[23788]: Failed password for root from 112.85.42.177 port 58199 ssh2 2019-06-1 |
2019-07-05 13:51:14 |
| 217.112.128.144 | attack | Postfix DNSBL listed. Trying to send SPAM. |
2019-07-05 14:04:10 |
| 177.228.104.251 | attackspam | 2019-07-05 00:22:20 unexpected disconnection while reading SMTP command from (customer-CLN-104-251.megared.net.mx) [177.228.104.251]:49462 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-07-05 00:23:28 unexpected disconnection while reading SMTP command from (customer-CLN-104-251.megared.net.mx) [177.228.104.251]:21597 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-07-05 00:23:37 unexpected disconnection while reading SMTP command from (customer-CLN-104-251.megared.net.mx) [177.228.104.251]:43879 I=[10.100.18.23]:25 (error: Connection reset by peer) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=177.228.104.251 |
2019-07-05 14:19:04 |
| 85.209.0.11 | attackspambots | Port scan on 3 port(s): 12817 26912 53201 |
2019-07-05 14:12:29 |
| 197.2.180.176 | attack | 2019-07-04 23:31:04 H=([197.2.180.176]) [197.2.180.176]:40400 I=[10.100.18.22]:25 F= |
2019-07-05 14:16:32 |
| 103.89.88.142 | attackspam | SASL broute force |
2019-07-05 13:58:43 |
| 93.163.34.42 | attackbotsspam | RDP Bruteforce |
2019-07-05 13:50:37 |
| 125.185.220.13 | attackbotsspam | Automated report - ssh fail2ban: Jul 5 03:07:58 authentication failure Jul 5 03:08:00 wrong password, user=ts3server, port=59494, ssh2 Jul 5 03:40:10 authentication failure |
2019-07-05 14:08:56 |
| 186.219.25.38 | attack | ssh failed login |
2019-07-05 13:49:09 |
| 109.120.199.117 | attackspam | NAME : RedWater-pppoe CIDR : 109.120.199.0/24 DDoS attack Bulgaria - block certain countries :) IP: 109.120.199.117 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-07-05 13:37:23 |