City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 227.145.0.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57773
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;227.145.0.53. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 12:33:40 CST 2025
;; MSG SIZE rcvd: 105
Host 53.0.145.227.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 53.0.145.227.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 91.121.109.45 | attackbotsspam | Fail2Ban Ban Triggered |
2020-02-09 00:15:30 |
| 103.129.46.239 | attack | Spammer |
2020-02-08 23:59:06 |
| 45.143.220.4 | attackbotsspam | [2020-02-08 10:54:14] NOTICE[1148][C-000070dd] chan_sip.c: Call from '' (45.143.220.4:6458) to extension '0048323395006' rejected because extension not found in context 'public'. [2020-02-08 10:54:14] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-08T10:54:14.859-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="0048323395006",SessionID="0x7fd82c307128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.4/6458",ACLName="no_extension_match" [2020-02-08 11:00:36] NOTICE[1148][C-000070e1] chan_sip.c: Call from '' (45.143.220.4:6863) to extension '+48323395006' rejected because extension not found in context 'public'. [2020-02-08 11:00:36] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-08T11:00:36.520-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="+48323395006",SessionID="0x7fd82cfcf5b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.4/686 ... |
2020-02-09 00:16:02 |
| 129.211.125.143 | attackbotsspam | Feb 8 06:49:15 home sshd[10745]: Invalid user nqk from 129.211.125.143 port 49083 Feb 8 06:49:15 home sshd[10745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.125.143 Feb 8 06:49:15 home sshd[10745]: Invalid user nqk from 129.211.125.143 port 49083 Feb 8 06:49:16 home sshd[10745]: Failed password for invalid user nqk from 129.211.125.143 port 49083 ssh2 Feb 8 07:14:41 home sshd[10900]: Invalid user xpq from 129.211.125.143 port 35975 Feb 8 07:14:41 home sshd[10900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.125.143 Feb 8 07:14:41 home sshd[10900]: Invalid user xpq from 129.211.125.143 port 35975 Feb 8 07:14:43 home sshd[10900]: Failed password for invalid user xpq from 129.211.125.143 port 35975 ssh2 Feb 8 07:21:12 home sshd[10948]: Invalid user yzn from 129.211.125.143 port 50362 Feb 8 07:21:12 home sshd[10948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= r |
2020-02-09 00:10:30 |
| 119.29.170.170 | attackspam | Automatic report - Banned IP Access |
2020-02-09 00:11:30 |
| 50.115.181.98 | attack | Feb 8 06:04:20 auw2 sshd\[31818\]: Invalid user ax from 50.115.181.98 Feb 8 06:04:20 auw2 sshd\[31818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=d50-115-181-98.static.datacom.cgocable.net Feb 8 06:04:22 auw2 sshd\[31818\]: Failed password for invalid user ax from 50.115.181.98 port 11418 ssh2 Feb 8 06:05:43 auw2 sshd\[31939\]: Invalid user kyn from 50.115.181.98 Feb 8 06:05:43 auw2 sshd\[31939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=d50-115-181-98.static.datacom.cgocable.net |
2020-02-09 00:23:02 |
| 117.50.65.217 | attackbots | 2020-02-08T10:18:04.3807431495-001 sshd[10171]: Invalid user jog from 117.50.65.217 port 42100 2020-02-08T10:18:04.3839691495-001 sshd[10171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.65.217 2020-02-08T10:18:04.3807431495-001 sshd[10171]: Invalid user jog from 117.50.65.217 port 42100 2020-02-08T10:18:06.6104341495-001 sshd[10171]: Failed password for invalid user jog from 117.50.65.217 port 42100 ssh2 2020-02-08T10:20:13.4779271495-001 sshd[10247]: Invalid user bci from 117.50.65.217 port 56186 2020-02-08T10:20:13.4868161495-001 sshd[10247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.65.217 2020-02-08T10:20:13.4779271495-001 sshd[10247]: Invalid user bci from 117.50.65.217 port 56186 2020-02-08T10:20:15.7585691495-001 sshd[10247]: Failed password for invalid user bci from 117.50.65.217 port 56186 ssh2 2020-02-08T10:22:27.2748131495-001 sshd[10399]: Invalid user knq from 117.50.65. ... |
2020-02-09 00:32:52 |
| 95.163.209.254 | attackbots | $f2bV_matches_ltvn |
2020-02-09 00:38:19 |
| 92.107.252.176 | attack | Fail2Ban - HTTP Auth Bruteforce Attempt |
2020-02-09 00:24:51 |
| 94.102.49.112 | attackbotsspam | Feb 8 16:41:38 debian-2gb-nbg1-2 kernel: \[3435737.786499\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.49.112 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=53215 PROTO=TCP SPT=48702 DPT=30518 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-02-09 00:13:55 |
| 80.211.166.139 | attackspambots | Feb 8 17:17:32 markkoudstaal sshd[29981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.166.139 Feb 8 17:17:34 markkoudstaal sshd[29981]: Failed password for invalid user pvp from 80.211.166.139 port 49988 ssh2 Feb 8 17:19:58 markkoudstaal sshd[30459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.166.139 |
2020-02-09 00:21:32 |
| 200.57.88.111 | attackbots | Feb 4 14:36:10 dns-3 sshd[8926]: Invalid user info2 from 200.57.88.111 port 54514 Feb 4 14:36:10 dns-3 sshd[8926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.57.88.111 Feb 4 14:36:12 dns-3 sshd[8926]: Failed password for invalid user info2 from 200.57.88.111 port 54514 ssh2 Feb 4 14:36:13 dns-3 sshd[8926]: Received disconnect from 200.57.88.111 port 54514:11: Bye Bye [preauth] Feb 4 14:36:13 dns-3 sshd[8926]: Disconnected from invalid user info2 200.57.88.111 port 54514 [preauth] Feb 4 14:51:19 dns-3 sshd[9884]: User r.r from 200.57.88.111 not allowed because not listed in AllowUsers Feb 4 14:51:19 dns-3 sshd[9884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.57.88.111 user=r.r Feb 4 14:51:21 dns-3 sshd[9884]: Failed password for invalid user r.r from 200.57.88.111 port 52380 ssh2 Feb 4 14:51:22 dns-3 sshd[9884]: Received disconnect from 200.57.88.111 port 52380:1........ ------------------------------- |
2020-02-09 00:27:37 |
| 106.12.71.159 | attack | Feb 8 11:27:45 firewall sshd[22893]: Invalid user xyl from 106.12.71.159 Feb 8 11:27:47 firewall sshd[22893]: Failed password for invalid user xyl from 106.12.71.159 port 52126 ssh2 Feb 8 11:29:51 firewall sshd[23008]: Invalid user rhs from 106.12.71.159 ... |
2020-02-09 00:07:50 |
| 106.13.140.121 | attackspam | Feb 8 17:02:28 legacy sshd[20848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.140.121 Feb 8 17:02:30 legacy sshd[20848]: Failed password for invalid user gwm from 106.13.140.121 port 52908 ssh2 Feb 8 17:07:11 legacy sshd[21096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.140.121 ... |
2020-02-09 00:16:46 |
| 157.245.6.134 | attackbotsspam | Port scan: Attack repeated for 24 hours |
2020-02-09 00:15:07 |