City: unknown
Region: unknown
Country: Multicast Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 231.145.52.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 602
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;231.145.52.121. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022400 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 24 16:27:31 CST 2025
;; MSG SIZE rcvd: 107Host 121.52.145.231.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 121.52.145.231.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 82.214.118.6 | attack | diesunddas.net 82.214.118.6 \[04/Nov/2019:05:56:59 +0100\] "POST /wp-login.php HTTP/1.1" 200 9647 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" diesunddas.net 82.214.118.6 \[04/Nov/2019:05:57:01 +0100\] "POST /wp-login.php HTTP/1.1" 200 8408 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-04 13:25:09 |
| 117.220.228.2 | attack | Unauthorised access (Nov 4) SRC=117.220.228.2 LEN=52 PREC=0x20 TTL=111 ID=8431 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-04 13:29:18 |
| 206.189.52.160 | attack | 206.189.52.160 - - \[04/Nov/2019:04:56:46 +0000\] "POST /wp-login.php HTTP/1.1" 200 4358 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 206.189.52.160 - - \[04/Nov/2019:04:56:48 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-11-04 13:33:25 |
| 14.139.231.131 | attack | Nov 4 05:52:08 MainVPS sshd[3392]: Invalid user user from 14.139.231.131 port 57097 Nov 4 05:52:08 MainVPS sshd[3392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.231.131 Nov 4 05:52:08 MainVPS sshd[3392]: Invalid user user from 14.139.231.131 port 57097 Nov 4 05:52:10 MainVPS sshd[3392]: Failed password for invalid user user from 14.139.231.131 port 57097 ssh2 Nov 4 05:56:26 MainVPS sshd[3706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.231.131 user=root Nov 4 05:56:28 MainVPS sshd[3706]: Failed password for root from 14.139.231.131 port 43238 ssh2 ... |
2019-11-04 13:46:18 |
| 189.186.20.60 | attackbotsspam | Automatic report - Port Scan |
2019-11-04 13:35:56 |
| 61.172.238.14 | attackspam | Nov 4 05:52:02 MK-Soft-VM7 sshd[27978]: Failed password for root from 61.172.238.14 port 40684 ssh2 ... |
2019-11-04 13:40:46 |
| 65.75.93.36 | attack | Nov 4 00:21:45 TORMINT sshd\[20092\]: Invalid user ganja from 65.75.93.36 Nov 4 00:21:45 TORMINT sshd\[20092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.75.93.36 Nov 4 00:21:47 TORMINT sshd\[20092\]: Failed password for invalid user ganja from 65.75.93.36 port 47847 ssh2 ... |
2019-11-04 13:23:01 |
| 222.186.190.92 | attack | Oct 31 16:10:25 microserver sshd[23412]: Failed none for root from 222.186.190.92 port 24162 ssh2 Oct 31 16:10:27 microserver sshd[23412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92 user=root Oct 31 16:10:28 microserver sshd[23412]: Failed password for root from 222.186.190.92 port 24162 ssh2 Oct 31 16:10:33 microserver sshd[23412]: Failed password for root from 222.186.190.92 port 24162 ssh2 Oct 31 16:10:37 microserver sshd[23412]: Failed password for root from 222.186.190.92 port 24162 ssh2 Nov 1 20:28:03 microserver sshd[46894]: Failed none for root from 222.186.190.92 port 52704 ssh2 Nov 1 20:28:04 microserver sshd[46894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92 user=root Nov 1 20:28:06 microserver sshd[46894]: Failed password for root from 222.186.190.92 port 52704 ssh2 Nov 1 20:28:11 microserver sshd[46894]: Failed password for root from 222.186.190.92 port 52704 ssh2 Nov 1 2 |
2019-11-04 13:10:26 |
| 51.77.157.78 | attack | Nov 4 05:53:46 MK-Soft-VM6 sshd[19199]: Failed password for root from 51.77.157.78 port 33680 ssh2 ... |
2019-11-04 13:03:04 |
| 80.82.64.212 | attackspam | eintrachtkultkellerfulda.de 80.82.64.212 \[04/Nov/2019:06:11:25 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 578 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/74.0.3729.169 Safari/537.36" eintrachtkultkellerfulda.de 80.82.64.212 \[04/Nov/2019:06:11:25 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 578 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/74.0.3729.169 Safari/537.36" |
2019-11-04 13:30:16 |
| 116.31.115.251 | attack | Nov 3 19:29:20 php1 sshd\[31278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.31.115.251 user=root Nov 3 19:29:22 php1 sshd\[31278\]: Failed password for root from 116.31.115.251 port 44534 ssh2 Nov 3 19:34:11 php1 sshd\[31625\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.31.115.251 user=root Nov 3 19:34:13 php1 sshd\[31625\]: Failed password for root from 116.31.115.251 port 33681 ssh2 Nov 3 19:38:51 php1 sshd\[31989\]: Invalid user update from 116.31.115.251 Nov 3 19:38:51 php1 sshd\[31989\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.31.115.251 |
2019-11-04 13:42:23 |
| 122.192.33.102 | attackbotsspam | Nov 4 05:52:16 meumeu sshd[2105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.192.33.102 Nov 4 05:52:18 meumeu sshd[2105]: Failed password for invalid user 1203 from 122.192.33.102 port 54964 ssh2 Nov 4 05:57:26 meumeu sshd[2830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.192.33.102 ... |
2019-11-04 13:04:59 |
| 1.201.140.126 | attackbotsspam | Nov 4 08:53:36 microserver sshd[12045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.201.140.126 user=root Nov 4 08:53:38 microserver sshd[12045]: Failed password for root from 1.201.140.126 port 39743 ssh2 Nov 4 08:58:05 microserver sshd[12631]: Invalid user cent from 1.201.140.126 port 58697 Nov 4 08:58:05 microserver sshd[12631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.201.140.126 Nov 4 08:58:07 microserver sshd[12631]: Failed password for invalid user cent from 1.201.140.126 port 58697 ssh2 |
2019-11-04 13:07:09 |
| 62.234.91.113 | attackspambots | Nov 4 05:29:08 srv1 sshd[16914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.91.113 user=r.r Nov 4 05:29:11 srv1 sshd[16914]: Failed password for r.r from 62.234.91.113 port 59628 ssh2 Nov 4 05:35:38 srv1 sshd[16977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.91.113 user=r.r Nov 4 05:35:40 srv1 sshd[16977]: Failed password for r.r from 62.234.91.113 port 54070 ssh2 Nov 4 05:40:35 srv1 sshd[17028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.91.113 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=62.234.91.113 |
2019-11-04 13:38:09 |
| 103.209.20.36 | attackbotsspam | Nov 4 05:52:20 v22018076622670303 sshd\[32686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.209.20.36 user=root Nov 4 05:52:23 v22018076622670303 sshd\[32686\]: Failed password for root from 103.209.20.36 port 35714 ssh2 Nov 4 05:57:08 v22018076622670303 sshd\[32716\]: Invalid user info from 103.209.20.36 port 46216 Nov 4 05:57:08 v22018076622670303 sshd\[32716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.209.20.36 ... |
2019-11-04 13:18:19 |