City: unknown
Region: unknown
Country: unknown
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
bb'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 240e:380:b927:9d00::1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 8085
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;240e:380:b927:9d00::1. IN A
;; Query time: 0 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Fri Mar 14 19:19:39 CST 2025
;; MSG SIZE rcvd: 50
'Host 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.d.9.7.2.9.b.0.8.3.0.e.0.4.2.ip6.arpa not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.d.9.7.2.9.b.0.8.3.0.e.0.4.2.ip6.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 161.35.73.66 | attack | Invalid user postgres from 161.35.73.66 port 33964 |
2020-08-18 20:18:47 |
| 116.202.246.92 | attack | URL Probing: /wp-cron.php |
2020-08-18 19:47:37 |
| 195.154.55.102 | attack | 195.154.55.102 - - [18/Aug/2020:05:47:58 +0200] "GET /wp-login.php HTTP/1.1" 200 8775 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 195.154.55.102 - - [18/Aug/2020:05:47:59 +0200] "POST /wp-login.php HTTP/1.1" 200 9026 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 195.154.55.102 - - [18/Aug/2020:05:47:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-18 19:40:20 |
| 125.137.57.93 | attackbots | Automatic report - Port Scan Attack |
2020-08-18 19:40:44 |
| 104.211.167.49 | attack | 2020-08-18T11:40:04.140362mail.standpoint.com.ua sshd[28703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.167.49 2020-08-18T11:40:04.137294mail.standpoint.com.ua sshd[28703]: Invalid user kvm from 104.211.167.49 port 1024 2020-08-18T11:40:06.379010mail.standpoint.com.ua sshd[28703]: Failed password for invalid user kvm from 104.211.167.49 port 1024 ssh2 2020-08-18T11:44:58.753946mail.standpoint.com.ua sshd[29269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.167.49 user=root 2020-08-18T11:45:00.685451mail.standpoint.com.ua sshd[29269]: Failed password for root from 104.211.167.49 port 1024 ssh2 ... |
2020-08-18 19:45:17 |
| 37.120.206.82 | attackbots | scan |
2020-08-18 19:44:19 |
| 190.64.64.77 | attackbots | Aug 18 12:00:06 mailserver sshd\[32263\]: Invalid user admin10 from 190.64.64.77 ... |
2020-08-18 19:52:22 |
| 123.163.238.198 | attackspam | /phpmyadmin/ |
2020-08-18 19:37:10 |
| 149.56.102.43 | attack | Aug 18 11:03:17 fhem-rasp sshd[26185]: User lp from 149.56.102.43 not allowed because not listed in AllowUsers ... |
2020-08-18 19:59:41 |
| 49.77.182.249 | attackspam | 2020-08-18T12:30:30.946682v22018076590370373 sshd[19472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.77.182.249 user=root 2020-08-18T12:30:32.818371v22018076590370373 sshd[19472]: Failed password for root from 49.77.182.249 port 4424 ssh2 2020-08-18T12:33:29.620656v22018076590370373 sshd[7264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.77.182.249 user=root 2020-08-18T12:33:31.733170v22018076590370373 sshd[7264]: Failed password for root from 49.77.182.249 port 3535 ssh2 2020-08-18T12:52:08.196171v22018076590370373 sshd[2747]: Invalid user vserver from 49.77.182.249 port 1452 ... |
2020-08-18 20:04:22 |
| 145.239.82.11 | attackspam | Unauthorized SSH login attempts |
2020-08-18 19:38:44 |
| 103.84.237.74 | attackbotsspam | Aug 17 02:56:57 kunden sshd[23188]: Invalid user dev from 103.84.237.74 Aug 17 02:56:57 kunden sshd[23188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.84.237.74 Aug 17 02:56:59 kunden sshd[23188]: Failed password for invalid user dev from 103.84.237.74 port 53626 ssh2 Aug 17 02:56:59 kunden sshd[23188]: Received disconnect from 103.84.237.74: 11: Bye Bye [preauth] Aug 17 03:00:12 kunden sshd[26656]: Invalid user rio from 103.84.237.74 Aug 17 03:00:12 kunden sshd[26656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.84.237.74 Aug 17 03:00:14 kunden sshd[26656]: Failed password for invalid user rio from 103.84.237.74 port 36050 ssh2 Aug 17 03:00:14 kunden sshd[26656]: Received disconnect from 103.84.237.74: 11: Bye Bye [preauth] Aug 17 03:01:28 kunden sshd[30306]: Invalid user mickey from 103.84.237.74 Aug 17 03:01:28 kunden sshd[30306]: pam_unix(sshd:auth): authentication fai........ ------------------------------- |
2020-08-18 20:18:14 |
| 161.117.7.137 | attackspam | Aug 18 05:47:05 fhem-rasp sshd[29918]: Failed password for root from 161.117.7.137 port 53280 ssh2 Aug 18 05:47:07 fhem-rasp sshd[29918]: Disconnected from authenticating user root 161.117.7.137 port 53280 [preauth] ... |
2020-08-18 20:07:40 |
| 137.74.132.171 | attackbots | Invalid user ubuntu from 137.74.132.171 port 48032 |
2020-08-18 19:58:12 |
| 45.124.144.116 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-18 19:48:22 |