City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 246.131.203.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57467
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;246.131.203.45. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 00:08:35 CST 2025
;; MSG SIZE rcvd: 107
Host 45.203.131.246.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 45.203.131.246.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.55.36.216 | attackbots | Sep 19 09:51:42 nuernberg-4g-01 sshd[16815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.36.216 Sep 19 09:51:44 nuernberg-4g-01 sshd[16815]: Failed password for invalid user web from 45.55.36.216 port 50862 ssh2 Sep 19 09:59:59 nuernberg-4g-01 sshd[19535]: Failed password for root from 45.55.36.216 port 34848 ssh2 |
2020-09-19 20:48:43 |
| 34.74.248.119 | attackspambots | 34.74.248.119 - - [19/Sep/2020:14:45:10 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.74.248.119 - - [19/Sep/2020:14:45:12 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.74.248.119 - - [19/Sep/2020:14:45:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-19 20:53:13 |
| 192.42.116.20 | attack | 2020-09-19T10:34:09.886106galaxy.wi.uni-potsdam.de sshd[26425]: Failed password for root from 192.42.116.20 port 51370 ssh2 2020-09-19T10:34:11.937168galaxy.wi.uni-potsdam.de sshd[26425]: Failed password for root from 192.42.116.20 port 51370 ssh2 2020-09-19T10:34:14.230389galaxy.wi.uni-potsdam.de sshd[26425]: Failed password for root from 192.42.116.20 port 51370 ssh2 2020-09-19T10:34:15.823068galaxy.wi.uni-potsdam.de sshd[26425]: Failed password for root from 192.42.116.20 port 51370 ssh2 2020-09-19T10:34:17.842529galaxy.wi.uni-potsdam.de sshd[26425]: Failed password for root from 192.42.116.20 port 51370 ssh2 2020-09-19T10:34:20.312318galaxy.wi.uni-potsdam.de sshd[26425]: Failed password for root from 192.42.116.20 port 51370 ssh2 2020-09-19T10:34:20.312490galaxy.wi.uni-potsdam.de sshd[26425]: error: maximum authentication attempts exceeded for root from 192.42.116.20 port 51370 ssh2 [preauth] 2020-09-19T10:34:20.312521galaxy.wi.uni-potsdam.de sshd[26425]: Disconnecting: Too many au ... |
2020-09-19 20:50:54 |
| 119.82.224.75 | attackspambots | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-09-19 20:53:00 |
| 209.141.54.153 | attackbots | Sep 19 12:06:17 ssh2 sshd[26554]: Invalid user admin from 209.141.54.153 port 43411 Sep 19 12:06:18 ssh2 sshd[26554]: Failed password for invalid user admin from 209.141.54.153 port 43411 ssh2 Sep 19 12:06:18 ssh2 sshd[26554]: Connection closed by invalid user admin 209.141.54.153 port 43411 [preauth] ... |
2020-09-19 20:33:13 |
| 106.13.99.107 | attack | prod8 ... |
2020-09-19 20:48:12 |
| 94.102.51.95 | attack | Port scan on 6 port(s): 13870 16384 33403 41535 48140 62849 |
2020-09-19 20:27:22 |
| 140.143.2.24 | attack | [ssh] SSH attack |
2020-09-19 20:24:55 |
| 192.241.239.81 | attackspambots | TCP ports : 1583 / 60001; UDP port : 1434 |
2020-09-19 20:26:27 |
| 142.93.170.135 | attackspam | 142.93.170.135 (DE/Germany/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 19 08:08:04 server4 sshd[14579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.170.135 user=root Sep 19 08:04:39 server4 sshd[12443]: Failed password for root from 106.12.166.167 port 32149 ssh2 Sep 19 08:11:35 server4 sshd[17259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.14.77.102 user=root Sep 19 08:06:23 server4 sshd[13559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.136.185 user=root Sep 19 08:06:25 server4 sshd[13559]: Failed password for root from 206.189.136.185 port 53096 ssh2 Sep 19 08:08:06 server4 sshd[14579]: Failed password for root from 142.93.170.135 port 49956 ssh2 IP Addresses Blocked: |
2020-09-19 21:02:25 |
| 173.44.175.9 | attackspambots | TCP Port: 25 invalid blocked Listed on dnsbl-sorbs also barracuda and zen-spamhaus (3175) |
2020-09-19 20:36:24 |
| 111.89.33.46 | attackbotsspam | Telnetd brute force attack detected by fail2ban |
2020-09-19 20:59:09 |
| 103.19.133.94 | attack | Invalid user ut3 from 103.19.133.94 port 55178 |
2020-09-19 20:45:35 |
| 120.131.3.91 | attackspambots | Found on CINS badguys / proto=6 . srcport=52338 . dstport=17489 . (2881) |
2020-09-19 20:43:39 |
| 190.73.31.9 | attackbots | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-09-19 20:42:34 |