City: unknown
Region: unknown
Country: United Kingdom of Great Britain and Northern Ireland (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 25.75.141.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57354
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;25.75.141.45. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 23:12:58 CST 2025
;; MSG SIZE rcvd: 105Host 45.141.75.25.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 45.141.75.25.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.136.111.109 | attack | Nov 9 08:50:39 mc1 kernel: \[4572128.682669\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.109 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=19480 PROTO=TCP SPT=47963 DPT=3270 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 9 08:52:17 mc1 kernel: \[4572227.128362\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.109 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=25654 PROTO=TCP SPT=47963 DPT=3465 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 9 08:53:43 mc1 kernel: \[4572313.551879\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.109 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=34163 PROTO=TCP SPT=47963 DPT=3375 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-09 16:40:21 |
| 49.234.51.56 | attackbotsspam | detected by Fail2Ban |
2019-11-09 16:39:07 |
| 107.180.123.15 | attackbots | Automatic report - XMLRPC Attack |
2019-11-09 16:45:54 |
| 103.212.235.147 | attackspambots | Nov 9 08:29:10 pornomens sshd\[3214\]: Invalid user mhwei from 103.212.235.147 port 56018 Nov 9 08:29:10 pornomens sshd\[3214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.212.235.147 Nov 9 08:29:12 pornomens sshd\[3214\]: Failed password for invalid user mhwei from 103.212.235.147 port 56018 ssh2 ... |
2019-11-09 17:01:00 |
| 121.162.131.223 | attackspam | Nov 9 07:27:13 ArkNodeAT sshd\[9871\]: Invalid user mb from 121.162.131.223 Nov 9 07:27:13 ArkNodeAT sshd\[9871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.162.131.223 Nov 9 07:27:16 ArkNodeAT sshd\[9871\]: Failed password for invalid user mb from 121.162.131.223 port 53075 ssh2 |
2019-11-09 16:29:29 |
| 123.243.191.44 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/123.243.191.44/ AU - 1H : (26) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : AU NAME ASN : ASN7545 IP : 123.243.191.44 CIDR : 123.243.190.0/23 PREFIX COUNT : 5069 UNIQUE IP COUNT : 2412544 ATTACKS DETECTED ASN7545 : 1H - 1 3H - 1 6H - 1 12H - 2 24H - 5 DateTime : 2019-11-09 07:26:31 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-09 17:03:51 |
| 138.197.199.249 | attack | k+ssh-bruteforce |
2019-11-09 16:59:30 |
| 163.172.44.100 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-09 17:05:16 |
| 188.113.174.55 | attack | Nov 7 09:35:25 amida sshd[815251]: reveeclipse mapping checking getaddrinfo for ip-188-113-174-55.z46.ysk.scts.tv [188.113.174.55] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 7 09:35:25 amida sshd[815251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.113.174.55 user=r.r Nov 7 09:35:27 amida sshd[815251]: Failed password for r.r from 188.113.174.55 port 33970 ssh2 Nov 7 09:35:27 amida sshd[815251]: Received disconnect from 188.113.174.55: 11: Bye Bye [preauth] Nov 7 09:58:40 amida sshd[822053]: reveeclipse mapping checking getaddrinfo for ip-188-113-174-55.z46.ysk.scts.tv [188.113.174.55] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 7 09:58:40 amida sshd[822053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.113.174.55 user=r.r Nov 7 09:58:41 amida sshd[822053]: Failed password for r.r from 188.113.174.55 port 50374 ssh2 Nov 7 09:58:42 amida sshd[822053]: Received disconnect fro........ ------------------------------- |
2019-11-09 16:31:20 |
| 186.236.28.158 | attack | Automatic report - Port Scan Attack |
2019-11-09 17:08:13 |
| 182.61.166.179 | attackbots | " " |
2019-11-09 16:51:29 |
| 218.92.0.199 | attackspam | Nov 9 13:27:13 itv-usvr-01 sshd[19887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.199 user=root Nov 9 13:27:15 itv-usvr-01 sshd[19887]: Failed password for root from 218.92.0.199 port 40960 ssh2 |
2019-11-09 16:30:01 |
| 209.188.21.236 | attack | Automatic report - XMLRPC Attack |
2019-11-09 16:55:39 |
| 5.196.75.47 | attack | Nov 9 08:02:40 SilenceServices sshd[7771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.75.47 Nov 9 08:02:43 SilenceServices sshd[7771]: Failed password for invalid user user from 5.196.75.47 port 46726 ssh2 Nov 9 08:06:48 SilenceServices sshd[8956]: Failed password for root from 5.196.75.47 port 55470 ssh2 |
2019-11-09 17:04:55 |
| 106.13.217.93 | attack | Nov 9 09:25:21 SilenceServices sshd[31750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.217.93 Nov 9 09:25:23 SilenceServices sshd[31750]: Failed password for invalid user zo from 106.13.217.93 port 34170 ssh2 Nov 9 09:30:55 SilenceServices sshd[936]: Failed password for root from 106.13.217.93 port 42376 ssh2 |
2019-11-09 16:39:53 |