City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 252.159.41.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51979
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;252.159.41.45. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 170 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 00:43:10 CST 2025
;; MSG SIZE rcvd: 106Host 45.41.159.252.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 45.41.159.252.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.53.2.250 | attackbots | Port probing on unauthorized port 6379 |
2020-08-13 16:14:28 |
| 2.229.205.17 | attack | Automatic report - Banned IP Access |
2020-08-13 15:41:55 |
| 190.167.71.4 | attackbots | Microsoft SQL Server User Authentication Brute Force Attempt , PTR: 4.71.167.190.d.dyn.codetel.net.do. |
2020-08-13 16:14:58 |
| 212.70.149.3 | attackbots | Aug 13 10:13:45 galaxy event: galaxy/lswi: smtp: nanon@uni-potsdam.de [212.70.149.3] authentication failure using internet password Aug 13 10:14:02 galaxy event: galaxy/lswi: smtp: naohiko@uni-potsdam.de [212.70.149.3] authentication failure using internet password Aug 13 10:14:22 galaxy event: galaxy/lswi: smtp: naoma@uni-potsdam.de [212.70.149.3] authentication failure using internet password Aug 13 10:14:41 galaxy event: galaxy/lswi: smtp: naomi@uni-potsdam.de [212.70.149.3] authentication failure using internet password Aug 13 10:15:00 galaxy event: galaxy/lswi: smtp: nara@uni-potsdam.de [212.70.149.3] authentication failure using internet password ... |
2020-08-13 16:16:12 |
| 222.186.30.76 | attackbotsspam | Aug 13 10:10:39 santamaria sshd\[19719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76 user=root Aug 13 10:10:42 santamaria sshd\[19719\]: Failed password for root from 222.186.30.76 port 50479 ssh2 Aug 13 10:10:44 santamaria sshd\[19719\]: Failed password for root from 222.186.30.76 port 50479 ssh2 ... |
2020-08-13 16:11:20 |
| 136.243.72.5 | attack | Aug 13 09:54:18 relay postfix/smtpd\[5850\]: warning: mon.risse-it.de\[136.243.72.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 13 09:54:18 relay postfix/smtpd\[5846\]: warning: mon.risse-it.de\[136.243.72.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 13 09:54:18 relay postfix/smtpd\[6704\]: warning: mon.risse-it.de\[136.243.72.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 13 09:54:18 relay postfix/smtpd\[6153\]: warning: mon.risse-it.de\[136.243.72.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 13 09:54:18 relay postfix/smtpd\[5868\]: warning: mon.risse-it.de\[136.243.72.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 13 09:54:18 relay postfix/smtpd\[5912\]: warning: mon.risse-it.de\[136.243.72.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 13 09:54:18 relay postfix/smtpd\[7262\]: warning: mon.risse-it.de\[136.243.72.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 13 09:54:18 relay postfix/smtpd\[7263\]: warning: mon.riss ... |
2020-08-13 15:57:05 |
| 101.200.61.95 | attackspambots | Aug 13 05:48:18 sip sshd[1287404]: Failed password for root from 101.200.61.95 port 55920 ssh2 Aug 13 05:52:37 sip sshd[1287470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.200.61.95 user=root Aug 13 05:52:39 sip sshd[1287470]: Failed password for root from 101.200.61.95 port 52654 ssh2 ... |
2020-08-13 15:52:22 |
| 23.227.38.32 | attackspam | 1 Attack(s) Detected [DoS Attack: SYN/ACK Scan] from source: 23.227.38.32, port 80, Tuesday, August 11, 2020 22:13:57 |
2020-08-13 15:37:48 |
| 216.6.201.3 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-13 16:18:11 |
| 211.140.151.5 | attackspam | port scan and connect, tcp 1433 (ms-sql-s) |
2020-08-13 16:04:35 |
| 95.91.76.109 | attack | 20 attempts against mh-misbehave-ban on storm |
2020-08-13 16:03:28 |
| 18.183.235.29 | attackspambots | 1 Attack(s) Detected [DoS Attack: Ping Sweep] from source: 18.183.235.29, Tuesday, August 11, 2020 23:40:44 |
2020-08-13 15:39:15 |
| 60.174.228.220 | attack | IMAP |
2020-08-13 15:43:04 |
| 106.12.197.165 | attackspam | Aug 13 08:02:51 mellenthin sshd[15596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.197.165 user=root Aug 13 08:02:54 mellenthin sshd[15596]: Failed password for invalid user root from 106.12.197.165 port 58016 ssh2 |
2020-08-13 15:55:57 |
| 200.121.91.74 | attackbotsspam | Cluster member 67.227.229.95 (US/United States/host.cjthedj97.me) said, DENY 200.121.91.74, Reason:[(mod_security) mod_security (id:210350) triggered by 200.121.91.74 (PE/Peru/-): 1 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER |
2020-08-13 15:52:53 |