City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 252.19.69.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25862
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;252.19.69.141. IN A
;; AUTHORITY SECTION:
. 316 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 14:08:16 CST 2022
;; MSG SIZE rcvd: 106Host 141.69.19.252.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 141.69.19.252.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 149.202.45.11 | attackspam | Aug 5 05:56:13 b-vps wordpress(rreb.cz)[16993]: Authentication attempt for unknown user barbora from 149.202.45.11 ... |
2020-08-05 12:42:25 |
| 222.186.175.169 | attack | Aug 5 06:08:34 abendstille sshd\[14837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169 user=root Aug 5 06:08:36 abendstille sshd\[14837\]: Failed password for root from 222.186.175.169 port 40750 ssh2 Aug 5 06:08:39 abendstille sshd\[14837\]: Failed password for root from 222.186.175.169 port 40750 ssh2 Aug 5 06:08:41 abendstille sshd\[14837\]: Failed password for root from 222.186.175.169 port 40750 ssh2 Aug 5 06:08:45 abendstille sshd\[14837\]: Failed password for root from 222.186.175.169 port 40750 ssh2 ... |
2020-08-05 12:11:59 |
| 139.198.121.63 | attackspam | Aug 5 06:08:58 vps647732 sshd[7100]: Failed password for root from 139.198.121.63 port 41443 ssh2 ... |
2020-08-05 12:19:49 |
| 106.12.196.118 | attackbots | Aug 5 05:47:19 server sshd[32392]: Failed password for root from 106.12.196.118 port 44190 ssh2 Aug 5 05:52:03 server sshd[33808]: Failed password for root from 106.12.196.118 port 50794 ssh2 Aug 5 05:56:57 server sshd[35317]: Failed password for root from 106.12.196.118 port 57394 ssh2 |
2020-08-05 12:07:05 |
| 84.108.37.63 | attackbotsspam | SSH brute-force attempt |
2020-08-05 12:29:49 |
| 168.119.48.122 | attack | Fail2Ban Ban Triggered HTTP SQL Injection Attempt |
2020-08-05 12:09:50 |
| 162.144.153.50 | attackspambots | joshuajohannes.de 162.144.153.50 [05/Aug/2020:05:56:32 +0200] "POST /wp-login.php HTTP/1.1" 200 5961 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" joshuajohannes.de 162.144.153.50 [05/Aug/2020:05:56:34 +0200] "POST /wp-login.php HTTP/1.1" 200 5926 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-05 12:22:14 |
| 89.133.180.22 | attack | Dovecot Invalid User Login Attempt. |
2020-08-05 12:16:43 |
| 112.85.42.174 | attackbotsspam | 2020-08-05T06:20:54.237002 sshd[90973]: Unable to negotiate with 112.85.42.174 port 38403: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] 2020-08-05T06:20:54.265170 sshd[90975]: Unable to negotiate with 112.85.42.174 port 16327: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] 2020-08-05T06:28:16.060502 sshd[101990]: Unable to negotiate with 112.85.42.174 port 43642: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] 2020-08-05T06:28:16.097499 sshd[101992]: Unable to negotiate with 112.85.42.174 port 1205: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] |
2020-08-05 12:28:31 |
| 179.107.34.178 | attack | (sshd) Failed SSH login from 179.107.34.178 (BR/Brazil/178.34.107.179.static.rj2.alog.com.br): 5 in the last 3600 secs |
2020-08-05 12:31:19 |
| 108.254.28.16 | attackspambots | Aug 5 05:59:32 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=108.254.28.16 DST=79.143.186.54 LEN=68 TOS=0x00 PREC=0x00 TTL=249 ID=100 PROTO=UDP SPT=20671 DPT=111 LEN=48 Aug 5 06:13:03 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=108.254.28.16 DST=79.143.186.54 LEN=68 TOS=0x00 PREC=0x00 TTL=249 ID=50842 PROTO=UDP SPT=32780 DPT=111 LEN=48 Aug 5 06:14:36 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=108.254.28.16 DST=79.143.186.54 LEN=68 TOS=0x00 PREC=0x00 TTL=249 ID=19290 PROTO=UDP SPT=20509 DPT=111 LEN=48 |
2020-08-05 12:39:16 |
| 196.15.211.91 | attackspam | Aug 5 05:56:51 fhem-rasp sshd[21203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.15.211.91 user=root Aug 5 05:56:53 fhem-rasp sshd[21203]: Failed password for root from 196.15.211.91 port 56014 ssh2 ... |
2020-08-05 12:10:57 |
| 167.71.209.115 | attack | 167.71.209.115 - - [05/Aug/2020:04:55:51 +0100] "POST /wp-login.php HTTP/1.1" 200 1967 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.209.115 - - [05/Aug/2020:04:55:58 +0100] "POST /wp-login.php HTTP/1.1" 200 1951 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.209.115 - - [05/Aug/2020:04:56:01 +0100] "POST /wp-login.php HTTP/1.1" 200 1947 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-05 12:34:47 |
| 222.186.42.155 | attackbotsspam | 05.08.2020 04:20:58 SSH access blocked by firewall |
2020-08-05 12:21:14 |
| 112.85.42.181 | attack | Aug 5 06:20:43 amit sshd\[17234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.181 user=root Aug 5 06:20:45 amit sshd\[17234\]: Failed password for root from 112.85.42.181 port 21853 ssh2 Aug 5 06:21:02 amit sshd\[17236\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.181 user=root ... |
2020-08-05 12:24:12 |