City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 252.195.134.231
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18786
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;252.195.134.231. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021600 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 21:03:24 CST 2025
;; MSG SIZE rcvd: 108Host 231.134.195.252.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 231.134.195.252.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 85.209.0.77 | attackspambots | Apr 25 09:16:07 firewall sshd[3490]: Failed password for root from 85.209.0.77 port 20898 ssh2 Apr 25 09:16:05 firewall sshd[3488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.77 user=root Apr 25 09:16:07 firewall sshd[3488]: Failed password for root from 85.209.0.77 port 14244 ssh2 ... |
2020-04-25 20:21:38 |
| 104.148.41.102 | attackbots | jannisjulius.de 104.148.41.102 [25/Apr/2020:08:39:54 +0200] "POST /wp-login.php HTTP/1.1" 200 11917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0" jannisjulius.de 104.148.41.102 [25/Apr/2020:08:39:55 +0200] "POST /wp-login.php HTTP/1.1" 200 12304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0" |
2020-04-25 19:56:34 |
| 150.95.181.49 | attackspam | Apr 25 11:42:16 sshgateway sshd\[1627\]: Invalid user phion from 150.95.181.49 Apr 25 11:42:16 sshgateway sshd\[1627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v150-95-181-49.a0e3.g.tyo1.static.cnode.io Apr 25 11:42:19 sshgateway sshd\[1627\]: Failed password for invalid user phion from 150.95.181.49 port 59546 ssh2 |
2020-04-25 19:48:02 |
| 117.44.16.100 | attackbotsspam | The IP 117.44.16.100 has just been banned by Fail2Ban after 5 attempts against dovecot. |
2020-04-25 20:10:00 |
| 188.71.198.233 | attackspambots | Email rejected due to spam filtering |
2020-04-25 20:26:00 |
| 178.128.121.188 | attack | Brute force attempt |
2020-04-25 20:20:09 |
| 120.132.11.186 | attackspam | Apr 25 06:40:46 askasleikir sshd[8654]: Failed password for invalid user yahoo from 120.132.11.186 port 56148 ssh2 Apr 25 06:20:50 askasleikir sshd[8595]: Failed password for invalid user data from 120.132.11.186 port 57422 ssh2 Apr 25 06:34:37 askasleikir sshd[8640]: Failed password for invalid user sshvpn from 120.132.11.186 port 49070 ssh2 |
2020-04-25 20:04:09 |
| 14.247.187.241 | attackbots | 20/4/24@23:47:12: FAIL: Alarm-Network address from=14.247.187.241 20/4/24@23:47:12: FAIL: Alarm-Network address from=14.247.187.241 ... |
2020-04-25 20:06:03 |
| 140.143.56.61 | attackbotsspam | Apr 25 13:08:08 srv-ubuntu-dev3 sshd[110734]: Invalid user mamainvacanta from 140.143.56.61 Apr 25 13:08:08 srv-ubuntu-dev3 sshd[110734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.56.61 Apr 25 13:08:08 srv-ubuntu-dev3 sshd[110734]: Invalid user mamainvacanta from 140.143.56.61 Apr 25 13:08:10 srv-ubuntu-dev3 sshd[110734]: Failed password for invalid user mamainvacanta from 140.143.56.61 port 35990 ssh2 Apr 25 13:12:30 srv-ubuntu-dev3 sshd[111432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.56.61 user=root Apr 25 13:12:32 srv-ubuntu-dev3 sshd[111432]: Failed password for root from 140.143.56.61 port 57620 ssh2 Apr 25 13:16:57 srv-ubuntu-dev3 sshd[112279]: Invalid user openerp from 140.143.56.61 Apr 25 13:16:57 srv-ubuntu-dev3 sshd[112279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.56.61 Apr 25 13:16:57 srv-ubuntu-dev3 sshd[1122 ... |
2020-04-25 19:51:25 |
| 49.205.177.205 | attackspam | Invalid user chrony from 49.205.177.205 port 56278 |
2020-04-25 19:57:13 |
| 119.123.67.123 | attack | Lines containing failures of 119.123.67.123 Apr 23 14:56:32 *** sshd[88602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.123.67.123 user=r.r Apr 23 14:56:34 *** sshd[88602]: Failed password for r.r from 119.123.67.123 port 25835 ssh2 Apr 23 14:56:34 *** sshd[88602]: Received disconnect from 119.123.67.123 port 25835:11: Bye Bye [preauth] Apr 23 14:56:34 *** sshd[88602]: Disconnected from authenticating user r.r 119.123.67.123 port 25835 [preauth] Apr 23 15:10:28 *** sshd[89845]: Connection closed by 119.123.67.123 port 27225 [preauth] Apr 23 15:17:23 *** sshd[90794]: Invalid user uw from 119.123.67.123 port 25972 Apr 23 15:17:23 *** sshd[90794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.123.67.123 Apr 23 15:17:26 *** sshd[90794]: Failed password for invalid user uw from 119.123.67.123 port 25972 ssh2 Apr 23 15:17:26 *** sshd[90794]: Received disconnect from 119.123.67.123 p........ ------------------------------ |
2020-04-25 20:09:39 |
| 14.102.51.138 | attack | T: f2b postfix aggressive 3x |
2020-04-25 20:17:01 |
| 27.2.66.205 | attack | xmlrpc attack |
2020-04-25 19:53:23 |
| 81.198.117.110 | attackspam | SSH brute force attempt |
2020-04-25 20:08:47 |
| 103.145.12.53 | attackspam | Port 80 (HTTP) access denied |
2020-04-25 19:58:55 |