City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 253.2.153.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19313
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;253.2.153.131. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012700 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 14:49:33 CST 2025
;; MSG SIZE rcvd: 106Host 131.153.2.253.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 131.153.2.253.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 206.189.177.133 | attack | firewall-block, port(s): 8545/tcp |
2019-08-07 06:09:11 |
| 173.249.59.104 | attackspambots | Aug 6 20:32:59 srv00 sshd[46208]: fatal: Unable to negotiate whostnameh 173.249.59.104 port 59922: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Aug 6 20:33:07 srv00 sshd[46222]: fatal: Unable to negotiate whostnameh 173.249.59.104 port 45336: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Aug 6 20:33:14 srv00 sshd[46225]: fatal: Unable to negotiate whostnameh 173.249.59.104 port 58972: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Aug 6 20:33:23 srv00 sshd[46227]: fatal: Unable to negotiate whostnameh 173.249.59.104 port 44376: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman........ ------------------------------ |
2019-08-07 06:18:17 |
| 72.167.190.179 | attackbots | Automatic report - Banned IP Access |
2019-08-07 06:55:36 |
| 37.59.99.243 | attackbotsspam | Automatic report - Banned IP Access |
2019-08-07 06:38:00 |
| 61.227.243.214 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-06 20:12:52,883 INFO [amun_request_handler] PortScan Detected on Port: 445 (61.227.243.214) |
2019-08-07 06:37:31 |
| 87.17.158.144 | attackbotsspam | Aug 6 21:59:28 xb0 sshd[31599]: Failed password for invalid user skkb from 87.17.158.144 port 54544 ssh2 Aug 6 21:59:28 xb0 sshd[31599]: Received disconnect from 87.17.158.144: 11: Bye Bye [preauth] Aug 6 22:00:55 xb0 sshd[23289]: Failed password for invalid user skkb from 87.17.158.144 port 42318 ssh2 Aug 6 22:00:55 xb0 sshd[23289]: Received disconnect from 87.17.158.144: 11: Bye Bye [preauth] Aug 6 22:11:46 xb0 sshd[21424]: Failed password for invalid user reagan from 87.17.158.144 port 48728 ssh2 Aug 6 22:11:46 xb0 sshd[21424]: Received disconnect from 87.17.158.144: 11: Bye Bye [preauth] Aug 6 22:12:19 xb0 sshd[24417]: Failed password for invalid user reagan from 87.17.158.144 port 54796 ssh2 Aug 6 22:12:19 xb0 sshd[24417]: Received disconnect from 87.17.158.144: 11: Bye Bye [preauth] Aug 6 22:17:44 xb0 sshd[22679]: Failed password for invalid user teodora from 87.17.158.144 port 46476 ssh2 Aug 6 22:17:44 xb0 sshd[22679]: Received disconnect from 87.17.158........ ------------------------------- |
2019-08-07 06:12:12 |
| 94.191.21.35 | attackbots | Aug 7 01:46:55 yabzik sshd[11776]: Failed password for mysql from 94.191.21.35 port 43334 ssh2 Aug 7 01:51:58 yabzik sshd[13413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.21.35 Aug 7 01:52:00 yabzik sshd[13413]: Failed password for invalid user origin from 94.191.21.35 port 34420 ssh2 |
2019-08-07 06:53:08 |
| 92.63.192.239 | attackspam | firewall-block, port(s): 445/tcp |
2019-08-07 06:19:27 |
| 189.206.249.66 | attackspambots | 189.206.249.66 - - \[06/Aug/2019:23:49:11 +0200\] "POST /wuwu11.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 \(Windows NT 6.1\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0" 189.206.249.66 - - \[06/Aug/2019:23:49:11 +0200\] "POST /xw.php HTTP/1.1" 302 224 "-" "Mozilla/5.0 \(Windows NT 6.1\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0" 189.206.249.66 - - \[06/Aug/2019:23:49:12 +0200\] "POST /xw1.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 \(Windows NT 6.1\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0" 189.206.249.66 - - \[06/Aug/2019:23:49:12 +0200\] "POST /9678.php HTTP/1.1" 302 226 "-" "Mozilla/5.0 \(Windows NT 6.1\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0" 189.206.249.66 - - \[06/Aug/2019:23:49:13 +0200\] "POST /wc.php HTTP/1.1" 302 224 "-" "Mozilla/5.0 \(Windows NT 6.1\) AppleWebKit/537.36 \(KH ... |
2019-08-07 06:48:22 |
| 77.40.58.237 | attackbots | Brute force attempt |
2019-08-07 06:55:17 |
| 190.57.167.67 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-06 21:02:35,353 INFO [shellcode_manager] (190.57.167.67) no match, writing hexdump (2ad11fc69c8bf45c45291a91fbcc9472 :1889543) - MS17010 (EternalBlue) |
2019-08-07 06:11:31 |
| 123.169.143.11 | attack | Aug 6 21:48:53 DDOS Attack: SRC=123.169.143.11 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=50 DF PROTO=TCP SPT=24712 DPT=80 WINDOW=0 RES=0x00 RST URGP=0 |
2019-08-07 06:51:56 |
| 46.37.189.146 | attackbotsspam | WordPress wp-login brute force :: 46.37.189.146 0.040 BYPASS [07/Aug/2019:07:50:13 1000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-08-07 06:16:50 |
| 74.208.250.190 | attackspam | Aug 6 23:27:53 nxxxxxxx sshd[19973]: refused connect from 74.208.250.190 (7= 4.208.250.190) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=74.208.250.190 |
2019-08-07 06:27:18 |
| 2.38.90.101 | attack | Aug 7 00:11:25 vps647732 sshd[23506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.38.90.101 Aug 7 00:11:27 vps647732 sshd[23506]: Failed password for invalid user linker from 2.38.90.101 port 51760 ssh2 ... |
2019-08-07 06:25:41 |