City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 254.112.133.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1800
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;254.112.133.142. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021900 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 23:01:00 CST 2025
;; MSG SIZE rcvd: 108Host 142.133.112.254.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 142.133.112.254.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 128.199.169.90 | attackspambots | 2020-08-26T05:49:16.602024correo.[domain] sshd[23046]: Invalid user jack from 128.199.169.90 port 33562 2020-08-26T05:49:18.932753correo.[domain] sshd[23046]: Failed password for invalid user jack from 128.199.169.90 port 33562 ssh2 2020-08-26T06:03:17.512626correo.[domain] sshd[24483]: Invalid user lcz from 128.199.169.90 port 57380 ... |
2020-08-27 09:58:34 |
| 107.170.249.243 | attack | SSH brute force |
2020-08-27 10:04:22 |
| 120.92.111.92 | attack | 2020-08-27T00:34:47.802210abusebot.cloudsearch.cf sshd[26704]: Invalid user minecraft from 120.92.111.92 port 58342 2020-08-27T00:34:47.807205abusebot.cloudsearch.cf sshd[26704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.111.92 2020-08-27T00:34:47.802210abusebot.cloudsearch.cf sshd[26704]: Invalid user minecraft from 120.92.111.92 port 58342 2020-08-27T00:34:49.391893abusebot.cloudsearch.cf sshd[26704]: Failed password for invalid user minecraft from 120.92.111.92 port 58342 ssh2 2020-08-27T00:39:49.991194abusebot.cloudsearch.cf sshd[26759]: Invalid user almacen from 120.92.111.92 port 51700 2020-08-27T00:39:49.996224abusebot.cloudsearch.cf sshd[26759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.111.92 2020-08-27T00:39:49.991194abusebot.cloudsearch.cf sshd[26759]: Invalid user almacen from 120.92.111.92 port 51700 2020-08-27T00:39:51.706376abusebot.cloudsearch.cf sshd[26759]: Failed ... |
2020-08-27 09:52:29 |
| 178.93.28.212 | attackspam | Brute Force |
2020-08-27 10:01:20 |
| 114.43.190.27 | attack | Port probing on unauthorized port 81 |
2020-08-27 09:53:43 |
| 176.31.255.223 | attackbotsspam | Invalid user phpmy from 176.31.255.223 port 49158 |
2020-08-27 09:39:43 |
| 193.112.108.11 | attackspambots | 2020-08-26T22:41:28.727911mail.broermann.family sshd[14328]: Invalid user hadoop from 193.112.108.11 port 47960 2020-08-26T22:41:28.732446mail.broermann.family sshd[14328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.108.11 2020-08-26T22:41:28.727911mail.broermann.family sshd[14328]: Invalid user hadoop from 193.112.108.11 port 47960 2020-08-26T22:41:30.495002mail.broermann.family sshd[14328]: Failed password for invalid user hadoop from 193.112.108.11 port 47960 ssh2 2020-08-26T22:47:18.260472mail.broermann.family sshd[14532]: Invalid user warehouse from 193.112.108.11 port 51862 ... |
2020-08-27 09:49:52 |
| 193.35.51.20 | attack | Aug 27 03:48:10 galaxy event: galaxy/lswi: smtp: sander@wirtschaftsinformatik-potsdam.de [193.35.51.20] authentication failure using internet password Aug 27 03:48:12 galaxy event: galaxy/lswi: smtp: sander [193.35.51.20] authentication failure using internet password Aug 27 03:48:33 galaxy event: galaxy/lswi: smtp: ulrich@wirtschaftsinformatik-potsdam.de [193.35.51.20] authentication failure using internet password Aug 27 03:48:34 galaxy event: galaxy/lswi: smtp: ulrich [193.35.51.20] authentication failure using internet password Aug 27 03:48:37 galaxy event: galaxy/lswi: smtp: christine@wirtschaftsinformatik-potsdam.de [193.35.51.20] authentication failure using internet password ... |
2020-08-27 09:51:11 |
| 122.246.92.228 | attackspam | Aug 24 15:34:33 nandi sshd[5472]: Invalid user jason from 122.246.92.228 Aug 24 15:34:33 nandi sshd[5472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.246.92.228 Aug 24 15:34:35 nandi sshd[5472]: Failed password for invalid user jason from 122.246.92.228 port 37074 ssh2 Aug 24 15:34:35 nandi sshd[5472]: Received disconnect from 122.246.92.228: 11: Bye Bye [preauth] Aug 24 15:54:56 nandi sshd[17194]: Invalid user test1 from 122.246.92.228 Aug 24 15:54:56 nandi sshd[17194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.246.92.228 Aug 24 15:54:59 nandi sshd[17194]: Failed password for invalid user test1 from 122.246.92.228 port 55628 ssh2 Aug 24 15:54:59 nandi sshd[17194]: Received disconnect from 122.246.92.228: 11: Bye Bye [preauth] Aug 24 15:56:51 nandi sshd[18715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.246.92.228 user=r......... ------------------------------- |
2020-08-27 09:53:11 |
| 189.124.8.192 | attackspambots | SSH bruteforce |
2020-08-27 09:30:43 |
| 187.25.60.106 | attackspam | Brute forcing RDP port 3389 |
2020-08-27 09:52:53 |
| 191.95.157.135 | attackbots | Attempts against non-existent wp-login |
2020-08-27 09:54:10 |
| 13.65.44.234 | attackspam | Lines containing failures of 13.65.44.234 Aug 24 18:49:50 kmh-vmh-001-fsn07 sshd[3626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.65.44.234 user=r.r Aug 24 18:49:52 kmh-vmh-001-fsn07 sshd[3626]: Failed password for r.r from 13.65.44.234 port 54194 ssh2 Aug 24 18:49:55 kmh-vmh-001-fsn07 sshd[3626]: Failed password for r.r from 13.65.44.234 port 54194 ssh2 Aug 24 18:49:58 kmh-vmh-001-fsn07 sshd[3626]: Failed password for r.r from 13.65.44.234 port 54194 ssh2 Aug 24 18:50:02 kmh-vmh-001-fsn07 sshd[3626]: Failed password for r.r from 13.65.44.234 port 54194 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=13.65.44.234 |
2020-08-27 10:04:51 |
| 35.241.75.144 | attackbotsspam | Aug 24 14:50:08 liveconfig01 sshd[24599]: Invalid user oracle from 35.241.75.144 Aug 24 14:50:08 liveconfig01 sshd[24599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.241.75.144 Aug 24 14:50:10 liveconfig01 sshd[24599]: Failed password for invalid user oracle from 35.241.75.144 port 44806 ssh2 Aug 24 14:50:10 liveconfig01 sshd[24599]: Received disconnect from 35.241.75.144 port 44806:11: Bye Bye [preauth] Aug 24 14:50:10 liveconfig01 sshd[24599]: Disconnected from 35.241.75.144 port 44806 [preauth] Aug 24 14:58:40 liveconfig01 sshd[25140]: Invalid user me from 35.241.75.144 Aug 24 14:58:40 liveconfig01 sshd[25140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.241.75.144 Aug 24 14:58:42 liveconfig01 sshd[25140]: Failed password for invalid user me from 35.241.75.144 port 60448 ssh2 Aug 24 14:58:42 liveconfig01 sshd[25140]: Received disconnect from 35.241.75.144 port 60448:11: Bye........ ------------------------------- |
2020-08-27 09:36:47 |
| 218.161.107.110 | attack | SP-Scan 43811:23 detected 2020.08.26 20:12:27 blocked until 2020.10.15 13:15:14 |
2020-08-27 09:35:09 |