City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.75.104.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30553
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;3.75.104.0. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012201 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 04:38:36 CST 2025
;; MSG SIZE rcvd: 1030.104.75.3.in-addr.arpa domain name pointer ec2-3-75-104-0.eu-central-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
0.104.75.3.in-addr.arpa name = ec2-3-75-104-0.eu-central-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.69.236.38 | attackbots | Port probing on unauthorized port 1433 |
2020-02-13 11:07:01 |
| 51.79.44.52 | attack | Feb 13 03:18:38 ncomp sshd[19430]: Invalid user PPSNEPL from 51.79.44.52 Feb 13 03:18:38 ncomp sshd[19430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.44.52 Feb 13 03:18:38 ncomp sshd[19430]: Invalid user PPSNEPL from 51.79.44.52 Feb 13 03:18:40 ncomp sshd[19430]: Failed password for invalid user PPSNEPL from 51.79.44.52 port 33228 ssh2 |
2020-02-13 11:01:00 |
| 142.93.140.242 | attackbotsspam | Feb 13 00:10:35 plusreed sshd[9512]: Invalid user test123321 from 142.93.140.242 ... |
2020-02-13 13:11:14 |
| 222.186.30.76 | attackbotsspam | Feb 13 05:59:07 MK-Soft-VM4 sshd[4381]: Failed password for root from 222.186.30.76 port 34210 ssh2 Feb 13 05:59:09 MK-Soft-VM4 sshd[4381]: Failed password for root from 222.186.30.76 port 34210 ssh2 ... |
2020-02-13 13:06:14 |
| 220.164.193.238 | attackspam | Brute force attempt |
2020-02-13 13:08:34 |
| 167.71.166.188 | attackbots | Feb 12 16:58:04 hpm sshd\[14379\]: Invalid user guai from 167.71.166.188 Feb 12 16:58:04 hpm sshd\[14379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.166.188 Feb 12 16:58:06 hpm sshd\[14379\]: Failed password for invalid user guai from 167.71.166.188 port 54480 ssh2 Feb 12 17:01:14 hpm sshd\[14811\]: Invalid user ovwebusr from 167.71.166.188 Feb 12 17:01:14 hpm sshd\[14811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.166.188 |
2020-02-13 11:11:41 |
| 149.202.45.11 | attackbotsspam | 149.202.45.11 - - \[13/Feb/2020:05:55:10 +0100\] "POST /wp-login.php HTTP/1.0" 200 6640 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 149.202.45.11 - - \[13/Feb/2020:05:55:12 +0100\] "POST /wp-login.php HTTP/1.0" 200 6618 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 149.202.45.11 - - \[13/Feb/2020:05:55:13 +0100\] "POST /wp-login.php HTTP/1.0" 200 6618 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-02-13 13:16:50 |
| 195.54.166.11 | attackspam | *Port Scan* detected from 195.54.166.11 (RU/Russia/-). 4 hits in the last 180 seconds |
2020-02-13 13:20:38 |
| 111.230.241.245 | attackspam | Feb 12 22:18:33 vps46666688 sshd[13229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.241.245 Feb 12 22:18:35 vps46666688 sshd[13229]: Failed password for invalid user sha from 111.230.241.245 port 52518 ssh2 ... |
2020-02-13 11:05:42 |
| 109.177.145.153 | attack | Feb 13 01:30:33 pl3server sshd[11264]: Invalid user admin from 109.177.145.153 Feb 13 01:30:34 pl3server sshd[11264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.177.145.153 Feb 13 01:30:36 pl3server sshd[11264]: Failed password for invalid user admin from 109.177.145.153 port 49601 ssh2 Feb 13 01:30:36 pl3server sshd[11264]: Connection closed by 109.177.145.153 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=109.177.145.153 |
2020-02-13 10:53:22 |
| 107.189.11.193 | attackspam | Invalid user fake from 107.189.11.193 port 51072 |
2020-02-13 10:58:27 |
| 101.231.124.6 | attackspambots | Feb 12 21:45:13 plusreed sshd[2611]: Invalid user cruise from 101.231.124.6 ... |
2020-02-13 10:53:53 |
| 195.54.166.10 | attackbotsspam | *Port Scan* detected from 195.54.166.10 (RU/Russia/-). 4 hits in the last 261 seconds |
2020-02-13 13:21:40 |
| 82.200.216.122 | attackspambots | Feb 13 02:53:55 master sshd[17615]: Failed password for invalid user admin from 82.200.216.122 port 43692 ssh2 |
2020-02-13 11:00:39 |
| 49.236.195.48 | attack | *Port Scan* detected from 49.236.195.48 (MY/Malaysia/-). 4 hits in the last 20 seconds |
2020-02-13 13:19:14 |