City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 30.85.12.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5075
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;30.85.12.56. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012401 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 25 02:44:23 CST 2025
;; MSG SIZE rcvd: 104
Host 56.12.85.30.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 56.12.85.30.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 1.165.71.204 | attackbots | 2020-09-02T16:22:06.879940suse-nuc sshd[19928]: User root from 1.165.71.204 not allowed because listed in DenyUsers ... |
2020-09-26 22:01:10 |
| 1.2.165.135 | attack | 2020-07-01T01:24:55.516782suse-nuc sshd[22101]: Invalid user sniffer from 1.2.165.135 port 59723 ... |
2020-09-26 21:36:34 |
| 49.233.160.141 | attackspam | 2020-09-26T07:37:27.9450881495-001 sshd[10704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.160.141 2020-09-26T07:37:27.9420411495-001 sshd[10704]: Invalid user postgres from 49.233.160.141 port 36964 2020-09-26T07:37:30.3413781495-001 sshd[10704]: Failed password for invalid user postgres from 49.233.160.141 port 36964 ssh2 2020-09-26T07:41:55.0759901495-001 sshd[10911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.160.141 user=root 2020-09-26T07:41:56.9285691495-001 sshd[10911]: Failed password for root from 49.233.160.141 port 52790 ssh2 2020-09-26T07:54:25.6426911495-001 sshd[11437]: Invalid user firewall from 49.233.160.141 port 43768 ... |
2020-09-26 22:12:11 |
| 212.70.149.52 | attack | 2020-09-26T07:31:43.918404linuxbox-skyline auth[168493]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=photo2 rhost=212.70.149.52 ... |
2020-09-26 21:32:59 |
| 157.245.252.34 | attack | (sshd) Failed SSH login from 157.245.252.34 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 26 12:07:36 server2 sshd[957]: Invalid user victor from 157.245.252.34 port 39100 Sep 26 12:07:39 server2 sshd[957]: Failed password for invalid user victor from 157.245.252.34 port 39100 ssh2 Sep 26 12:17:54 server2 sshd[3901]: Invalid user admin from 157.245.252.34 port 54238 Sep 26 12:17:55 server2 sshd[3901]: Failed password for invalid user admin from 157.245.252.34 port 54238 ssh2 Sep 26 12:20:22 server2 sshd[4480]: Invalid user julia from 157.245.252.34 port 44052 |
2020-09-26 21:39:21 |
| 20.55.4.26 | attackbotsspam | Sep 26 02:31:18 scw-tender-jepsen sshd[9362]: Failed password for root from 20.55.4.26 port 16995 ssh2 Sep 26 13:31:04 scw-tender-jepsen sshd[23534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.55.4.26 |
2020-09-26 22:04:01 |
| 1.2.197.110 | attackspam | 2020-03-11T01:04:52.000470suse-nuc sshd[16764]: Invalid user avanthi from 1.2.197.110 port 61005 ... |
2020-09-26 21:36:10 |
| 89.216.99.251 | attackspam | Invalid user userftp from 89.216.99.251 port 54366 |
2020-09-26 22:06:47 |
| 24.255.39.94 | attack | SSH break in attempt ... |
2020-09-26 21:50:58 |
| 128.90.181.239 | attackspam | [f2b] sshd bruteforce, retries: 1 |
2020-09-26 21:33:14 |
| 1.119.44.250 | attackbots | 2020-03-07T17:33:47.461003suse-nuc sshd[8491]: Invalid user 22 from 1.119.44.250 port 32796 ... |
2020-09-26 22:07:42 |
| 1.193.39.196 | attackspam | 2020-01-18T06:23:51.410356suse-nuc sshd[27897]: Invalid user facturacion from 1.193.39.196 port 58998 ... |
2020-09-26 21:46:29 |
| 104.248.158.95 | attackspambots | 104.248.158.95 - - [26/Sep/2020:09:58:59 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.158.95 - - [26/Sep/2020:09:59:02 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.158.95 - - [26/Sep/2020:09:59:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-26 22:00:40 |
| 20.52.43.14 | attackspambots | SSH invalid-user multiple login attempts |
2020-09-26 21:44:44 |
| 85.209.0.76 | attack | Found on 85.209.0.0/24 Dark List de / proto=6 . srcport=31872 . dstport=3128 . (625) |
2020-09-26 22:07:10 |