City: unknown
Region: unknown
Country: Ghana
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.211.3.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37578
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.211.3.134. IN A
;; AUTHORITY SECTION:
. 469 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020091200 1800 900 604800 86400
;; Query time: 129 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 12 17:21:25 CST 2020
;; MSG SIZE rcvd: 116Host 134.3.211.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 134.3.211.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 141.156.198.128 | attackbotsspam | Sep 3 18:13:45 kunden sshd[19183]: Address 141.156.198.128 maps to pool-141-156-198-128.washdc.fios.verizon.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 3 18:13:45 kunden sshd[19183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.156.198.128 user=r.r Sep 3 18:13:47 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2 Sep 3 18:13:49 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2 Sep 3 18:13:52 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2 Sep 3 18:13:54 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2 Sep 3 18:13:57 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2 Sep 3 18:13:59 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2 Sep 3 18:13:59 kunden sshd[19183]: PAM 5 more authentication failu........ ------------------------------- |
2020-09-04 19:50:29 |
| 1.55.211.249 | attackbots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-09-04 19:53:08 |
| 15.207.21.107 | attackspam | 15.207.21.107 - - [04/Sep/2020:02:15:52 +0100] "POST /wp-login.php HTTP/1.1" 200 1874 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 15.207.21.107 - - [04/Sep/2020:02:16:10 +0100] "POST /wp-login.php HTTP/1.1" 200 1877 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 15.207.21.107 - - [04/Sep/2020:02:16:19 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-04 19:32:17 |
| 41.41.222.61 | attack | Honeypot attack, port: 445, PTR: host-41.41.222.61.tedata.net. |
2020-09-04 19:57:22 |
| 185.220.102.243 | attackbots | Automatic report - Banned IP Access |
2020-09-04 20:00:51 |
| 45.142.115.115 | attackspambots | Brute forcing email accounts |
2020-09-04 19:35:17 |
| 114.80.94.228 | attackbots | Automatic Fail2ban report - Trying login SSH |
2020-09-04 19:54:02 |
| 189.93.26.195 | attackspam | (sshd) Failed SSH login from 189.93.26.195 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 3 12:42:13 server5 sshd[22343]: Failed password for root from 189.93.26.195 port 35789 ssh2 Sep 3 12:42:16 server5 sshd[22415]: Failed password for root from 189.93.26.195 port 35790 ssh2 Sep 3 12:42:17 server5 sshd[22461]: Invalid user ubnt from 189.93.26.195 Sep 3 12:42:19 server5 sshd[22461]: Failed password for invalid user ubnt from 189.93.26.195 port 35791 ssh2 Sep 3 12:42:23 server5 sshd[22491]: Failed password for root from 189.93.26.195 port 35792 ssh2 |
2020-09-04 19:50:55 |
| 188.122.82.146 | attackspambots | 0,59-04/14 [bc01/m05] PostRequest-Spammer scoring: Durban01 |
2020-09-04 19:30:32 |
| 142.4.204.122 | attackbotsspam | Sep 4 12:27:56 mout sshd[24346]: Invalid user phoenix from 142.4.204.122 port 44031 Sep 4 12:27:58 mout sshd[24346]: Failed password for invalid user phoenix from 142.4.204.122 port 44031 ssh2 Sep 4 12:28:00 mout sshd[24346]: Disconnected from invalid user phoenix 142.4.204.122 port 44031 [preauth] |
2020-09-04 19:25:05 |
| 84.17.47.110 | attackspam | (From turbomavro@gmail.com) The leader in short-term investing in the cryptocurrency market. The leader in payments for the affiliate program. Investment program: Investment currency: BTC. The investment period is 2 days. Minimum profit is 10% Registration here: https://bit.ly/3gr3l6q Get + 10% every 2 days to your personal Bitcoin wallet in addition to your balance. For example: invest 0.1 bitcoins today, in 2 days you will receive 0.11 bitcoins in your personal bitcoin wallet. The best affiliate program - a real find for MLM agents 5% for the referral of the first level (direct registration) 3% for the referral of the second level 1% for the referral of the third level Referral bonuses are paid the next day after the referral donation. The bonus goes to your BTC address the day after the novice's donation. Any reinvestment of participants, the leader receives a full bonus! Registration here: https://bit.ly/3gr3l6q |
2020-09-04 20:01:25 |
| 193.118.53.197 | attackbots | Port scan denied |
2020-09-04 20:06:04 |
| 118.76.188.43 | attackspambots | Portscan detected |
2020-09-04 20:04:13 |
| 180.76.107.10 | attackspambots | Sep 4 11:33:37 cho sshd[2211676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.107.10 Sep 4 11:33:37 cho sshd[2211676]: Invalid user courier from 180.76.107.10 port 35574 Sep 4 11:33:39 cho sshd[2211676]: Failed password for invalid user courier from 180.76.107.10 port 35574 ssh2 Sep 4 11:38:19 cho sshd[2211896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.107.10 user=root Sep 4 11:38:21 cho sshd[2211896]: Failed password for root from 180.76.107.10 port 39858 ssh2 ... |
2020-09-04 19:51:48 |
| 182.122.13.198 | attack | Lines containing failures of 182.122.13.198 Sep 3 09:30:42 newdogma sshd[30747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.122.13.198 user=r.r Sep 3 09:30:45 newdogma sshd[30747]: Failed password for r.r from 182.122.13.198 port 59894 ssh2 Sep 3 09:30:46 newdogma sshd[30747]: Received disconnect from 182.122.13.198 port 59894:11: Bye Bye [preauth] Sep 3 09:30:46 newdogma sshd[30747]: Disconnected from authenticating user r.r 182.122.13.198 port 59894 [preauth] Sep 3 09:34:52 newdogma sshd[31619]: Invalid user temp1 from 182.122.13.198 port 12710 Sep 3 09:34:52 newdogma sshd[31619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.122.13.198 Sep 3 09:34:54 newdogma sshd[31619]: Failed password for invalid user temp1 from 182.122.13.198 port 12710 ssh2 Sep 3 09:34:54 newdogma sshd[31619]: Received disconnect from 182.122.13.198 port 12710:11: Bye Bye [preauth] Sep 3 09:3........ ------------------------------ |
2020-09-04 19:30:49 |