City: Dushanbe
Region: Dushanbe
Country: Tajikistan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.81.37.78
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56646
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.81.37.78. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025091401 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 15 11:46:18 CST 2025
;; MSG SIZE rcvd: 104b'Host 78.37.81.45.in-addr.arpa. not found: 3(NXDOMAIN)
'server can't find 45.81.37.78.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 2001:bc8:4400:2500::4:409 | attackspam | [munged]::443 2001:bc8:4400:2500::4:409 - - [13/Oct/2019:22:16:35 +0200] "POST /[munged]: HTTP/1.1" 200 6737 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 2001:bc8:4400:2500::4:409 - - [13/Oct/2019:22:16:37 +0200] "POST /[munged]: HTTP/1.1" 200 6599 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-10-14 04:33:53 |
| 168.194.205.49 | attackbots | Mar 8 19:54:50 dillonfme sshd\[29012\]: User root from 168.194.205.49 not allowed because not listed in AllowUsers Mar 8 19:54:50 dillonfme sshd\[29012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.194.205.49 user=root Mar 8 19:54:52 dillonfme sshd\[29012\]: Failed password for invalid user root from 168.194.205.49 port 35912 ssh2 Mar 8 20:00:33 dillonfme sshd\[29125\]: Invalid user contact from 168.194.205.49 port 45758 Mar 8 20:00:33 dillonfme sshd\[29125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.194.205.49 ... |
2019-10-14 04:44:49 |
| 201.15.60.75 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/201.15.60.75/ BR - 1H : (178) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN8167 IP : 201.15.60.75 CIDR : 201.15.0.0/18 PREFIX COUNT : 299 UNIQUE IP COUNT : 4493824 WYKRYTE ATAKI Z ASN8167 : 1H - 1 3H - 2 6H - 2 12H - 5 24H - 9 DateTime : 2019-10-13 22:16:52 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-14 04:17:01 |
| 168.232.8.9 | attackspambots | Mar 9 03:50:55 dillonfme sshd\[11930\]: Invalid user guyoef5 from 168.232.8.9 port 53540 Mar 9 03:50:55 dillonfme sshd\[11930\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.8.9 Mar 9 03:50:57 dillonfme sshd\[11930\]: Failed password for invalid user guyoef5 from 168.232.8.9 port 53540 ssh2 Mar 9 03:59:53 dillonfme sshd\[12107\]: Invalid user testftp from 168.232.8.9 port 44684 Mar 9 03:59:53 dillonfme sshd\[12107\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.8.9 ... |
2019-10-14 04:34:15 |
| 45.55.93.245 | attack | WordPress wp-login brute force :: 45.55.93.245 0.044 BYPASS [14/Oct/2019:07:16:41 1100] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-10-14 04:31:34 |
| 81.22.45.65 | attackbots | 10/13/2019-22:25:40.446599 81.22.45.65 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-14 04:27:23 |
| 168.232.49.167 | attackspambots | Feb 17 21:21:17 dillonfme sshd\[17232\]: Invalid user nobody4 from 168.232.49.167 port 38952 Feb 17 21:21:17 dillonfme sshd\[17232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.49.167 Feb 17 21:21:18 dillonfme sshd\[17232\]: Failed password for invalid user nobody4 from 168.232.49.167 port 38952 ssh2 Feb 17 21:26:38 dillonfme sshd\[17561\]: Invalid user git from 168.232.49.167 port 58284 Feb 17 21:26:38 dillonfme sshd\[17561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.49.167 ... |
2019-10-14 04:38:34 |
| 91.134.140.32 | attackspambots | 2019-10-13T20:16:31.963727abusebot-5.cloudsearch.cf sshd\[11400\]: Invalid user swsgest from 91.134.140.32 port 59080 |
2019-10-14 04:39:43 |
| 149.202.214.11 | attack | Oct 13 10:27:19 sachi sshd\[10859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3070189.ip-149-202-214.eu user=root Oct 13 10:27:21 sachi sshd\[10859\]: Failed password for root from 149.202.214.11 port 35024 ssh2 Oct 13 10:30:57 sachi sshd\[11153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3070189.ip-149-202-214.eu user=root Oct 13 10:31:00 sachi sshd\[11153\]: Failed password for root from 149.202.214.11 port 46100 ssh2 Oct 13 10:34:42 sachi sshd\[11433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3070189.ip-149-202-214.eu user=root |
2019-10-14 04:42:33 |
| 129.213.179.77 | attackbots | Oct 14 01:46:49 areeb-Workstation sshd[5209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.179.77 Oct 14 01:46:51 areeb-Workstation sshd[5209]: Failed password for invalid user Centrum@123 from 129.213.179.77 port 15842 ssh2 ... |
2019-10-14 04:21:54 |
| 67.43.2.61 | attackspambots | Automatic report - XMLRPC Attack |
2019-10-14 04:13:48 |
| 185.90.117.5 | attackbots | 10/13/2019-16:16:52.943492 185.90.117.5 Protocol: 6 ET SCAN Potential SSH Scan |
2019-10-14 04:19:09 |
| 168.255.251.126 | attack | Feb 10 03:28:35 dillonfme sshd\[15426\]: Invalid user mb from 168.255.251.126 port 49392 Feb 10 03:28:35 dillonfme sshd\[15426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.255.251.126 Feb 10 03:28:37 dillonfme sshd\[15426\]: Failed password for invalid user mb from 168.255.251.126 port 49392 ssh2 Feb 10 03:33:56 dillonfme sshd\[15589\]: Invalid user ftpuser from 168.255.251.126 port 40298 Feb 10 03:33:56 dillonfme sshd\[15589\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.255.251.126 ... |
2019-10-14 04:32:53 |
| 168.232.51.93 | attack | Mar 16 21:06:27 yesfletchmain sshd\[31719\]: User root from 168.232.51.93 not allowed because not listed in AllowUsers Mar 16 21:06:27 yesfletchmain sshd\[31719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.51.93 user=root Mar 16 21:06:29 yesfletchmain sshd\[31719\]: Failed password for invalid user root from 168.232.51.93 port 46406 ssh2 Mar 16 21:12:00 yesfletchmain sshd\[32076\]: User root from 168.232.51.93 not allowed because not listed in AllowUsers Mar 16 21:12:00 yesfletchmain sshd\[32076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.51.93 user=root ... |
2019-10-14 04:37:53 |
| 79.107.210.108 | attackspambots | Here more information about 79.107.210.108 info: [Greece] 25472 Wind Hellas Telecommunications SA Connected: 3 servere(s) Reason: ssh Ports: 23 Services: telnet servere: Europe/Moscow (UTC+3) Found at blocklist: abuseat.org, spfbl.net myIP:89.179.244.250 [2019-10-12 07:04:48] (tcp) myIP:23 <- 79.107.210.108:46990 [2019-10-12 07:04:51] (tcp) myIP:23 <- 79.107.210.108:46990 [2019-10-12 07:04:57] (tcp) myIP:23 <- 79.107.210.108:46990 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=79.107.210.108 |
2019-10-14 04:10:37 |