City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.25.109.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 377
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;48.25.109.56. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 15:18:12 CST 2025
;; MSG SIZE rcvd: 105Host 56.109.25.48.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 56.109.25.48.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 198.199.76.81 | attackspambots | Nov 4 06:57:17 vayu sshd[703158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.76.81 user=r.r Nov 4 06:57:19 vayu sshd[703158]: Failed password for r.r from 198.199.76.81 port 49270 ssh2 Nov 4 06:57:19 vayu sshd[703158]: Received disconnect from 198.199.76.81: 11: Bye Bye [preauth] Nov 4 07:09:41 vayu sshd[707600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.76.81 user=r.r Nov 4 07:09:43 vayu sshd[707600]: Failed password for r.r from 198.199.76.81 port 57392 ssh2 Nov 4 07:09:44 vayu sshd[707600]: Received disconnect from 198.199.76.81: 11: Bye Bye [preauth] Nov 4 07:13:13 vayu sshd[708941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.76.81 user=r.r Nov 4 07:13:15 vayu sshd[708941]: Failed password for r.r from 198.199.76.81 port 39654 ssh2 Nov 4 07:13:15 vayu sshd[708941]: Received disconnect from 198.199........ ------------------------------- |
2019-11-06 19:02:06 |
| 62.211.221.211 | attackbotsspam | Honeypot attack, port: 23, PTR: host211-221-dynamic.211-62-r.retail.telecomitalia.it. |
2019-11-06 18:43:28 |
| 104.131.139.147 | attack | B: /wp-login.php attack |
2019-11-06 18:45:14 |
| 125.212.250.163 | attackspambots | WordPress login Brute force / Web App Attack on client site. |
2019-11-06 18:53:50 |
| 74.65.88.250 | attack | Nov 4 07:22:53 rb06 sshd[6458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-74-65-88-250.stny.res.rr.com user=r.r Nov 4 07:22:55 rb06 sshd[6458]: Failed password for r.r from 74.65.88.250 port 33542 ssh2 Nov 4 07:22:55 rb06 sshd[6458]: Received disconnect from 74.65.88.250: 11: Bye Bye [preauth] Nov 4 07:31:31 rb06 sshd[8883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-74-65-88-250.stny.res.rr.com user=r.r Nov 4 07:31:33 rb06 sshd[8883]: Failed password for r.r from 74.65.88.250 port 42516 ssh2 Nov 4 07:31:33 rb06 sshd[8883]: Received disconnect from 74.65.88.250: 11: Bye Bye [preauth] Nov 4 07:35:17 rb06 sshd[4834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-74-65-88-250.stny.res.rr.com user=r.r Nov 4 07:35:19 rb06 sshd[4834]: Failed password for r.r from 74.65.88.250 port 54224 ssh2 Nov 4 07:35:19 rb06 sshd[4834]........ ------------------------------- |
2019-11-06 19:14:02 |
| 80.82.78.100 | attackspam | firewall-block, port(s): 648/udp, 998/udp |
2019-11-06 19:05:08 |
| 185.84.188.138 | attackspam | [portscan] Port scan |
2019-11-06 18:48:24 |
| 50.27.237.237 | attackbots | Unauthorised access (Nov 6) SRC=50.27.237.237 LEN=40 TOS=0x10 PREC=0x40 TTL=54 ID=15784 TCP DPT=8080 WINDOW=39040 SYN Unauthorised access (Nov 6) SRC=50.27.237.237 LEN=40 TOS=0x10 PREC=0x40 TTL=54 ID=35293 TCP DPT=8080 WINDOW=38771 SYN Unauthorised access (Nov 5) SRC=50.27.237.237 LEN=40 TOS=0x10 PREC=0x40 TTL=54 ID=46435 TCP DPT=8080 WINDOW=38771 SYN Unauthorised access (Nov 5) SRC=50.27.237.237 LEN=40 TOS=0x10 PREC=0x40 TTL=54 ID=51013 TCP DPT=8080 WINDOW=39040 SYN Unauthorised access (Nov 5) SRC=50.27.237.237 LEN=40 TOS=0x10 PREC=0x40 TTL=54 ID=54047 TCP DPT=8080 WINDOW=39040 SYN Unauthorised access (Nov 4) SRC=50.27.237.237 LEN=40 TOS=0x10 PREC=0x40 TTL=54 ID=53853 TCP DPT=8080 WINDOW=39040 SYN Unauthorised access (Nov 3) SRC=50.27.237.237 LEN=40 TOS=0x10 PREC=0x40 TTL=54 ID=48012 TCP DPT=8080 WINDOW=39040 SYN Unauthorised access (Nov 3) SRC=50.27.237.237 LEN=40 TOS=0x10 PREC=0x40 TTL=54 ID=6530 TCP DPT=8080 WINDOW=39040 SYN |
2019-11-06 18:52:26 |
| 142.44.160.214 | attackbots | Nov 6 13:02:33 server sshd\[19858\]: User root from 142.44.160.214 not allowed because listed in DenyUsers Nov 6 13:02:33 server sshd\[19858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.160.214 user=root Nov 6 13:02:35 server sshd\[19858\]: Failed password for invalid user root from 142.44.160.214 port 34333 ssh2 Nov 6 13:06:51 server sshd\[8105\]: User root from 142.44.160.214 not allowed because listed in DenyUsers Nov 6 13:06:51 server sshd\[8105\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.160.214 user=root |
2019-11-06 19:08:48 |
| 66.50.11.146 | attack | Automatic report - Port Scan Attack |
2019-11-06 18:52:03 |
| 14.63.221.108 | attackbots | 2019-11-06T08:51:15.234660shield sshd\[28160\]: Invalid user Lotta from 14.63.221.108 port 36515 2019-11-06T08:51:15.239446shield sshd\[28160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.221.108 2019-11-06T08:51:17.044198shield sshd\[28160\]: Failed password for invalid user Lotta from 14.63.221.108 port 36515 ssh2 2019-11-06T08:55:51.009802shield sshd\[28813\]: Invalid user gb from 14.63.221.108 port 55686 2019-11-06T08:55:51.014390shield sshd\[28813\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.221.108 |
2019-11-06 18:58:40 |
| 167.71.156.62 | attack | 167.71.156.62 - - [06/Nov/2019:11:06:50 +0200] "GET /components/com_hdflvplayer/hdflvplayer/download.php?f=../../../configuration.php HTTP/1.1" 404 196 "-" "python-requests/2.22.0" 167.71.156.62 - - [06/Nov/2019:11:06:51 +0200] "GET /index.php?option=com_macgallery&view=download&albumid=../../configuration.php HTTP/1.1" 404 1471 "-" "python-requests/2.22.0" 167.71.156.62 - - [06/Nov/2019:11:06:51 +0200] "GET /index.php?option=com_joomanager&controller=details&task=download&path=configuration.php HTTP/1.1" 404 1471 "-" "python-requests/2.22.0" 167.71.156.62 - - [06/Nov/2019:11:06:51 +0200] "GET /index.php?option=com_jtagmembersdirectory&task=attachment&download_file=/../../../../configuration.php HTTP/1.1" 404 1471 "-" "python-requests/2.22.0" |
2019-11-06 18:48:50 |
| 141.98.80.224 | attackbotsspam | 11/06/2019-07:25:23.611388 141.98.80.224 Protocol: 6 SURICATA SMTP tls rejected |
2019-11-06 18:42:55 |
| 49.235.35.12 | attackspam | Nov 6 06:17:00 ip-172-31-62-245 sshd\[25063\]: Invalid user koln from 49.235.35.12\ Nov 6 06:17:02 ip-172-31-62-245 sshd\[25063\]: Failed password for invalid user koln from 49.235.35.12 port 60738 ssh2\ Nov 6 06:21:27 ip-172-31-62-245 sshd\[25111\]: Invalid user changem from 49.235.35.12\ Nov 6 06:21:30 ip-172-31-62-245 sshd\[25111\]: Failed password for invalid user changem from 49.235.35.12 port 60318 ssh2\ Nov 6 06:25:27 ip-172-31-62-245 sshd\[25185\]: Invalid user luanvandiemcao from 49.235.35.12\ |
2019-11-06 18:38:30 |
| 38.143.223.252 | attackbots | 5x Failed Password |
2019-11-06 18:52:50 |