City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.53.164.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25787
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;48.53.164.52. IN A
;; AUTHORITY SECTION:
. 269 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024052601 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 26 17:29:31 CST 2024
;; MSG SIZE rcvd: 105Host 52.164.53.48.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 52.164.53.48.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 23.251.142.181 | attack | Oct 15 06:53:31 icinga sshd[28289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.251.142.181 Oct 15 06:53:33 icinga sshd[28289]: Failed password for invalid user yuanwd from 23.251.142.181 port 37406 ssh2 ... |
2019-10-15 15:03:47 |
| 111.231.239.143 | attackspam | Oct 14 19:58:51 php1 sshd\[29950\]: Invalid user sync1 from 111.231.239.143 Oct 14 19:58:51 php1 sshd\[29950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.239.143 Oct 14 19:58:53 php1 sshd\[29950\]: Failed password for invalid user sync1 from 111.231.239.143 port 53894 ssh2 Oct 14 20:04:22 php1 sshd\[30408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.239.143 user=root Oct 14 20:04:24 php1 sshd\[30408\]: Failed password for root from 111.231.239.143 port 34368 ssh2 |
2019-10-15 15:25:26 |
| 200.24.238.107 | attack | Scanning and Vuln Attempts |
2019-10-15 15:24:06 |
| 114.220.152.103 | attackbots | /download/file.php?id=230&sid=6afb59e651be86cd1980b1e43510b90f |
2019-10-15 15:13:22 |
| 45.9.123.247 | attackspam | [Aegis] @ 2019-10-15 04:50:04 0100 -> A web attack returned code 200 (success). |
2019-10-15 15:08:24 |
| 219.140.226.9 | attack | Oct 15 07:52:01 eventyay sshd[18725]: Failed password for root from 219.140.226.9 port 18875 ssh2 Oct 15 07:56:53 eventyay sshd[18941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.140.226.9 Oct 15 07:56:55 eventyay sshd[18941]: Failed password for invalid user trevor from 219.140.226.9 port 55075 ssh2 ... |
2019-10-15 14:46:32 |
| 87.118.112.63 | attackbots | www.familiengesundheitszentrum-fulda.de 87.118.112.63 \[15/Oct/2019:05:50:05 +0200\] "POST /xmlrpc.php HTTP/1.0" 301 537 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_10_5\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/68.0.3440.106 Safari/537.36" familiengesundheitszentrum-fulda.de 87.118.112.63 \[15/Oct/2019:05:50:08 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 3777 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_10_5\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/68.0.3440.106 Safari/537.36" |
2019-10-15 15:11:07 |
| 2.59.21.207 | attack | [Aegis] @ 2019-10-15 04:50:08 0100 -> A web attack returned code 200 (success). |
2019-10-15 15:07:21 |
| 62.234.103.7 | attack | 2019-10-15T06:14:30.196250abusebot-3.cloudsearch.cf sshd\[23469\]: Invalid user aldikact from 62.234.103.7 port 50458 |
2019-10-15 15:03:00 |
| 138.197.189.138 | attackspambots | Oct 14 14:43:59 fv15 sshd[12792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.138 user=r.r Oct 14 14:44:01 fv15 sshd[12792]: Failed password for r.r from 138.197.189.138 port 55344 ssh2 Oct 14 14:44:01 fv15 sshd[12792]: Received disconnect from 138.197.189.138: 11: Bye Bye [preauth] Oct 14 14:49:54 fv15 sshd[4094]: Failed password for invalid user fwong from 138.197.189.138 port 52014 ssh2 Oct 14 14:49:54 fv15 sshd[4094]: Received disconnect from 138.197.189.138: 11: Bye Bye [preauth] Oct 14 14:53:46 fv15 sshd[8443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.138 user=r.r Oct 14 14:53:48 fv15 sshd[8443]: Failed password for r.r from 138.197.189.138 port 36594 ssh2 Oct 14 14:53:48 fv15 sshd[8443]: Received disconnect from 138.197.189.138: 11: Bye Bye [preauth] Oct 14 14:57:38 fv15 sshd[11034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=........ ------------------------------- |
2019-10-15 15:03:17 |
| 190.116.13.20 | attack | Fail2Ban Ban Triggered SMTP Abuse Attempt |
2019-10-15 14:47:05 |
| 14.231.148.104 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 15-10-2019 04:50:21. |
2019-10-15 14:57:46 |
| 112.64.170.166 | attackspambots | Oct 15 07:26:26 meumeu sshd[28482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.170.166 Oct 15 07:26:28 meumeu sshd[28482]: Failed password for invalid user ks from 112.64.170.166 port 60176 ssh2 Oct 15 07:31:21 meumeu sshd[29087]: Failed password for root from 112.64.170.166 port 41266 ssh2 ... |
2019-10-15 14:49:53 |
| 45.95.99.230 | attackbotsspam | [Aegis] @ 2019-10-15 04:50:23 0100 -> A web attack returned code 200 (success). |
2019-10-15 14:46:11 |
| 139.159.27.62 | attackbots | Oct 15 07:14:53 ns381471 sshd[22826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.159.27.62 Oct 15 07:14:55 ns381471 sshd[22826]: Failed password for invalid user ubuntu from 139.159.27.62 port 49786 ssh2 Oct 15 07:20:01 ns381471 sshd[23032]: Failed password for root from 139.159.27.62 port 58696 ssh2 |
2019-10-15 15:26:39 |