City: unknown
Region: unknown
Country: Malaysia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.125.0.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48116
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;49.125.0.53. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 23:05:40 CST 2025
;; MSG SIZE rcvd: 104Host 53.0.125.49.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 53.0.125.49.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 89.145.184.222 | attackspambots | Oct 25 12:04:25 system,error,critical: login failure for user admin from 89.145.184.222 via telnet Oct 25 12:04:26 system,error,critical: login failure for user root from 89.145.184.222 via telnet Oct 25 12:04:28 system,error,critical: login failure for user administrator from 89.145.184.222 via telnet Oct 25 12:04:32 system,error,critical: login failure for user root from 89.145.184.222 via telnet Oct 25 12:04:34 system,error,critical: login failure for user admin from 89.145.184.222 via telnet Oct 25 12:04:36 system,error,critical: login failure for user root from 89.145.184.222 via telnet Oct 25 12:04:40 system,error,critical: login failure for user guest from 89.145.184.222 via telnet Oct 25 12:04:41 system,error,critical: login failure for user root from 89.145.184.222 via telnet Oct 25 12:04:43 system,error,critical: login failure for user root from 89.145.184.222 via telnet Oct 25 12:04:48 system,error,critical: login failure for user root from 89.145.184.222 via telnet |
2019-10-26 00:30:10 |
| 45.125.65.48 | attackspambots | \[2019-10-25 12:31:20\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-25T12:31:20.068-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="2085500001148297661002",SessionID="0x7fdf2c3ecfb8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.65.48/54994",ACLName="no_extension_match" \[2019-10-25 12:31:27\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-25T12:31:27.810-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="360901148778878004",SessionID="0x7fdf2c665838",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.65.48/62693",ACLName="no_extension_match" \[2019-10-25 12:32:11\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-25T12:32:11.606-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="2085600001148297661002",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.65.48/49520",A |
2019-10-26 00:34:03 |
| 112.21.191.253 | attackspam | Oct 25 10:35:42 django sshd[77234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.21.191.253 user=r.r Oct 25 10:35:43 django sshd[77234]: Failed password for r.r from 112.21.191.253 port 59902 ssh2 Oct 25 10:35:44 django sshd[77235]: Received disconnect from 112.21.191.253: 11: Bye Bye Oct 25 10:59:33 django sshd[79002]: Invalid user tecnici from 112.21.191.253 Oct 25 10:59:33 django sshd[79002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.21.191.253 Oct 25 10:59:35 django sshd[79002]: Failed password for invalid user tecnici from 112.21.191.253 port 56942 ssh2 Oct 25 10:59:36 django sshd[79003]: Received disconnect from 112.21.191.253: 11: Bye Bye Oct 25 11:04:50 django sshd[79470]: Invalid user hm from 112.21.191.253 Oct 25 11:04:50 django sshd[79470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.21.191.253 ........ ----------------------------------------------- |
2019-10-26 00:08:53 |
| 49.207.183.45 | attackspam | $f2bV_matches |
2019-10-26 00:52:37 |
| 183.60.143.57 | attack | Unauthorised access (Oct 25) SRC=183.60.143.57 LEN=40 TOS=0x10 PREC=0x40 TTL=239 ID=56557 TCP DPT=1433 WINDOW=1024 SYN |
2019-10-26 00:11:05 |
| 37.186.130.54 | attackbots | php WP PHPmyadamin ABUSE blocked for 12h |
2019-10-26 00:19:08 |
| 218.197.16.152 | attackbotsspam | Oct 25 13:57:31 echo390 sshd[3928]: Failed password for root from 218.197.16.152 port 46563 ssh2 Oct 25 14:04:11 echo390 sshd[6181]: Invalid user ux from 218.197.16.152 port 36712 Oct 25 14:04:11 echo390 sshd[6181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.197.16.152 Oct 25 14:04:11 echo390 sshd[6181]: Invalid user ux from 218.197.16.152 port 36712 Oct 25 14:04:13 echo390 sshd[6181]: Failed password for invalid user ux from 218.197.16.152 port 36712 ssh2 ... |
2019-10-26 00:44:54 |
| 197.114.64.94 | attackspambots | Oct 25 14:01:13 mxgate1 postfix/postscreen[20152]: CONNECT from [197.114.64.94]:40457 to [176.31.12.44]:25 Oct 25 14:01:13 mxgate1 postfix/dnsblog[20677]: addr 197.114.64.94 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 25 14:01:19 mxgate1 postfix/postscreen[20152]: DNSBL rank 2 for [197.114.64.94]:40457 Oct x@x Oct 25 14:01:19 mxgate1 postfix/postscreen[20152]: HANGUP after 0.86 from [197.114.64.94]:40457 in tests after SMTP handshake Oct 25 14:01:19 mxgate1 postfix/postscreen[20152]: DISCONNECT [197.114.64.94]:40457 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=197.114.64.94 |
2019-10-26 00:14:37 |
| 159.89.134.199 | attackspambots | 2019-10-25T17:43:40.230758lon01.zurich-datacenter.net sshd\[4867\]: Invalid user test7 from 159.89.134.199 port 37642 2019-10-25T17:43:40.237698lon01.zurich-datacenter.net sshd\[4867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.134.199 2019-10-25T17:43:42.185701lon01.zurich-datacenter.net sshd\[4867\]: Failed password for invalid user test7 from 159.89.134.199 port 37642 ssh2 2019-10-25T17:47:59.617058lon01.zurich-datacenter.net sshd\[4965\]: Invalid user support from 159.89.134.199 port 48984 2019-10-25T17:47:59.623320lon01.zurich-datacenter.net sshd\[4965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.134.199 ... |
2019-10-26 00:24:47 |
| 210.51.161.210 | attack | Oct 25 19:09:57 hosting sshd[2807]: Invalid user !QWERFV1qwerfv from 210.51.161.210 port 39072 ... |
2019-10-26 00:33:03 |
| 110.18.243.70 | attackspambots | 2019-10-25T23:05:43.804439enmeeting.mahidol.ac.th sshd\[13860\]: User root from 110.18.243.70 not allowed because not listed in AllowUsers 2019-10-25T23:05:43.931870enmeeting.mahidol.ac.th sshd\[13860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.18.243.70 user=root 2019-10-25T23:05:45.840482enmeeting.mahidol.ac.th sshd\[13860\]: Failed password for invalid user root from 110.18.243.70 port 34975 ssh2 ... |
2019-10-26 00:20:38 |
| 159.89.1.19 | attackspambots | 159.89.1.19 - - [25/Oct/2019:18:28:12 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.1.19 - - [25/Oct/2019:18:28:13 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.1.19 - - [25/Oct/2019:18:28:13 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.1.19 - - [25/Oct/2019:18:28:13 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.1.19 - - [25/Oct/2019:18:28:14 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.1.19 - - [25/Oct/2019:18:28:19 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-10-26 00:48:20 |
| 197.234.132.115 | attackbotsspam | Automatic report - Banned IP Access |
2019-10-26 00:46:45 |
| 179.90.131.89 | attackbots | Oct 25 13:55:48 v32671 sshd[26721]: Address 179.90.131.89 maps to 179-90-131-89.user.vivozap.com.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 25 13:55:49 v32671 sshd[26721]: Received disconnect from 179.90.131.89: 11: Bye Bye [preauth] Oct 25 13:55:56 v32671 sshd[26723]: Address 179.90.131.89 maps to 179-90-131-89.user.vivozap.com.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 25 13:55:57 v32671 sshd[26723]: Received disconnect from 179.90.131.89: 11: Bye Bye [preauth] Oct 25 13:55:59 v32671 sshd[26725]: Address 179.90.131.89 maps to 179-90-131-89.user.vivozap.com.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 25 13:55:59 v32671 sshd[26725]: Invalid user ubnt from 179.90.131.89 Oct 25 13:56:00 v32671 sshd[26725]: Received disconnect from 179.90.131.89: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=179.90.131.89 |
2019-10-26 00:34:37 |
| 111.85.191.131 | attack | Oct 25 18:29:00 mail sshd[23480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.85.191.131 Oct 25 18:29:01 mail sshd[23480]: Failed password for invalid user tss3 from 111.85.191.131 port 35162 ssh2 Oct 25 18:33:55 mail sshd[25428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.85.191.131 |
2019-10-26 00:47:01 |