City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.80.20.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7998
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;49.80.20.54. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025062700 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 27 23:24:31 CST 2025
;; MSG SIZE rcvd: 104Host 54.20.80.49.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 54.20.80.49.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.176.27.30 | attackbots | Feb 12 19:20:27 debian-2gb-nbg1-2 kernel: \[3790857.507836\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.30 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=32034 PROTO=TCP SPT=50861 DPT=15885 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-02-13 02:47:43 |
| 115.112.61.221 | attack | Invalid user danilete from 115.112.61.221 port 49414 |
2020-02-13 02:25:32 |
| 185.211.245.170 | attack | Feb 12 18:02:41 s1 postfix/submission/smtpd\[10124\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 12 18:02:48 s1 postfix/submission/smtpd\[10124\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 12 18:03:06 s1 postfix/submission/smtpd\[10124\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 12 18:03:13 s1 postfix/submission/smtpd\[10124\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 12 18:03:32 s1 postfix/submission/smtpd\[11294\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 12 18:03:37 s1 postfix/submission/smtpd\[10124\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 12 18:03:38 s1 postfix/submission/smtpd\[11288\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 12 18:03:39 s1 postfix/submission/smtpd\[11294\]: warn |
2020-02-13 02:32:57 |
| 110.90.99.49 | attack | Feb 10 19:59:14 nbi10516-7 sshd[19347]: Invalid user dsg from 110.90.99.49 port 43494 Feb 10 19:59:15 nbi10516-7 sshd[19347]: Failed password for invalid user dsg from 110.90.99.49 port 43494 ssh2 Feb 10 19:59:16 nbi10516-7 sshd[19347]: Received disconnect from 110.90.99.49 port 43494:11: Bye Bye [preauth] Feb 10 19:59:16 nbi10516-7 sshd[19347]: Disconnected from 110.90.99.49 port 43494 [preauth] Feb 10 20:14:41 nbi10516-7 sshd[22628]: Connection closed by 110.90.99.49 port 34158 [preauth] Feb 10 20:18:18 nbi10516-7 sshd[31767]: Invalid user mri from 110.90.99.49 port 59586 Feb 10 20:18:20 nbi10516-7 sshd[31767]: Failed password for invalid user mri from 110.90.99.49 port 59586 ssh2 Feb 10 20:18:20 nbi10516-7 sshd[31767]: Received disconnect from 110.90.99.49 port 59586:11: Bye Bye [preauth] Feb 10 20:18:20 nbi10516-7 sshd[31767]: Disconnected from 110.90.99.49 port 59586 [preauth] Feb 10 20:24:43 nbi10516-7 sshd[12462]: Connection closed by 110.90.99.49 port 41252 [pre........ ------------------------------- |
2020-02-13 02:28:08 |
| 222.185.244.178 | attackspambots | 02/12/2020-18:15:26.627568 222.185.244.178 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2020-02-13 02:29:14 |
| 85.105.221.112 | attack | Automatic report - Port Scan Attack |
2020-02-13 02:53:18 |
| 221.146.233.140 | attackbotsspam | Feb 12 16:47:42 MK-Soft-VM3 sshd[24055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.146.233.140 Feb 12 16:47:45 MK-Soft-VM3 sshd[24055]: Failed password for invalid user rosin from 221.146.233.140 port 50865 ssh2 ... |
2020-02-13 02:59:44 |
| 201.231.4.10 | attack | Brute force attempt |
2020-02-13 02:46:52 |
| 27.65.252.144 | attackspam | Unauthorised access (Feb 12) SRC=27.65.252.144 LEN=44 TTL=42 ID=25387 TCP DPT=23 WINDOW=8577 SYN |
2020-02-13 02:46:28 |
| 80.91.23.80 | attackspambots | port scan and connect, tcp 80 (http) |
2020-02-13 02:31:29 |
| 188.131.238.91 | attackbots | Feb 12 03:38:38 web9 sshd\[17205\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.238.91 user=root Feb 12 03:38:40 web9 sshd\[17205\]: Failed password for root from 188.131.238.91 port 48728 ssh2 Feb 12 03:42:48 web9 sshd\[17727\]: Invalid user tamarah from 188.131.238.91 Feb 12 03:42:48 web9 sshd\[17727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.238.91 Feb 12 03:42:50 web9 sshd\[17727\]: Failed password for invalid user tamarah from 188.131.238.91 port 44342 ssh2 |
2020-02-13 02:18:27 |
| 31.193.129.236 | attack | Feb 12 14:37:17 vbuntu sshd[27744]: refused connect from 31-193-129-236.static.as29550.net (31.193.129.236) Feb 12 14:39:17 vbuntu sshd[27982]: refused connect from 31-193-129-236.static.as29550.net (31.193.129.236) Feb 12 14:39:17 vbuntu sshd[27983]: refused connect from 31-193-129-236.static.as29550.net (31.193.129.236) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=31.193.129.236 |
2020-02-13 02:37:03 |
| 45.143.220.191 | attack | [2020-02-12 08:40:35] NOTICE[1148][C-0000861c] chan_sip.c: Call from '' (45.143.220.191:61991) to extension '01146586739261' rejected because extension not found in context 'public'. [2020-02-12 08:40:35] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-12T08:40:35.618-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146586739261",SessionID="0x7fd82c3c1c38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.191/61991",ACLName="no_extension_match" [2020-02-12 08:42:27] NOTICE[1148][C-0000861e] chan_sip.c: Call from '' (45.143.220.191:60895) to extension '901146586739261' rejected because extension not found in context 'public'. [2020-02-12 08:42:27] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-12T08:42:27.867-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="901146586739261",SessionID="0x7fd82c2bd8a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ... |
2020-02-13 02:36:40 |
| 60.167.23.25 | attack | Feb 12 08:39:23 neweola postfix/smtpd[21458]: connect from unknown[60.167.23.25] Feb 12 08:39:24 neweola postfix/smtpd[21458]: lost connection after AUTH from unknown[60.167.23.25] Feb 12 08:39:24 neweola postfix/smtpd[21458]: disconnect from unknown[60.167.23.25] ehlo=1 auth=0/1 commands=1/2 Feb 12 08:39:27 neweola postfix/smtpd[21479]: connect from unknown[60.167.23.25] Feb 12 08:39:28 neweola postfix/smtpd[21479]: lost connection after AUTH from unknown[60.167.23.25] Feb 12 08:39:28 neweola postfix/smtpd[21479]: disconnect from unknown[60.167.23.25] ehlo=1 auth=0/1 commands=1/2 Feb 12 08:39:29 neweola postfix/smtpd[21458]: connect from unknown[60.167.23.25] Feb 12 08:39:30 neweola postfix/smtpd[21458]: lost connection after AUTH from unknown[60.167.23.25] Feb 12 08:39:30 neweola postfix/smtpd[21458]: disconnect from unknown[60.167.23.25] ehlo=1 auth=0/1 commands=1/2 Feb 12 08:39:31 neweola postfix/smtpd[21479]: connect from unknown[60.167.23.25] Feb 12 08:39:31 neweo........ ------------------------------- |
2020-02-13 02:28:49 |
| 45.119.215.68 | attackspambots | SSH bruteforce (Triggered fail2ban) |
2020-02-13 02:56:58 |