City: unknown
Region: unknown
Country: United Kingdom
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.254.56.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1822
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;5.254.56.242. IN A
;; AUTHORITY SECTION:
. 251 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020601 1800 900 604800 86400
;; Query time: 50 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 12:32:13 CST 2022
;; MSG SIZE rcvd: 105Host 242.56.254.5.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 242.56.254.5.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.47.104.148 | attackspambots | Aug 6 08:44:12 srv00 sshd[43645]: fatal: Unable to negotiate whostnameh 185.47.104.148 port 34697: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Aug 6 08:44:22 srv00 sshd[43647]: fatal: Unable to negotiate whostnameh 185.47.104.148 port 14214: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Aug 6 08:44:32 srv00 sshd[43649]: fatal: Unable to negotiate whostnameh 185.47.104.148 port 37955: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Aug 6 08:44:42 srv00 sshd[43651]: fatal: Unable to negotiate whostnameh 185.47.104.148 port 19359: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman........ ------------------------------ |
2019-08-07 02:47:26 |
| 119.147.152.111 | attack | 19/8/6@07:15:15: FAIL: Alarm-Intrusion address from=119.147.152.111 ... |
2019-08-07 02:51:01 |
| 165.22.72.226 | attack | Automatic report - Banned IP Access |
2019-08-07 02:36:57 |
| 104.248.254.51 | attackspam | Aug 6 15:23:06 vpn01 sshd\[31171\]: Invalid user admin from 104.248.254.51 Aug 6 15:23:06 vpn01 sshd\[31171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.254.51 Aug 6 15:23:08 vpn01 sshd\[31171\]: Failed password for invalid user admin from 104.248.254.51 port 36298 ssh2 |
2019-08-07 02:39:33 |
| 181.105.98.237 | attackbots | Automatic report - Port Scan Attack |
2019-08-07 02:48:13 |
| 124.131.112.56 | attack | Aug 6 11:15:15 DDOS Attack: SRC=124.131.112.56 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=48 DF PROTO=TCP SPT=29285 DPT=80 WINDOW=0 RES=0x00 RST URGP=0 |
2019-08-07 02:50:40 |
| 220.92.16.102 | attackspam | Aug 6 07:46:32 master sshd[21714]: Failed password for invalid user cod from 220.92.16.102 port 39374 ssh2 Aug 6 08:56:46 master sshd[22406]: Failed password for invalid user ftpusr from 220.92.16.102 port 57206 ssh2 Aug 6 09:37:55 master sshd[23097]: Failed password for invalid user raamatukogu from 220.92.16.102 port 54806 ssh2 |
2019-08-07 02:19:18 |
| 139.59.25.230 | attackbotsspam | Aug 6 20:06:27 OPSO sshd\[23271\]: Invalid user mms from 139.59.25.230 port 39796 Aug 6 20:06:27 OPSO sshd\[23271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.25.230 Aug 6 20:06:29 OPSO sshd\[23271\]: Failed password for invalid user mms from 139.59.25.230 port 39796 ssh2 Aug 6 20:11:30 OPSO sshd\[23832\]: Invalid user xbox from 139.59.25.230 port 34246 Aug 6 20:11:30 OPSO sshd\[23832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.25.230 |
2019-08-07 02:13:47 |
| 222.133.102.160 | attackspambots | Aug 6 11:15:41 DDOS Attack: SRC=222.133.102.160 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=47 DF PROTO=TCP SPT=53842 DPT=80 WINDOW=0 RES=0x00 RST URGP=0 |
2019-08-07 02:36:20 |
| 112.85.42.188 | attack | Aug 6 19:25:46 MK-Soft-Root1 sshd\[18567\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.188 user=root Aug 6 19:25:48 MK-Soft-Root1 sshd\[18567\]: Failed password for root from 112.85.42.188 port 28737 ssh2 Aug 6 19:25:51 MK-Soft-Root1 sshd\[18567\]: Failed password for root from 112.85.42.188 port 28737 ssh2 ... |
2019-08-07 02:21:35 |
| 180.126.231.222 | attackbots | Aug 06 05:51:21 askasleikir sshd[29539]: Failed password for root from 180.126.231.222 port 59751 ssh2 Aug 06 05:50:10 askasleikir sshd[29489]: Failed password for root from 180.126.231.222 port 43647 ssh2 Aug 06 05:51:41 askasleikir sshd[29554]: Failed password for root from 180.126.231.222 port 35573 ssh2 |
2019-08-07 02:58:37 |
| 62.150.131.191 | attackbotsspam | Automatic report - Port Scan Attack |
2019-08-07 02:53:30 |
| 188.226.250.69 | attack | Automatic report - Banned IP Access |
2019-08-07 02:21:04 |
| 139.59.171.46 | attack | www.geburtshaus-fulda.de 139.59.171.46 \[06/Aug/2019:20:55:30 +0200\] "POST /wp-login.php HTTP/1.1" 200 5786 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.geburtshaus-fulda.de 139.59.171.46 \[06/Aug/2019:20:55:31 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4106 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-08-07 03:07:12 |
| 112.217.225.59 | attack | Aug 7 00:57:54 localhost sshd[20896]: Invalid user postgres from 112.217.225.59 port 34200 ... |
2019-08-07 02:14:07 |