City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.75.145.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6838
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;5.75.145.66. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 08:26:20 CST 2025
;; MSG SIZE rcvd: 10466.145.75.5.in-addr.arpa domain name pointer bfa76d1c-3850-4784-8fa4-a551f6e10817.gedisa.famedly.care.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
66.145.75.5.in-addr.arpa name = bfa76d1c-3850-4784-8fa4-a551f6e10817.gedisa.famedly.care.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.152.219 | attackbots | php WP PHPmyadamin ABUSE blocked for 12h |
2020-06-12 13:09:09 |
| 92.255.110.146 | attack | Jun 12 07:10:11 h1745522 sshd[5819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.255.110.146 user=root Jun 12 07:10:13 h1745522 sshd[5819]: Failed password for root from 92.255.110.146 port 60398 ssh2 Jun 12 07:12:44 h1745522 sshd[5983]: Invalid user test from 92.255.110.146 port 1083 Jun 12 07:12:44 h1745522 sshd[5983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.255.110.146 Jun 12 07:12:44 h1745522 sshd[5983]: Invalid user test from 92.255.110.146 port 1083 Jun 12 07:12:46 h1745522 sshd[5983]: Failed password for invalid user test from 92.255.110.146 port 1083 ssh2 Jun 12 07:15:21 h1745522 sshd[6074]: Invalid user lusifen from 92.255.110.146 port 35296 Jun 12 07:15:21 h1745522 sshd[6074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.255.110.146 Jun 12 07:15:21 h1745522 sshd[6074]: Invalid user lusifen from 92.255.110.146 port 35296 Jun 12 07:15: ... |
2020-06-12 13:16:22 |
| 222.186.169.194 | attackspambots | SSH invalid-user multiple login attempts |
2020-06-12 13:17:19 |
| 195.74.38.119 | attackspambots | Automatic report - XMLRPC Attack |
2020-06-12 14:01:08 |
| 104.198.152.215 | attack | Port Scan detected! ... |
2020-06-12 13:11:41 |
| 222.186.173.201 | attack | Jun 12 06:52:16 sd-69548 sshd[1321175]: Unable to negotiate with 222.186.173.201 port 39476: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Jun 12 07:10:18 sd-69548 sshd[1322475]: Unable to negotiate with 222.186.173.201 port 16498: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... |
2020-06-12 13:13:28 |
| 106.12.151.250 | attackspambots | Jun 12 00:02:33 Tower sshd[42912]: Connection from 106.12.151.250 port 43260 on 192.168.10.220 port 22 rdomain "" Jun 12 00:02:35 Tower sshd[42912]: Invalid user mingdong from 106.12.151.250 port 43260 Jun 12 00:02:35 Tower sshd[42912]: error: Could not get shadow information for NOUSER Jun 12 00:02:35 Tower sshd[42912]: Failed password for invalid user mingdong from 106.12.151.250 port 43260 ssh2 Jun 12 00:02:36 Tower sshd[42912]: Received disconnect from 106.12.151.250 port 43260:11: Bye Bye [preauth] Jun 12 00:02:36 Tower sshd[42912]: Disconnected from invalid user mingdong 106.12.151.250 port 43260 [preauth] |
2020-06-12 14:03:14 |
| 5.62.20.29 | attackspam | (From massaro.elvira@outlook.com) Good afternoon, I was just on your site and filled out your "contact us" form. The feedback page on your site sends you these messages to your email account which is why you're reading through my message right now right? That's the most important achievement with any type of online ad, making people actually READ your message and I did that just now with you! If you have an ad message you would like to promote to tons of websites via their contact forms in the US or anywhere in the world send me a quick note now, I can even focus on your required niches and my pricing is super low. Reply here: cluffcathey@gmail.com cease spam https://bit.ly/3eOn4NP |
2020-06-12 13:20:58 |
| 103.200.22.126 | attackbotsspam | Jun 11 18:44:40 php1 sshd\[3064\]: Invalid user fog from 103.200.22.126 Jun 11 18:44:40 php1 sshd\[3064\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.200.22.126 Jun 11 18:44:43 php1 sshd\[3064\]: Failed password for invalid user fog from 103.200.22.126 port 56154 ssh2 Jun 11 18:48:38 php1 sshd\[3435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.200.22.126 user=root Jun 11 18:48:39 php1 sshd\[3435\]: Failed password for root from 103.200.22.126 port 56128 ssh2 |
2020-06-12 14:02:38 |
| 106.52.40.48 | attackbots | Jun 12 06:52:15 * sshd[21750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.40.48 Jun 12 06:52:17 * sshd[21750]: Failed password for invalid user vnc from 106.52.40.48 port 59808 ssh2 |
2020-06-12 13:52:18 |
| 118.70.72.103 | attack | Jun 12 07:01:24 minden010 sshd[2459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.72.103 Jun 12 07:01:27 minden010 sshd[2459]: Failed password for invalid user csserver from 118.70.72.103 port 48394 ssh2 Jun 12 07:05:20 minden010 sshd[3406]: Failed password for root from 118.70.72.103 port 38922 ssh2 ... |
2020-06-12 13:08:48 |
| 45.62.121.125 | attackbotsspam | Jun 12 05:00:18 hcbbdb sshd\[1012\]: Invalid user tomcat from 45.62.121.125 Jun 12 05:00:18 hcbbdb sshd\[1012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.62.121.125.16clouds.com Jun 12 05:00:20 hcbbdb sshd\[1012\]: Failed password for invalid user tomcat from 45.62.121.125 port 60222 ssh2 Jun 12 05:07:57 hcbbdb sshd\[1823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.62.121.125.16clouds.com user=root Jun 12 05:07:59 hcbbdb sshd\[1823\]: Failed password for root from 45.62.121.125 port 36304 ssh2 |
2020-06-12 13:41:09 |
| 0.0.10.45 | attack | Jun 12 07:30:06 debian-2gb-nbg1-2 kernel: \[14198529.113439\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:86:dd SRC=2605:9880:0300:0700:011b:0860:0011:173e DST=2a01:04f8:1c1c:6451:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=244 FLOWLBL=0 PROTO=TCP SPT=9999 DPT=9719 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-06-12 13:53:45 |
| 218.92.0.165 | attackbots | 2020-06-12T05:43:46.778753shield sshd\[24817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.165 user=root 2020-06-12T05:43:48.754704shield sshd\[24817\]: Failed password for root from 218.92.0.165 port 51568 ssh2 2020-06-12T05:43:52.061757shield sshd\[24817\]: Failed password for root from 218.92.0.165 port 51568 ssh2 2020-06-12T05:43:54.911159shield sshd\[24817\]: Failed password for root from 218.92.0.165 port 51568 ssh2 2020-06-12T05:43:59.606368shield sshd\[24817\]: Failed password for root from 218.92.0.165 port 51568 ssh2 |
2020-06-12 13:45:32 |
| 222.186.30.57 | attackspambots | Jun 12 07:16:18 home sshd[11562]: Failed password for root from 222.186.30.57 port 21749 ssh2 Jun 12 07:16:28 home sshd[11579]: Failed password for root from 222.186.30.57 port 41977 ssh2 ... |
2020-06-12 13:22:48 |