City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 53.153.166.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45777
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;53.153.166.245. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025062701 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 28 04:40:27 CST 2025
;; MSG SIZE rcvd: 107Host 245.166.153.53.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 245.166.153.53.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 195.24.129.234 | attackspam | 2020-09-01T21:07:02.885787cyberdyne sshd[2826698]: Failed password for invalid user dg from 195.24.129.234 port 55696 ssh2 2020-09-01T21:10:43.524335cyberdyne sshd[2827479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.24.129.234 user=root 2020-09-01T21:10:46.076617cyberdyne sshd[2827479]: Failed password for root from 195.24.129.234 port 34390 ssh2 2020-09-01T21:14:26.695203cyberdyne sshd[2827564]: Invalid user sistemas from 195.24.129.234 port 41342 ... |
2020-09-02 04:26:43 |
| 177.184.140.130 | attack | Sep 1 13:26:41 shivevps sshd[27545]: Bad protocol version identification '\024' from 177.184.140.130 port 36022 ... |
2020-09-02 04:32:45 |
| 192.99.10.39 | attack | 20 attempts against mh-misbehave-ban on leaf |
2020-09-02 04:26:56 |
| 123.160.1.247 | attackbotsspam | Sep 1 13:26:29 shivevps sshd[27291]: Bad protocol version identification '\024' from 123.160.1.247 port 34698 ... |
2020-09-02 04:43:36 |
| 195.158.21.134 | attack | 2020-09-01T22:08:24.748748vps751288.ovh.net sshd\[21520\]: Invalid user uploader from 195.158.21.134 port 48691 2020-09-01T22:08:24.755038vps751288.ovh.net sshd\[21520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.158.21.134 2020-09-01T22:08:27.111069vps751288.ovh.net sshd\[21520\]: Failed password for invalid user uploader from 195.158.21.134 port 48691 ssh2 2020-09-01T22:12:25.640067vps751288.ovh.net sshd\[21556\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.158.21.134 user=root 2020-09-01T22:12:27.414115vps751288.ovh.net sshd\[21556\]: Failed password for root from 195.158.21.134 port 52051 ssh2 |
2020-09-02 04:45:37 |
| 45.230.176.146 | attack | Sep 1 13:26:28 shivevps sshd[27336]: Bad protocol version identification '\024' from 45.230.176.146 port 55399 ... |
2020-09-02 04:45:01 |
| 209.17.96.50 | attackspambots | Port scan: Attack repeated for 24 hours |
2020-09-02 04:52:03 |
| 192.42.116.27 | attack | 3 failed attempts at connecting to SSH. |
2020-09-02 04:33:44 |
| 197.63.161.85 | attack | DATE:2020-09-01 14:26:02, IP:197.63.161.85, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-09-02 04:25:06 |
| 138.197.194.207 | attack | 138.197.194.207 - - \[01/Sep/2020:17:15:13 +0200\] "POST /wp-login.php HTTP/1.0" 200 3149 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 138.197.194.207 - - \[01/Sep/2020:17:15:16 +0200\] "POST /wp-login.php HTTP/1.0" 200 3152 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 138.197.194.207 - - \[01/Sep/2020:17:15:19 +0200\] "POST /wp-login.php HTTP/1.0" 200 3147 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-09-02 04:37:38 |
| 49.234.91.78 | attackbotsspam | Sep 1 22:15:12 sip sshd[18679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.91.78 Sep 1 22:15:14 sip sshd[18679]: Failed password for invalid user itc from 49.234.91.78 port 53854 ssh2 Sep 1 22:20:26 sip sshd[20008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.91.78 |
2020-09-02 04:22:49 |
| 190.149.156.91 | attackspam | " " |
2020-09-02 04:48:13 |
| 104.244.74.57 | attackspam | Sep 1 13:26:55 shivevps sshd[27674]: Bad protocol version identification '\024' from 104.244.74.57 port 35518 ... |
2020-09-02 04:21:12 |
| 87.110.181.30 | attack | (sshd) Failed SSH login from 87.110.181.30 (LV/Latvia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 1 11:13:17 server2 sshd[30745]: Invalid user joao from 87.110.181.30 Sep 1 11:13:17 server2 sshd[30745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.110.181.30 Sep 1 11:13:19 server2 sshd[30745]: Failed password for invalid user joao from 87.110.181.30 port 47488 ssh2 Sep 1 11:24:53 server2 sshd[8798]: Invalid user git from 87.110.181.30 Sep 1 11:24:53 server2 sshd[8798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.110.181.30 |
2020-09-02 04:18:15 |
| 80.106.247.145 | attackbots | Sep 1 13:26:32 shivevps sshd[27389]: Did not receive identification string from 80.106.247.145 port 41975 ... |
2020-09-02 04:41:19 |