City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 53.189.57.224
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5984
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;53.189.57.224. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012600 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 26 22:32:45 CST 2025
;; MSG SIZE rcvd: 106Host 224.57.189.53.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 224.57.189.53.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.235.231.54 | attack | Sep 27 10:28:25 serwer sshd\[27542\]: Invalid user ftp1 from 49.235.231.54 port 42684 Sep 27 10:28:25 serwer sshd\[27542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.231.54 Sep 27 10:28:27 serwer sshd\[27542\]: Failed password for invalid user ftp1 from 49.235.231.54 port 42684 ssh2 ... |
2020-09-27 20:30:47 |
| 118.24.156.209 | attackbotsspam | 25079/tcp 12191/tcp 24508/tcp... [2020-07-27/09-26]19pkt,17pt.(tcp) |
2020-09-27 20:29:01 |
| 52.130.73.105 | attack | 2375/tcp 2375/tcp [2020-07-31/09-26]2pkt |
2020-09-27 20:43:41 |
| 114.35.179.165 | attackspam | Auto Detect Rule! proto TCP (SYN), 114.35.179.165:22636->gjan.info:23, len 40 |
2020-09-27 20:56:35 |
| 193.56.28.14 | attackbotsspam | Sep 27 14:04:32 galaxy event: galaxy/lswi: smtp: ivan@uni-potsdam.de [193.56.28.14] authentication failure using internet password Sep 27 14:04:47 galaxy event: galaxy/lswi: smtp: tech@uni-potsdam.de [193.56.28.14] authentication failure using internet password Sep 27 14:09:16 galaxy event: galaxy/lswi: smtp: tech@uni-potsdam.de [193.56.28.14] authentication failure using internet password Sep 27 14:09:30 galaxy event: galaxy/lswi: smtp: steve@uni-potsdam.de [193.56.28.14] authentication failure using internet password Sep 27 14:13:57 galaxy event: galaxy/lswi: smtp: steve@uni-potsdam.de [193.56.28.14] authentication failure using internet password ... |
2020-09-27 20:49:10 |
| 178.219.183.162 | attack | [Sat Sep 26 20:39:56 2020] 178.219.183.162 ... |
2020-09-27 20:34:19 |
| 138.255.148.35 | attack | Ssh brute force |
2020-09-27 20:57:39 |
| 192.35.168.43 | attackbots | 88/tcp 8081/tcp 8089/tcp... [2020-08-07/09-26]16pkt,12pt.(tcp),2pt.(udp) |
2020-09-27 20:31:46 |
| 94.51.25.1 | attackbotsspam |
|
2020-09-27 20:37:25 |
| 181.114.136.57 | attackbots | port scan and connect, tcp 80 (http) |
2020-09-27 20:58:41 |
| 167.172.25.74 | attack | Automated report - ssh fail2ban: Sep 27 14:52:50 Unable to negotiate with 167.172.25.74 port=47092: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Sep 27 14:52:51 Unable to negotiate with 167.172.25.74 port=48080: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Sep 27 14:52:51 Unable to negotiate with 167.172.25.74 port=48948: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Sep 27 14:52:52 Unable to negotiate with 167.172.25.74 port=49878: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] |
2020-09-27 20:54:52 |
| 218.87.149.136 | attack |
|
2020-09-27 20:58:26 |
| 119.184.59.116 | attackbots | [N3.H3.VM3] Port Scanner Detected Blocked by UFW |
2020-09-27 20:38:58 |
| 141.105.105.101 | attackbots | Sep 26 22:39:49 localhost sshd\[31872\]: Invalid user admin from 141.105.105.101 Sep 26 22:39:49 localhost sshd\[31872\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.105.105.101 Sep 26 22:39:51 localhost sshd\[31872\]: Failed password for invalid user admin from 141.105.105.101 port 35100 ssh2 Sep 26 22:39:54 localhost sshd\[31874\]: Invalid user admin from 141.105.105.101 Sep 26 22:39:55 localhost sshd\[31874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.105.105.101 ... |
2020-09-27 20:43:23 |
| 76.75.94.10 | attackbotsspam | Sep 26 20:43:02 lanister sshd[10797]: Invalid user steve from 76.75.94.10 Sep 26 20:43:02 lanister sshd[10797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.75.94.10 Sep 26 20:43:02 lanister sshd[10797]: Invalid user steve from 76.75.94.10 Sep 26 20:43:03 lanister sshd[10797]: Failed password for invalid user steve from 76.75.94.10 port 46566 ssh2 |
2020-09-27 20:59:42 |