City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 53.20.1.178
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19062
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;53.20.1.178. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013001 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 11:07:45 CST 2025
;; MSG SIZE rcvd: 104Host 178.1.20.53.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 178.1.20.53.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 69.16.221.11 | attackspambots | Nov 4 06:12:18 mail postfix/smtpd[26195]: warning: host1.bartervoip.com[69.16.221.11]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 4 06:15:30 mail postfix/smtpd[27862]: warning: host1.bartervoip.com[69.16.221.11]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 4 06:21:13 mail postfix/smtpd[30601]: warning: host1.bartervoip.com[69.16.221.11]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-04 13:32:16 |
| 80.82.64.212 | attackspam | eintrachtkultkellerfulda.de 80.82.64.212 \[04/Nov/2019:06:11:25 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 578 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/74.0.3729.169 Safari/537.36" eintrachtkultkellerfulda.de 80.82.64.212 \[04/Nov/2019:06:11:25 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 578 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/74.0.3729.169 Safari/537.36" |
2019-11-04 13:30:16 |
| 195.181.242.183 | attackbots | $f2bV_matches_ltvn |
2019-11-04 13:07:25 |
| 27.128.234.169 | attackbots | 2019-11-04 03:36:32,726 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 27.128.234.169 2019-11-04 04:15:22,248 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 27.128.234.169 2019-11-04 04:56:11,555 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 27.128.234.169 2019-11-04 05:26:32,074 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 27.128.234.169 2019-11-04 05:57:12,417 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 27.128.234.169 ... |
2019-11-04 13:14:20 |
| 45.82.34.49 | attackspambots | Postfix DNSBL listed. Trying to send SPAM. |
2019-11-04 13:12:25 |
| 82.214.118.6 | attack | diesunddas.net 82.214.118.6 \[04/Nov/2019:05:56:59 +0100\] "POST /wp-login.php HTTP/1.1" 200 9647 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" diesunddas.net 82.214.118.6 \[04/Nov/2019:05:57:01 +0100\] "POST /wp-login.php HTTP/1.1" 200 8408 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-04 13:25:09 |
| 51.75.163.218 | attackbots | Nov 4 02:16:25 server sshd\[11938\]: Invalid user rf from 51.75.163.218 Nov 4 02:16:25 server sshd\[11938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.ip-51-75-163.eu Nov 4 02:16:27 server sshd\[11938\]: Failed password for invalid user rf from 51.75.163.218 port 33266 ssh2 Nov 4 02:22:21 server sshd\[13579\]: Invalid user tomcat from 51.75.163.218 Nov 4 02:22:21 server sshd\[13579\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.ip-51-75-163.eu ... |
2019-11-04 08:05:48 |
| 185.56.252.57 | attackspam | 11/04/2019-00:15:42.699817 185.56.252.57 Protocol: 6 ET SCAN Potential SSH Scan |
2019-11-04 13:16:36 |
| 187.187.200.144 | attackbots | LGS,WP GET /wp-login.php |
2019-11-04 08:06:06 |
| 222.186.175.220 | attackspam | k+ssh-bruteforce |
2019-11-04 13:15:01 |
| 181.49.117.31 | attack | Nov 4 04:54:01 gw1 sshd[8835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.117.31 Nov 4 04:54:03 gw1 sshd[8835]: Failed password for invalid user admin007g from 181.49.117.31 port 34504 ssh2 ... |
2019-11-04 08:01:45 |
| 46.229.168.134 | attack | Malicious Traffic/Form Submission |
2019-11-04 13:26:57 |
| 222.186.190.92 | attack | Oct 31 16:10:25 microserver sshd[23412]: Failed none for root from 222.186.190.92 port 24162 ssh2 Oct 31 16:10:27 microserver sshd[23412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92 user=root Oct 31 16:10:28 microserver sshd[23412]: Failed password for root from 222.186.190.92 port 24162 ssh2 Oct 31 16:10:33 microserver sshd[23412]: Failed password for root from 222.186.190.92 port 24162 ssh2 Oct 31 16:10:37 microserver sshd[23412]: Failed password for root from 222.186.190.92 port 24162 ssh2 Nov 1 20:28:03 microserver sshd[46894]: Failed none for root from 222.186.190.92 port 52704 ssh2 Nov 1 20:28:04 microserver sshd[46894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92 user=root Nov 1 20:28:06 microserver sshd[46894]: Failed password for root from 222.186.190.92 port 52704 ssh2 Nov 1 20:28:11 microserver sshd[46894]: Failed password for root from 222.186.190.92 port 52704 ssh2 Nov 1 2 |
2019-11-04 13:10:26 |
| 182.61.19.79 | attackbotsspam | Nov 4 05:52:15 vps691689 sshd[18912]: Failed password for root from 182.61.19.79 port 57808 ssh2 Nov 4 05:57:19 vps691689 sshd[19010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.19.79 ... |
2019-11-04 13:11:26 |
| 163.172.145.170 | attack | Nov 4 05:57:16 cvbnet sshd[30353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.145.170 Nov 4 05:57:18 cvbnet sshd[30353]: Failed password for invalid user 46.231.126.13 from 163.172.145.170 port 54224 ssh2 ... |
2019-11-04 13:11:46 |