City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 53.206.3.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1945
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;53.206.3.66. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021002 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 12:50:28 CST 2025
;; MSG SIZE rcvd: 104Host 66.3.206.53.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 66.3.206.53.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 23.233.191.214 | attackspam | Feb 6 02:01:06 ns382633 sshd\[25955\]: Invalid user sv from 23.233.191.214 port 42504 Feb 6 02:01:06 ns382633 sshd\[25955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.233.191.214 Feb 6 02:01:08 ns382633 sshd\[25955\]: Failed password for invalid user sv from 23.233.191.214 port 42504 ssh2 Feb 6 02:29:25 ns382633 sshd\[30336\]: Invalid user ryo from 23.233.191.214 port 55910 Feb 6 02:29:25 ns382633 sshd\[30336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.233.191.214 |
2020-02-06 10:15:07 |
| 152.136.115.150 | attack | Feb 5 15:47:36 hpm sshd\[4908\]: Invalid user kqk from 152.136.115.150 Feb 5 15:47:36 hpm sshd\[4908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.115.150 Feb 5 15:47:38 hpm sshd\[4908\]: Failed password for invalid user kqk from 152.136.115.150 port 49340 ssh2 Feb 5 15:51:43 hpm sshd\[5456\]: Invalid user pkc from 152.136.115.150 Feb 5 15:51:43 hpm sshd\[5456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.115.150 |
2020-02-06 09:53:21 |
| 222.174.15.75 | attackbots | Unauthorized connection attempt from IP address 222.174.15.75 on Port 445(SMB) |
2020-02-06 10:07:16 |
| 201.80.108.35 | attack | Feb 5 16:07:35 hpm sshd\[7520\]: Invalid user kjc from 201.80.108.35 Feb 5 16:07:35 hpm sshd\[7520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.35 Feb 5 16:07:37 hpm sshd\[7520\]: Failed password for invalid user kjc from 201.80.108.35 port 32039 ssh2 Feb 5 16:11:53 hpm sshd\[8201\]: Invalid user vnp from 201.80.108.35 Feb 5 16:11:53 hpm sshd\[8201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.35 |
2020-02-06 10:16:00 |
| 194.247.178.12 | attackspam | Joomla Admin : try to force the door... |
2020-02-06 10:33:34 |
| 61.223.168.65 | attackspambots | Feb 6 02:14:17 h2177944 kernel: \[4149743.836994\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=61.223.168.65 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=49264 DF PROTO=TCP SPT=10096 DPT=3389 WINDOW=64240 RES=0x00 SYN URGP=0 Feb 6 02:14:17 h2177944 kernel: \[4149743.837008\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=61.223.168.65 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=49264 DF PROTO=TCP SPT=10096 DPT=3389 WINDOW=64240 RES=0x00 SYN URGP=0 Feb 6 02:14:18 h2177944 kernel: \[4149744.836815\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=61.223.168.65 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=49265 DF PROTO=TCP SPT=10096 DPT=3389 WINDOW=64240 RES=0x00 SYN URGP=0 Feb 6 02:14:18 h2177944 kernel: \[4149744.836828\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=61.223.168.65 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=49265 DF PROTO=TCP SPT=10096 DPT=3389 WINDOW=64240 RES=0x00 SYN URGP=0 Feb 6 02:14:20 h2177944 kernel: \[4149746.835996\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=61.223.168.65 |
2020-02-06 10:34:06 |
| 49.233.75.234 | attackspambots | Feb 6 03:11:31 lukav-desktop sshd\[20722\]: Invalid user skg from 49.233.75.234 Feb 6 03:11:31 lukav-desktop sshd\[20722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.75.234 Feb 6 03:11:33 lukav-desktop sshd\[20722\]: Failed password for invalid user skg from 49.233.75.234 port 51604 ssh2 Feb 6 03:14:41 lukav-desktop sshd\[21054\]: Invalid user bch from 49.233.75.234 Feb 6 03:14:41 lukav-desktop sshd\[21054\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.75.234 |
2020-02-06 10:23:03 |
| 139.99.91.84 | attackspam | Feb 6 02:45:56 legacy sshd[8820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.91.84 Feb 6 02:45:59 legacy sshd[8820]: Failed password for invalid user zet from 139.99.91.84 port 38882 ssh2 Feb 6 02:49:11 legacy sshd[9068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.91.84 ... |
2020-02-06 09:51:18 |
| 49.233.92.166 | attack | $f2bV_matches |
2020-02-06 09:57:14 |
| 61.155.2.2 | attackbotsspam | Feb 6 02:46:34 silence02 sshd[30236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.155.2.2 Feb 6 02:46:37 silence02 sshd[30236]: Failed password for invalid user jec from 61.155.2.2 port 54152 ssh2 Feb 6 02:49:45 silence02 sshd[30595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.155.2.2 |
2020-02-06 10:02:07 |
| 109.224.31.158 | attackbotsspam | IMAP brute force ... |
2020-02-06 09:56:51 |
| 40.121.128.153 | attack | Feb 6 02:45:41 cp sshd[23018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.121.128.153 Feb 6 02:45:41 cp sshd[23018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.121.128.153 |
2020-02-06 10:08:47 |
| 118.27.18.64 | attackspam | $f2bV_matches |
2020-02-06 10:29:02 |
| 37.9.113.46 | attackspam | [Thu Feb 06 08:14:37.103674 2020] [:error] [pid 1635:tid 140262657820416] [client 37.9.113.46:36014] [client 37.9.113.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XjtofXFl@3nQo4OTo5IZuQAAAUs"] ... |
2020-02-06 10:26:19 |
| 124.67.89.76 | attackspambots | MVPower DVR TV Shell Unauthenticated Command Execution Vulnerability |
2020-02-06 09:56:23 |