City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 53.239.5.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58628
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;53.239.5.30. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012200 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 20:49:37 CST 2025
;; MSG SIZE rcvd: 104Host 30.5.239.53.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 30.5.239.53.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.196.67.41 | attackbotsspam | Oct 26 05:40:27 h2177944 sshd\[7540\]: Invalid user admin from 5.196.67.41 port 60036 Oct 26 05:40:27 h2177944 sshd\[7540\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.67.41 Oct 26 05:40:29 h2177944 sshd\[7540\]: Failed password for invalid user admin from 5.196.67.41 port 60036 ssh2 Oct 26 05:44:32 h2177944 sshd\[7754\]: Invalid user Parola1@3 from 5.196.67.41 port 41790 Oct 26 05:44:32 h2177944 sshd\[7754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.67.41 ... |
2019-10-26 18:54:22 |
| 201.116.194.210 | attack | Oct 26 11:32:43 master sshd[15304]: Failed password for root from 201.116.194.210 port 21208 ssh2 Oct 26 11:59:12 master sshd[15327]: Failed password for root from 201.116.194.210 port 16798 ssh2 Oct 26 12:03:17 master sshd[15635]: Failed password for root from 201.116.194.210 port 21050 ssh2 Oct 26 12:07:36 master sshd[15639]: Failed password for invalid user an from 201.116.194.210 port 25808 ssh2 Oct 26 12:12:04 master sshd[15679]: Failed password for root from 201.116.194.210 port 43072 ssh2 Oct 26 12:17:05 master sshd[15750]: Failed password for root from 201.116.194.210 port 5718 ssh2 Oct 26 12:21:59 master sshd[15775]: Failed password for invalid user super from 201.116.194.210 port 14720 ssh2 Oct 26 12:26:32 master sshd[15779]: Failed password for invalid user silas from 201.116.194.210 port 48695 ssh2 Oct 26 12:31:17 master sshd[16085]: Failed password for root from 201.116.194.210 port 38958 ssh2 Oct 26 12:36:19 master sshd[16093]: Failed password for invalid user michi from 201.116.194.210 port 346 |
2019-10-26 19:22:43 |
| 165.22.112.43 | attackspambots | Invalid user ubnt from 165.22.112.43 port 35218 |
2019-10-26 19:26:27 |
| 60.23.130.44 | attackspam | Unauthorized FTP connection attempt |
2019-10-26 19:22:21 |
| 144.132.43.243 | attackbots | Oct 26 07:51:09 OPSO sshd\[3357\]: Invalid user jugo from 144.132.43.243 port 48318 Oct 26 07:51:09 OPSO sshd\[3357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.132.43.243 Oct 26 07:51:12 OPSO sshd\[3357\]: Failed password for invalid user jugo from 144.132.43.243 port 48318 ssh2 Oct 26 07:59:14 OPSO sshd\[4419\]: Invalid user email from 144.132.43.243 port 60208 Oct 26 07:59:14 OPSO sshd\[4419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.132.43.243 |
2019-10-26 18:48:21 |
| 106.12.93.12 | attackspam | fail2ban |
2019-10-26 19:15:46 |
| 92.50.249.166 | attackspambots | *Port Scan* detected from 92.50.249.166 (RU/Russia/-). 4 hits in the last 190 seconds |
2019-10-26 18:59:43 |
| 187.0.160.130 | attackspambots | Invalid user scs from 187.0.160.130 port 33710 |
2019-10-26 19:08:20 |
| 148.72.210.28 | attackspam | $f2bV_matches |
2019-10-26 18:49:04 |
| 187.216.127.147 | attackbotsspam | 5x Failed Password |
2019-10-26 19:05:42 |
| 52.192.154.138 | attack | slow and persistent scanner |
2019-10-26 18:49:33 |
| 114.225.222.162 | attackspam | Oct 25 23:27:03 esmtp postfix/smtpd[3175]: lost connection after AUTH from unknown[114.225.222.162] Oct 25 23:27:05 esmtp postfix/smtpd[3180]: lost connection after AUTH from unknown[114.225.222.162] Oct 25 23:27:06 esmtp postfix/smtpd[3175]: lost connection after AUTH from unknown[114.225.222.162] Oct 25 23:27:09 esmtp postfix/smtpd[3180]: lost connection after AUTH from unknown[114.225.222.162] Oct 25 23:27:10 esmtp postfix/smtpd[3175]: lost connection after AUTH from unknown[114.225.222.162] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=114.225.222.162 |
2019-10-26 19:09:19 |
| 84.54.120.31 | attackbotsspam | Oct 26 05:39:22 mxgate1 postfix/postscreen[15433]: CONNECT from [84.54.120.31]:38415 to [176.31.12.44]:25 Oct 26 05:39:22 mxgate1 postfix/dnsblog[15438]: addr 84.54.120.31 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 26 05:39:22 mxgate1 postfix/dnsblog[15437]: addr 84.54.120.31 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 26 05:39:22 mxgate1 postfix/dnsblog[15437]: addr 84.54.120.31 listed by domain zen.spamhaus.org as 127.0.0.3 Oct 26 05:39:22 mxgate1 postfix/dnsblog[15437]: addr 84.54.120.31 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 26 05:39:22 mxgate1 postfix/dnsblog[15435]: addr 84.54.120.31 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 26 05:39:22 mxgate1 postfix/postscreen[15433]: PREGREET 21 after 0.26 from [84.54.120.31]:38415: EHLO [84.54.120.31] Oct 26 05:39:22 mxgate1 postfix/postscreen[15433]: DNSBL rank 4 for [84.54.120.31]:38415 Oct x@x Oct 26 05:39:24 mxgate1 postfix/postscreen[15433]: HANGUP after 1.6 from [84.54.120.31]:........ ------------------------------- |
2019-10-26 19:19:09 |
| 159.203.27.87 | attack | www.geburtshaus-fulda.de 159.203.27.87 \[26/Oct/2019:10:19:46 +0200\] "POST /wp-login.php HTTP/1.1" 200 5785 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.geburtshaus-fulda.de 159.203.27.87 \[26/Oct/2019:10:19:47 +0200\] "POST /wp-login.php HTTP/1.1" 200 5789 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-26 19:00:05 |
| 113.116.96.93 | attackbots | Oct 26 05:30:14 mxgate1 postfix/postscreen[14811]: CONNECT from [113.116.96.93]:32715 to [176.31.12.44]:25 Oct 26 05:30:14 mxgate1 postfix/dnsblog[14812]: addr 113.116.96.93 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 26 05:30:14 mxgate1 postfix/dnsblog[14813]: addr 113.116.96.93 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 26 05:30:14 mxgate1 postfix/dnsblog[14813]: addr 113.116.96.93 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 26 05:30:14 mxgate1 postfix/dnsblog[14813]: addr 113.116.96.93 listed by domain zen.spamhaus.org as 127.0.0.3 Oct 26 05:30:14 mxgate1 postfix/dnsblog[14816]: addr 113.116.96.93 listed by domain bl.spamcop.net as 127.0.0.2 Oct 26 05:30:14 mxgate1 postfix/dnsblog[14814]: addr 113.116.96.93 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 26 05:30:20 mxgate1 postfix/postscreen[14811]: DNSBL rank 5 for [113.116.96.93]:32715 Oct x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.116.96.93 |
2019-10-26 19:12:29 |