City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 53.48.68.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43025
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;53.48.68.58. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022201 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 23 01:57:13 CST 2025
;; MSG SIZE rcvd: 104Host 58.68.48.53.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 58.68.48.53.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 206.189.131.213 | attackspam | Invalid user bakerm from 206.189.131.213 port 37960 |
2019-07-20 08:58:33 |
| 189.50.1.226 | attackspambots | Jul 20 03:16:45 legacy sshd[30597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.50.1.226 Jul 20 03:16:46 legacy sshd[30597]: Failed password for invalid user rv from 189.50.1.226 port 40351 ssh2 Jul 20 03:22:33 legacy sshd[30797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.50.1.226 ... |
2019-07-20 09:38:39 |
| 103.99.2.216 | attackspambots | Jul 20 02:05:59 dev postfix/smtpd\[21765\]: warning: unknown\[103.99.2.216\]: SASL LOGIN authentication failed: authentication failure Jul 20 02:06:00 dev postfix/smtpd\[21765\]: warning: unknown\[103.99.2.216\]: SASL LOGIN authentication failed: authentication failure Jul 20 02:06:01 dev postfix/smtpd\[21765\]: warning: unknown\[103.99.2.216\]: SASL LOGIN authentication failed: authentication failure Jul 20 02:06:02 dev postfix/smtpd\[21765\]: warning: unknown\[103.99.2.216\]: SASL LOGIN authentication failed: authentication failure Jul 20 02:06:02 dev postfix/smtpd\[21765\]: warning: unknown\[103.99.2.216\]: SASL LOGIN authentication failed: authentication failure |
2019-07-20 09:16:13 |
| 118.24.83.41 | attackbots | Jul 20 03:36:28 vps691689 sshd[10756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.83.41 Jul 20 03:36:29 vps691689 sshd[10756]: Failed password for invalid user git from 118.24.83.41 port 38894 ssh2 ... |
2019-07-20 09:44:52 |
| 222.120.192.102 | attack | Jul 16 00:01:37 shared09 sshd[1306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.120.192.102 user=mysql Jul 16 00:01:38 shared09 sshd[1306]: Failed password for mysql from 222.120.192.102 port 54100 ssh2 Jul 16 00:01:38 shared09 sshd[1306]: Received disconnect from 222.120.192.102 port 54100:11: Bye Bye [preauth] Jul 16 00:01:38 shared09 sshd[1306]: Disconnected from 222.120.192.102 port 54100 [preauth] Jul 16 01:37:46 shared09 sshd[4464]: Invalid user www from 222.120.192.102 Jul 16 01:37:46 shared09 sshd[4464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.120.192.102 Jul 16 01:37:48 shared09 sshd[4464]: Failed password for invalid user www from 222.120.192.102 port 51058 ssh2 Jul 16 01:37:48 shared09 sshd[4464]: Received disconnect from 222.120.192.102 port 51058:11: Bye Bye [preauth] Jul 16 01:37:48 shared09 sshd[4464]: Disconnected from 222.120.192.102 port 51058 [preauth........ ------------------------------- |
2019-07-20 09:40:39 |
| 5.196.88.110 | attackbotsspam | Invalid user artur from 5.196.88.110 port 37774 |
2019-07-20 09:00:36 |
| 198.176.48.192 | attack | 2019-07-15T01:50:05.602523wiz-ks3 sshd[14478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.176.48.192 user=root 2019-07-15T01:50:07.644495wiz-ks3 sshd[14478]: Failed password for root from 198.176.48.192 port 50668 ssh2 2019-07-15T01:50:08.829055wiz-ks3 sshd[14480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.176.48.192 user=root 2019-07-15T01:50:10.951076wiz-ks3 sshd[14480]: Failed password for root from 198.176.48.192 port 51580 ssh2 2019-07-15T01:50:12.118571wiz-ks3 sshd[14482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.176.48.192 user=root 2019-07-15T01:50:13.789044wiz-ks3 sshd[14482]: Failed password for root from 198.176.48.192 port 52515 ssh2 2019-07-15T01:50:14.980896wiz-ks3 sshd[14485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.176.48.192 user=root 2019-07-15T01:50:16.591341wiz-ks3 sshd[14485]: Failed pa |
2019-07-20 09:44:31 |
| 139.199.174.58 | attackspambots | Invalid user sunsun from 139.199.174.58 port 47526 |
2019-07-20 09:17:53 |
| 138.68.87.0 | attackspam | 2019-07-20T01:00:08.593994abusebot-3.cloudsearch.cf sshd\[24381\]: Invalid user umulus from 138.68.87.0 port 52660 |
2019-07-20 09:01:01 |
| 178.128.217.47 | attackbotsspam | WordPress XMLRPC scan :: 178.128.217.47 0.120 BYPASS [20/Jul/2019:07:39:33 1000] [censored_1] "POST /xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-07-20 09:08:01 |
| 173.254.56.16 | attackbotsspam | It is the Hacker that uses several IPs to detonate the site so stay connected and "block" immediately if it notifies your site according to the examples below: 81.28.164.55/19/07/2019 09:58/617/301/GET/HTTP/1.1 160.153.147.160/web/wp-includes/wlwmanifest.xml/19/07/2019 09:58/9/403/GET/HTTP/1.1 199.204.248.138/dev/wp-includes/wlwmanifest.xml/19/07/2019 09:58/9/error403/GET/HTTP/1.1 198.71.237.24/www/wp-includes/wlwmanifest.xml/19/07/2019 09:59/9/error403/GET/HTTP/1.1 5.144.130.14/staging/wp-includes/wlwmanifest.xml/19/07/2019 10:00/101/error404/GET/HTTP/1.1 198.71.238.4/shop/wp-includes/wlwmanifest.xml/19/07/2019 10:01/9/error403/GET/HTTP/1.1 192.254.76.6/news/wp-includes/wlwmanifest.xml/19/07/2019 10:01/101/error404/GET/HTTP/1.1 162.252.87.223/main/wp-includes/wlwmanifest.xml/19/07/2019 10:02/101/error404/GET/HTTP/1.1 176.53.85.89/newsite/wp-includes/wlwmanifest.xml/19/07/2019 10:02/101/error404/GET/HTTP/1.1 173.254.56.16/v2/wp-includes/wlwmanifest.xml/19/07/2019 10:03/101/error404/GET/HTTP/1 |
2019-07-20 09:35:35 |
| 139.59.79.56 | attackspam | Invalid user whobraun from 139.59.79.56 port 52282 |
2019-07-20 09:07:28 |
| 142.44.247.87 | attackspam | Jul 20 02:22:00 localhost sshd\[13402\]: Invalid user mina from 142.44.247.87 port 45174 Jul 20 02:22:00 localhost sshd\[13402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.247.87 ... |
2019-07-20 09:32:53 |
| 146.115.119.61 | attackbots | Jul 14 16:09:52 vpxxxxxxx22308 sshd[5848]: Invalid user tester from 146.115.119.61 Jul 14 16:09:52 vpxxxxxxx22308 sshd[5848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.115.119.61 Jul 14 16:09:54 vpxxxxxxx22308 sshd[5848]: Failed password for invalid user tester from 146.115.119.61 port 58770 ssh2 Jul 14 16:19:37 vpxxxxxxx22308 sshd[8210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.115.119.61 user=r.r Jul 14 16:19:39 vpxxxxxxx22308 sshd[8210]: Failed password for r.r from 146.115.119.61 port 34300 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=146.115.119.61 |
2019-07-20 08:57:08 |
| 198.108.67.85 | attackspambots | Portscan or hack attempt detected by psad/fwsnort |
2019-07-20 09:22:33 |