City: Amsterdam
Region: Noord Holland
Country: The Netherlands
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 57.153.44.69
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32668
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;57.153.44.69. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025062700 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 27 21:33:41 CST 2025
;; MSG SIZE rcvd: 105Host 69.44.153.57.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 69.44.153.57.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 211.141.234.16 | attack | Sep 27 20:38:55 TCP Attack: SRC=211.141.234.16 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=101 PROTO=TCP SPT=6000 DPT=31433 WINDOW=16384 RES=0x00 SYN URGP=0 |
2020-09-28 14:07:07 |
| 221.6.205.118 | attack | test |
2020-09-28 13:53:28 |
| 142.93.115.12 | attack | Sep 28 06:34:49 icinga sshd[51961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.12 Sep 28 06:34:51 icinga sshd[51961]: Failed password for invalid user user from 142.93.115.12 port 39448 ssh2 Sep 28 06:43:59 icinga sshd[65058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.12 ... |
2020-09-28 13:47:50 |
| 213.150.206.88 | attackspambots | Sep 28 03:10:08 mavik sshd[4533]: Failed password for invalid user duser from 213.150.206.88 port 49676 ssh2 Sep 28 03:12:18 mavik sshd[4608]: Invalid user spark from 213.150.206.88 Sep 28 03:12:18 mavik sshd[4608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.150.206.88 Sep 28 03:12:20 mavik sshd[4608]: Failed password for invalid user spark from 213.150.206.88 port 53778 ssh2 Sep 28 03:14:32 mavik sshd[4668]: Invalid user marie from 213.150.206.88 ... |
2020-09-28 14:22:43 |
| 45.248.68.153 | attackspam | (sshd) Failed SSH login from 45.248.68.153 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 28 00:35:28 server sshd[13265]: Invalid user sandra from 45.248.68.153 port 35284 Sep 28 00:35:30 server sshd[13265]: Failed password for invalid user sandra from 45.248.68.153 port 35284 ssh2 Sep 28 00:46:35 server sshd[15922]: Invalid user owncloud from 45.248.68.153 port 35002 Sep 28 00:46:38 server sshd[15922]: Failed password for invalid user owncloud from 45.248.68.153 port 35002 ssh2 Sep 28 00:50:33 server sshd[16977]: Invalid user minecraft from 45.248.68.153 port 45976 |
2020-09-28 14:12:18 |
| 110.49.71.143 | attackbots | 2020-09-28T05:21:10.150864randservbullet-proofcloud-66.localdomain sshd[25593]: Invalid user export from 110.49.71.143 port 55208 2020-09-28T05:21:10.154538randservbullet-proofcloud-66.localdomain sshd[25593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.71.143 2020-09-28T05:21:10.150864randservbullet-proofcloud-66.localdomain sshd[25593]: Invalid user export from 110.49.71.143 port 55208 2020-09-28T05:21:12.883862randservbullet-proofcloud-66.localdomain sshd[25593]: Failed password for invalid user export from 110.49.71.143 port 55208 ssh2 ... |
2020-09-28 13:58:46 |
| 51.158.70.82 | attackspam | Fail2Ban Ban Triggered (2) |
2020-09-28 14:26:01 |
| 46.102.13.147 | attackspam | Automatic report - Port Scan Attack |
2020-09-28 14:22:12 |
| 106.12.201.16 | attackbots | Sep 28 08:21:52 ift sshd\[46343\]: Invalid user sanjay from 106.12.201.16Sep 28 08:21:54 ift sshd\[46343\]: Failed password for invalid user sanjay from 106.12.201.16 port 45334 ssh2Sep 28 08:25:36 ift sshd\[46745\]: Invalid user cash from 106.12.201.16Sep 28 08:25:37 ift sshd\[46745\]: Failed password for invalid user cash from 106.12.201.16 port 33242 ssh2Sep 28 08:29:02 ift sshd\[47083\]: Invalid user polaris from 106.12.201.16 ... |
2020-09-28 13:57:13 |
| 45.95.168.152 | attack | Sep 27 16:46:45 lanister sshd[29907]: Invalid user 149.154.64.252 from 45.95.168.152 Sep 27 16:46:45 lanister sshd[29907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.152 Sep 27 16:46:45 lanister sshd[29907]: Invalid user 149.154.64.252 from 45.95.168.152 Sep 27 16:46:47 lanister sshd[29907]: Failed password for invalid user 149.154.64.252 from 45.95.168.152 port 54196 ssh2 |
2020-09-28 14:05:29 |
| 112.85.42.172 | attack | Sep 28 05:40:57 mavik sshd[10192]: Failed password for root from 112.85.42.172 port 8166 ssh2 Sep 28 05:41:00 mavik sshd[10192]: Failed password for root from 112.85.42.172 port 8166 ssh2 Sep 28 05:41:03 mavik sshd[10192]: Failed password for root from 112.85.42.172 port 8166 ssh2 Sep 28 05:41:07 mavik sshd[10192]: Failed password for root from 112.85.42.172 port 8166 ssh2 Sep 28 05:41:10 mavik sshd[10192]: Failed password for root from 112.85.42.172 port 8166 ssh2 ... |
2020-09-28 13:48:38 |
| 223.71.1.209 | attack | Sep 28 02:54:50 xeon sshd[48121]: Failed password for invalid user user from 223.71.1.209 port 50164 ssh2 |
2020-09-28 13:44:35 |
| 152.170.65.133 | attackspam | Sep 28 04:45:07 roki-contabo sshd\[6579\]: Invalid user kelly from 152.170.65.133 Sep 28 04:45:07 roki-contabo sshd\[6579\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.170.65.133 Sep 28 04:45:09 roki-contabo sshd\[6579\]: Failed password for invalid user kelly from 152.170.65.133 port 50872 ssh2 Sep 28 04:49:17 roki-contabo sshd\[6663\]: Invalid user leon from 152.170.65.133 Sep 28 04:49:17 roki-contabo sshd\[6663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.170.65.133 ... |
2020-09-28 14:17:57 |
| 145.239.69.74 | attackspam | 145.239.69.74 - - [28/Sep/2020:05:02:10 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.69.74 - - [28/Sep/2020:05:02:10 +0200] "POST /wp-login.php HTTP/1.1" 200 2698 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.69.74 - - [28/Sep/2020:05:02:11 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.69.74 - - [28/Sep/2020:05:02:11 +0200] "POST /wp-login.php HTTP/1.1" 200 2672 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.69.74 - - [28/Sep/2020:05:02:11 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.69.74 - - [28/Sep/2020:05:02:11 +0200] "POST /wp-login.php HTTP/1.1" 200 2673 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Fir ... |
2020-09-28 13:50:26 |
| 61.177.172.168 | attack | $f2bV_matches |
2020-09-28 14:00:19 |