City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 63.54.78.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62634
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;63.54.78.42. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022700 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 27 23:56:33 CST 2025
;; MSG SIZE rcvd: 104b'Host 42.78.54.63.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 63.54.78.42.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 41.230.26.115 | attackspam | DATE:2019-07-23_22:13:28, IP:41.230.26.115, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-07-24 09:42:47 |
| 212.12.29.242 | attackspambots | proto=tcp . spt=50231 . dpt=25 . (listed on Blocklist de Jul 23) (1030) |
2019-07-24 09:15:36 |
| 92.255.197.74 | attackspam | proto=tcp . spt=52624 . dpt=25 . (listed on Blocklist de Jul 23) (1024) |
2019-07-24 09:26:19 |
| 14.207.10.1 | attackbots | SSH Brute-Force reported by Fail2Ban |
2019-07-24 09:54:14 |
| 153.36.236.234 | attackspambots | Fail2Ban Ban Triggered |
2019-07-24 09:11:20 |
| 104.194.11.156 | attackspam | Jul 24 03:22:43 srv-4 sshd\[24161\]: Invalid user song from 104.194.11.156 Jul 24 03:22:43 srv-4 sshd\[24161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.194.11.156 Jul 24 03:22:45 srv-4 sshd\[24161\]: Failed password for invalid user song from 104.194.11.156 port 43222 ssh2 ... |
2019-07-24 09:17:37 |
| 185.102.219.172 | attackbots | Malicious Traffic/Form Submission |
2019-07-24 09:37:38 |
| 178.135.92.181 | attack | Jul 23 22:01:21 mxgate1 postfix/postscreen[8780]: CONNECT from [178.135.92.181]:64447 to [176.31.12.44]:25 Jul 23 22:01:21 mxgate1 postfix/dnsblog[8870]: addr 178.135.92.181 listed by domain cbl.abuseat.org as 127.0.0.2 Jul 23 22:01:22 mxgate1 postfix/dnsblog[8871]: addr 178.135.92.181 listed by domain b.barracudacentral.org as 127.0.0.2 Jul 23 22:01:22 mxgate1 postfix/dnsblog[8868]: addr 178.135.92.181 listed by domain zen.spamhaus.org as 127.0.0.11 Jul 23 22:01:22 mxgate1 postfix/dnsblog[8868]: addr 178.135.92.181 listed by domain zen.spamhaus.org as 127.0.0.4 Jul 23 22:01:27 mxgate1 postfix/postscreen[8780]: DNSBL rank 4 for [178.135.92.181]:64447 Jul x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=178.135.92.181 |
2019-07-24 09:36:27 |
| 185.24.124.209 | attackspam | Lines containing failures of 185.24.124.209 Jul 23 21:46:38 omfg postfix/smtpd[24136]: connect from unknown[185.24.124.209] Jul x@x Jul 23 21:46:50 omfg postfix/smtpd[24136]: lost connection after DATA from unknown[185.24.124.209] Jul 23 21:46:50 omfg postfix/smtpd[24136]: disconnect from unknown[185.24.124.209] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=185.24.124.209 |
2019-07-24 09:46:38 |
| 213.145.149.226 | attack | proto=tcp . spt=37619 . dpt=25 . (listed on Blocklist de Jul 23) (1026) |
2019-07-24 09:22:43 |
| 46.166.151.47 | attack | \[2019-07-23 21:02:47\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-23T21:02:47.072-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="900246812400638",SessionID="0x7f06f804c2c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/51208",ACLName="no_extension_match" \[2019-07-23 21:08:59\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-23T21:08:59.243-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="900246462607533",SessionID="0x7f06f83e80f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/59037",ACLName="no_extension_match" \[2019-07-23 21:10:19\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-23T21:10:19.135-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="900246363302946",SessionID="0x7f06f8009f28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/53420",ACLName="no_ |
2019-07-24 09:46:05 |
| 103.69.20.47 | attackbotsspam | proto=tcp . spt=40836 . dpt=25 . (listed on Blocklist de Jul 23) (1029) |
2019-07-24 09:18:51 |
| 185.186.233.235 | attack | proto=tcp . spt=60069 . dpt=25 . (listed on Blocklist de Jul 23) (1027) |
2019-07-24 09:20:53 |
| 163.179.32.240 | attackspam | eintrachtkultkellerfulda.de 163.179.32.240 \[23/Jul/2019:22:14:20 +0200\] "POST /wp-login.php HTTP/1.1" 200 2076 "-" "Mozilla/5.0 \(Windows NT 6.1\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0" eintrachtkultkellerfulda.de 163.179.32.240 \[23/Jul/2019:22:14:23 +0200\] "POST /wp-login.php HTTP/1.1" 200 2076 "-" "Mozilla/5.0 \(Windows NT 6.1\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0" |
2019-07-24 09:14:21 |
| 94.41.198.237 | attackspambots | Jul 24 00:39:17 MK-Soft-VM5 sshd\[8840\]: Invalid user michi from 94.41.198.237 port 33197 Jul 24 00:39:17 MK-Soft-VM5 sshd\[8840\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.41.198.237 Jul 24 00:39:19 MK-Soft-VM5 sshd\[8840\]: Failed password for invalid user michi from 94.41.198.237 port 33197 ssh2 ... |
2019-07-24 09:12:41 |