City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 8.97.253.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41101
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;8.97.253.48. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012201 1800 900 604800 86400
;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 12:45:05 CST 2025
;; MSG SIZE rcvd: 104Host 48.253.97.8.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 48.253.97.8.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 213.24.114.210 | attackspambots | [portscan] Port scan |
2019-11-09 18:58:23 |
| 192.254.74.90 | attackbots | Automatic report - XMLRPC Attack |
2019-11-09 18:58:46 |
| 81.134.41.100 | attackbotsspam | Nov 8 21:20:42 tdfoods sshd\[19427\]: Invalid user 123 from 81.134.41.100 Nov 8 21:20:42 tdfoods sshd\[19427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host81-134-41-100.in-addr.btopenworld.com Nov 8 21:20:44 tdfoods sshd\[19427\]: Failed password for invalid user 123 from 81.134.41.100 port 56086 ssh2 Nov 8 21:24:45 tdfoods sshd\[19750\]: Invalid user gustav from 81.134.41.100 Nov 8 21:24:45 tdfoods sshd\[19750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host81-134-41-100.in-addr.btopenworld.com |
2019-11-09 18:53:17 |
| 192.169.216.233 | attack | Nov 9 11:29:53 MK-Soft-VM7 sshd[22805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.169.216.233 Nov 9 11:29:55 MK-Soft-VM7 sshd[22805]: Failed password for invalid user yp from 192.169.216.233 port 42470 ssh2 ... |
2019-11-09 18:59:26 |
| 192.198.83.166 | attackspam | Automatic report - XMLRPC Attack |
2019-11-09 19:21:03 |
| 185.176.27.30 | attackbotsspam | 185.176.27.30 was recorded 5 times by 5 hosts attempting to connect to the following ports: 5397,5396. Incident counter (4h, 24h, all-time): 5, 107, 550 |
2019-11-09 19:24:10 |
| 201.73.1.54 | attackbots | 2019-11-09T10:06:41.571759scmdmz1 sshd\[28894\]: Invalid user sa1111111 from 201.73.1.54 port 36880 2019-11-09T10:06:41.574443scmdmz1 sshd\[28894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cs-201-73-1-54.embratelcloud.com.br 2019-11-09T10:06:43.818794scmdmz1 sshd\[28894\]: Failed password for invalid user sa1111111 from 201.73.1.54 port 36880 ssh2 ... |
2019-11-09 19:09:54 |
| 2.93.92.189 | attack | Automatic report - Port Scan Attack |
2019-11-09 19:18:17 |
| 182.184.108.184 | attackspam | Port Scan 1433 |
2019-11-09 19:11:55 |
| 35.186.147.5 | attack | www.fahrschule-mihm.de 35.186.147.5 \[09/Nov/2019:09:26:34 +0100\] "POST /wp-login.php HTTP/1.1" 200 5756 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.fahrschule-mihm.de 35.186.147.5 \[09/Nov/2019:09:26:40 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4105 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-09 18:55:05 |
| 184.154.47.6 | attack | 3389BruteforceFW23 |
2019-11-09 19:29:17 |
| 118.200.125.162 | attackbots | detected by Fail2Ban |
2019-11-09 19:06:52 |
| 121.121.77.16 | attackbots | RDP Bruteforce |
2019-11-09 19:19:37 |
| 106.13.10.207 | attackspam | Automatic report - Banned IP Access |
2019-11-09 19:00:10 |
| 175.211.112.242 | attackspam | Nov 9 11:09:31 XXX sshd[55396]: Invalid user ofsaa from 175.211.112.242 port 37892 |
2019-11-09 19:06:32 |