City: Cuxhaven
Region: Niedersachsen
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.16.244.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40720
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;85.16.244.137. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024120901 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 10 12:25:59 CST 2024
;; MSG SIZE rcvd: 106Host 137.244.16.85.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 137.244.16.85.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 201.149.22.37 | attackbotsspam | 2020-05-02T18:22:36.323372abusebot.cloudsearch.cf sshd[13221]: Invalid user waldo from 201.149.22.37 port 59814 2020-05-02T18:22:36.330540abusebot.cloudsearch.cf sshd[13221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.22.37 2020-05-02T18:22:36.323372abusebot.cloudsearch.cf sshd[13221]: Invalid user waldo from 201.149.22.37 port 59814 2020-05-02T18:22:38.293417abusebot.cloudsearch.cf sshd[13221]: Failed password for invalid user waldo from 201.149.22.37 port 59814 ssh2 2020-05-02T18:26:22.813699abusebot.cloudsearch.cf sshd[13512]: Invalid user line from 201.149.22.37 port 41222 2020-05-02T18:26:22.825299abusebot.cloudsearch.cf sshd[13512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.22.37 2020-05-02T18:26:22.813699abusebot.cloudsearch.cf sshd[13512]: Invalid user line from 201.149.22.37 port 41222 2020-05-02T18:26:24.481829abusebot.cloudsearch.cf sshd[13512]: Failed password for inva ... |
2020-05-03 03:08:24 |
| 36.67.228.223 | attack | [01/May/2020:19:59:58 -0400] "GET / HTTP/1.1" Chrome 52.0 UA |
2020-05-03 03:11:48 |
| 157.230.170.78 | attack | 157.230.170.78 - - [02/May/2020:15:09:46 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.230.170.78 - - [02/May/2020:15:09:52 +0200] "POST /wp-login.php HTTP/1.1" 200 5953 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.230.170.78 - - [02/May/2020:15:09:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-05-03 03:11:33 |
| 93.66.78.18 | attack | (sshd) Failed SSH login from 93.66.78.18 (IT/Italy/net-93-66-78-18.cust.vodafonedsl.it): 5 in the last 3600 secs |
2020-05-03 02:53:11 |
| 185.202.1.164 | attackspambots | May 2 20:49:24 host sshd[43881]: Invalid user backup from 185.202.1.164 port 57530 ... |
2020-05-03 02:52:19 |
| 128.199.143.19 | attackbotsspam | May 3 00:04:26 gw1 sshd[3604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.143.19 May 3 00:04:28 gw1 sshd[3604]: Failed password for invalid user grafana from 128.199.143.19 port 33804 ssh2 ... |
2020-05-03 03:15:37 |
| 139.59.215.241 | attackspambots | Automatically reported by fail2ban report script (mx1) |
2020-05-03 02:57:09 |
| 95.156.150.74 | attack | Automatic report - Port Scan Attack |
2020-05-03 02:46:06 |
| 101.236.60.31 | attack | May 2 17:38:49 game-panel sshd[14648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.236.60.31 May 2 17:38:52 game-panel sshd[14648]: Failed password for invalid user wangfang from 101.236.60.31 port 39958 ssh2 May 2 17:41:43 game-panel sshd[14873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.236.60.31 |
2020-05-03 02:40:25 |
| 139.59.65.8 | attackbots | 139.59.65.8 - - [02/May/2020:14:08:14 +0200] "GET /wp-login.php HTTP/1.1" 200 6124 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.65.8 - - [02/May/2020:14:08:20 +0200] "POST /wp-login.php HTTP/1.1" 200 6354 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.65.8 - - [02/May/2020:14:08:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-05-03 02:45:41 |
| 156.96.119.148 | attackbots | May 2 20:39:49 debian-2gb-nbg1-2 kernel: \[10703696.634538\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=156.96.119.148 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=56942 DF PROTO=TCP SPT=22 DPT=8081 WINDOW=512 RES=0x00 SYN URGP=0 |
2020-05-03 02:40:00 |
| 222.186.30.218 | attackspambots | May 2 20:45:24 markkoudstaal sshd[26624]: Failed password for root from 222.186.30.218 port 17663 ssh2 May 2 20:45:25 markkoudstaal sshd[26624]: Failed password for root from 222.186.30.218 port 17663 ssh2 May 2 20:45:27 markkoudstaal sshd[26624]: Failed password for root from 222.186.30.218 port 17663 ssh2 |
2020-05-03 02:50:00 |
| 185.50.149.26 | attack | May 2 19:44:23 blackbee postfix/smtpd\[9803\]: warning: unknown\[185.50.149.26\]: SASL LOGIN authentication failed: authentication failure May 2 19:44:32 blackbee postfix/smtpd\[9803\]: warning: unknown\[185.50.149.26\]: SASL LOGIN authentication failed: authentication failure May 2 19:49:10 blackbee postfix/smtpd\[9854\]: warning: unknown\[185.50.149.26\]: SASL LOGIN authentication failed: authentication failure May 2 19:49:20 blackbee postfix/smtpd\[9692\]: warning: unknown\[185.50.149.26\]: SASL LOGIN authentication failed: authentication failure May 2 19:50:49 blackbee postfix/smtpd\[9692\]: warning: unknown\[185.50.149.26\]: SASL LOGIN authentication failed: authentication failure ... |
2020-05-03 03:15:12 |
| 23.94.36.220 | attack | May 2 sshd[9536]: Invalid user aashi from 23.94.36.220 port 51448 |
2020-05-03 02:59:53 |
| 91.121.109.56 | attackspam | May 2 18:54:37 ns382633 sshd\[22890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.109.56 user=root May 2 18:54:39 ns382633 sshd\[22890\]: Failed password for root from 91.121.109.56 port 57218 ssh2 May 2 19:10:30 ns382633 sshd\[26471\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.109.56 user=root May 2 19:10:32 ns382633 sshd\[26471\]: Failed password for root from 91.121.109.56 port 32836 ssh2 May 2 19:14:22 ns382633 sshd\[26925\]: Invalid user mode from 91.121.109.56 port 44142 May 2 19:14:22 ns382633 sshd\[26925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.109.56 |
2020-05-03 03:05:31 |