City: unknown
Region: unknown
Country: United Kingdom of Great Britain and Northern Ireland (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 92.207.53.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32153
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;92.207.53.45. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012700 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 20:09:01 CST 2025
;; MSG SIZE rcvd: 105Host 45.53.207.92.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 45.53.207.92.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 41.77.146.98 | attackbotsspam | Sep 28 18:24:46 XXX sshd[33349]: Invalid user testuser from 41.77.146.98 port 50954 |
2019-09-29 02:16:45 |
| 206.189.165.94 | attackbotsspam | Sep 28 14:15:38 plusreed sshd[4779]: Invalid user geminroot from 206.189.165.94 ... |
2019-09-29 02:26:42 |
| 50.21.182.207 | attackspambots | SSH Brute-Force attacks |
2019-09-29 02:35:23 |
| 93.189.101.5 | attack | Sep 28 19:46:58 vmd17057 sshd\[18333\]: Invalid user admin from 93.189.101.5 port 1417 Sep 28 19:46:58 vmd17057 sshd\[18333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.189.101.5 Sep 28 19:47:01 vmd17057 sshd\[18333\]: Failed password for invalid user admin from 93.189.101.5 port 1417 ssh2 ... |
2019-09-29 02:32:18 |
| 124.156.210.20 | attackspambots | scan z |
2019-09-29 02:16:31 |
| 82.251.20.221 | attackbots | SSH Brute-Forcing (ownc) |
2019-09-29 02:30:21 |
| 222.186.175.212 | attackbots | Sep 28 18:02:35 work-partkepr sshd\[3749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.212 user=root Sep 28 18:02:37 work-partkepr sshd\[3749\]: Failed password for root from 222.186.175.212 port 49178 ssh2 ... |
2019-09-29 02:14:18 |
| 92.118.37.74 | attack | Sep 28 17:39:53 mail kernel: [1068928.873452] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=23754 PROTO=TCP SPT=46525 DPT=64097 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 17:40:07 mail kernel: [1068943.119078] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=30834 PROTO=TCP SPT=46525 DPT=58862 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 17:42:47 mail kernel: [1069103.160971] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=8937 PROTO=TCP SPT=46525 DPT=13715 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 17:48:04 mail kernel: [1069420.194526] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=37896 PROTO=TCP SPT=46525 DPT=43722 WINDOW=1024 RES=0x00 SYN U |
2019-09-29 02:10:46 |
| 177.125.164.225 | attackbots | Sep 28 19:50:34 nextcloud sshd\[6799\]: Invalid user adriaan from 177.125.164.225 Sep 28 19:50:34 nextcloud sshd\[6799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.125.164.225 Sep 28 19:50:36 nextcloud sshd\[6799\]: Failed password for invalid user adriaan from 177.125.164.225 port 37090 ssh2 ... |
2019-09-29 02:09:48 |
| 123.127.107.70 | attack | Sep 28 08:13:47 hanapaa sshd\[13171\]: Invalid user aasta from 123.127.107.70 Sep 28 08:13:47 hanapaa sshd\[13171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.127.107.70 Sep 28 08:13:49 hanapaa sshd\[13171\]: Failed password for invalid user aasta from 123.127.107.70 port 39854 ssh2 Sep 28 08:19:20 hanapaa sshd\[13702\]: Invalid user managererp from 123.127.107.70 Sep 28 08:19:20 hanapaa sshd\[13702\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.127.107.70 |
2019-09-29 02:22:15 |
| 157.245.186.236 | attackbots | Sep 26 15:37:40 ns342841 sshd[25162]: Received disconnect from 157.245.186.236: 11: Bye Bye Sep 26 15:37:42 ns342841 sshd[25164]: Invalid user admin from 157.245.186.236 Sep 26 15:37:42 ns342841 sshd[25165]: Received disconnect from 157.245.186.236: 11: Bye Bye Sep 26 15:37:43 ns342841 sshd[25166]: Invalid user admin from 157.245.186.236 Sep 26 15:37:43 ns342841 sshd[25167]: Received disconnect from 157.245.186.236: 11: Bye Bye Sep 26 15:37:44 ns342841 sshd[25169]: Invalid user user from 157.245.186.236 Sep 26 15:37:44 ns342841 sshd[25170]: Received disconnect from 157.245.186.236: 11: Bye Bye Sep 26 15:37:46 ns342841 sshd[25171]: Invalid user ubnt from 157.245.186.236 Sep 26 15:37:46 ns342841 sshd[25172]: Received disconnect from 157.245.186.236: 11: Bye Bye Sep 26 15:37:47 ns342841 sshd[25173]: Invalid user admin from 157.245.186.236 Sep 26 15:37:47 ns342841 sshd[25174]: Received disconnect from 157.245.186.236: 11: Bye Bye ........ ----------------------------------------------- https://www.blocklist.de/e |
2019-09-29 02:27:05 |
| 195.154.119.48 | attackspam | Sep 28 16:51:08 markkoudstaal sshd[353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.119.48 Sep 28 16:51:10 markkoudstaal sshd[353]: Failed password for invalid user qt123 from 195.154.119.48 port 60178 ssh2 Sep 28 16:55:23 markkoudstaal sshd[729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.119.48 |
2019-09-29 02:21:47 |
| 71.6.167.142 | attack | 09/28/2019-13:07:26.577348 71.6.167.142 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 71 |
2019-09-29 02:42:01 |
| 95.170.205.151 | attackspam | Sep 28 08:05:37 aiointranet sshd\[11678\]: Invalid user yb from 95.170.205.151 Sep 28 08:05:37 aiointranet sshd\[11678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.170.205.151 Sep 28 08:05:40 aiointranet sshd\[11678\]: Failed password for invalid user yb from 95.170.205.151 port 37047 ssh2 Sep 28 08:09:51 aiointranet sshd\[12120\]: Invalid user aq from 95.170.205.151 Sep 28 08:09:51 aiointranet sshd\[12120\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.170.205.151 |
2019-09-29 02:10:19 |
| 62.164.176.194 | attack | xmlrpc attack |
2019-09-29 02:37:53 |