City: unknown
Region: unknown
Country: Türkiye
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.54.4.170
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8112
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.54.4.170.			IN	A
;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400
;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 22 17:50:46 CST 2025
;; MSG SIZE  rcvd: 104Host 170.4.54.94.in-addr.arpa. not found: 3(NXDOMAIN)Server:		183.60.83.19
Address:	183.60.83.19#53
** server can't find 170.4.54.94.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime | 
|---|---|---|---|
| 140.237.15.229 | attack | Jul 30 22:18:36 daenerys postfix/smtpd[25920]: warning: unknown[140.237.15.229]: SASL login authentication failed: UGFzc3dvcmQ6 Jul 30 22:18:45 daenerys postfix/smtpd[25920]: warning: unknown[140.237.15.229]: SASL login authentication failed: UGFzc3dvcmQ6 Jul 30 22:19:03 daenerys postfix/smtpd[25920]: warning: unknown[140.237.15.229]: SASL login authentication failed: UGFzc3dvcmQ6 Jul 30 22:19:21 daenerys postfix/smtpd[25920]: warning: unknown[140.237.15.229]: SASL login authentication failed: Connection lost to authentication server Jul 30 22:19:27 daenerys postfix/smtpd[25920]: warning: unknown[140.237.15.229]: SASL login authentication failed: UGFzc3dvcmQ6 | 2020-07-31 08:20:12 | 
| 198.38.84.254 | attackbotsspam | 198.38.84.254 - - [31/Jul/2020:00:21:05 +0100] "POST /wp-login.php HTTP/1.1" 200 1960 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.38.84.254 - - [31/Jul/2020:00:21:06 +0100] "POST /wp-login.php HTTP/1.1" 200 1937 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.38.84.254 - - [31/Jul/2020:00:21:07 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... | 2020-07-31 07:56:22 | 
| 186.122.148.9 | attackspam | Invalid user xuyue from 186.122.148.9 port 49402 | 2020-07-31 07:44:28 | 
| 222.186.175.169 | attackbotsspam | Jul 31 01:51:17 vm1 sshd[955]: Failed password for root from 222.186.175.169 port 18046 ssh2 Jul 31 01:51:31 vm1 sshd[955]: Failed password for root from 222.186.175.169 port 18046 ssh2 Jul 31 01:51:31 vm1 sshd[955]: error: maximum authentication attempts exceeded for root from 222.186.175.169 port 18046 ssh2 [preauth] ... | 2020-07-31 07:51:52 | 
| 123.30.149.92 | attackspam | Jul 30 23:06:52 ns382633 sshd\[13370\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.149.92 user=root Jul 30 23:06:55 ns382633 sshd\[13370\]: Failed password for root from 123.30.149.92 port 60828 ssh2 Jul 30 23:12:07 ns382633 sshd\[14392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.149.92 user=root Jul 30 23:12:09 ns382633 sshd\[14392\]: Failed password for root from 123.30.149.92 port 19912 ssh2 Jul 30 23:15:52 ns382633 sshd\[15125\]: Invalid user 1r2t3y4u from 123.30.149.92 port 16797 Jul 30 23:15:52 ns382633 sshd\[15125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.149.92 | 2020-07-31 08:02:31 | 
| 79.174.24.172 | attack | Automatic report - Banned IP Access | 2020-07-31 08:19:30 | 
| 139.59.71.74 | attackbots | [ssh] SSH attack | 2020-07-31 08:14:55 | 
| 51.91.123.119 | attackbots | SSH Invalid Login | 2020-07-31 07:51:20 | 
| 67.68.120.95 | attack | Jul 30 03:03:50 XXX sshd[42743]: Invalid user acer from 67.68.120.95 port 45679 | 2020-07-31 08:05:03 | 
| 173.161.87.170 | attackspambots | Jul 30 22:04:44 h2646465 sshd[24440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.161.87.170 user=root Jul 30 22:04:46 h2646465 sshd[24440]: Failed password for root from 173.161.87.170 port 35138 ssh2 Jul 30 22:13:48 h2646465 sshd[25755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.161.87.170 user=root Jul 30 22:13:50 h2646465 sshd[25755]: Failed password for root from 173.161.87.170 port 34818 ssh2 Jul 30 22:15:51 h2646465 sshd[26289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.161.87.170 user=root Jul 30 22:15:53 h2646465 sshd[26289]: Failed password for root from 173.161.87.170 port 59008 ssh2 Jul 30 22:17:54 h2646465 sshd[26408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.161.87.170 user=root Jul 30 22:17:57 h2646465 sshd[26408]: Failed password for root from 173.161.87.170 port 54972 ssh2 Jul 30 22:19:58 h264 | 2020-07-31 07:53:46 | 
| 128.199.233.3 | attackbots | WordPress XMLRPC scan :: 128.199.233.3 0.200 BYPASS [30/Jul/2020:23:19:42 0000] [censored_2] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" | 2020-07-31 07:54:28 | 
| 138.68.80.235 | attackbotsspam | xmlrpc attack | 2020-07-31 07:48:16 | 
| 157.100.33.91 | attackbotsspam | Jul 30 18:27:50 XXX sshd[57613]: Invalid user magfield from 157.100.33.91 port 48666 | 2020-07-31 08:14:07 | 
| 54.38.240.23 | attackspambots | Jul 31 00:06:35 eventyay sshd[8357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.240.23 Jul 31 00:06:37 eventyay sshd[8357]: Failed password for invalid user cosmika from 54.38.240.23 port 39992 ssh2 Jul 31 00:10:37 eventyay sshd[8516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.240.23 ... | 2020-07-31 08:11:25 | 
| 152.136.53.29 | attackbots | Jul 31 01:38:57 hell sshd[16956]: Failed password for root from 152.136.53.29 port 54962 ssh2 ... | 2020-07-31 07:54:12 |