City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 99.54.247.127
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13458
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;99.54.247.127. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021501 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 04:21:02 CST 2025
;; MSG SIZE rcvd: 106
b'Host 127.247.54.99.in-addr.arpa not found: 2(SERVFAIL)
'
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 127.247.54.99.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 141.98.81.207 | attackspambots | Unauthorised connection attempt detected at AUO FR1 NODE2. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-07-02 04:07:31 |
| 51.137.134.191 | attackspam | Jul 1 00:04:04 meumeu sshd[183772]: Invalid user noc from 51.137.134.191 port 45942 Jul 1 00:04:04 meumeu sshd[183772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.137.134.191 Jul 1 00:04:04 meumeu sshd[183772]: Invalid user noc from 51.137.134.191 port 45942 Jul 1 00:04:07 meumeu sshd[183772]: Failed password for invalid user noc from 51.137.134.191 port 45942 ssh2 Jul 1 00:07:22 meumeu sshd[183872]: Invalid user daniel from 51.137.134.191 port 44970 Jul 1 00:07:22 meumeu sshd[183872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.137.134.191 Jul 1 00:07:22 meumeu sshd[183872]: Invalid user daniel from 51.137.134.191 port 44970 Jul 1 00:07:24 meumeu sshd[183872]: Failed password for invalid user daniel from 51.137.134.191 port 44970 ssh2 Jul 1 00:10:37 meumeu sshd[184059]: Invalid user zhaoxu from 51.137.134.191 port 43998 ... |
2020-07-02 04:22:18 |
| 113.172.208.195 | attackspam | Email rejected due to spam filtering |
2020-07-02 04:04:45 |
| 200.24.65.232 | attackbotsspam | Jun 26 02:45:30 mail.srvfarm.net postfix/smtpd[2319708]: warning: unknown[200.24.65.232]: SASL PLAIN authentication failed: Jun 26 02:45:31 mail.srvfarm.net postfix/smtpd[2319708]: lost connection after AUTH from unknown[200.24.65.232] Jun 26 02:47:14 mail.srvfarm.net postfix/smtpd[2319706]: warning: unknown[200.24.65.232]: SASL PLAIN authentication failed: Jun 26 02:47:14 mail.srvfarm.net postfix/smtpd[2319706]: lost connection after AUTH from unknown[200.24.65.232] Jun 26 02:50:15 mail.srvfarm.net postfix/smtps/smtpd[2324939]: warning: unknown[200.24.65.232]: SASL PLAIN authentication failed: |
2020-07-02 04:18:11 |
| 114.7.197.82 | attack | 114.7.197.82 - - [30/Jun/2020:11:42:01 +0200] "GET /wp-login.php HTTP/1.1" 200 5990 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 114.7.197.82 - - [30/Jun/2020:11:42:03 +0200] "POST /wp-login.php HTTP/1.1" 200 6220 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 114.7.197.82 - - [30/Jun/2020:11:42:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-07-02 03:26:34 |
| 144.217.62.153 | proxy | It’s a ovh |
2020-07-02 03:32:24 |
| 195.138.73.131 | attack | Dovecot Invalid User Login Attempt. |
2020-07-02 03:51:15 |
| 141.98.81.6 | attackspambots | Jun 30 19:09:14 dns1 sshd[28937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.6 Jun 30 19:09:15 dns1 sshd[28937]: Failed password for invalid user 1234 from 141.98.81.6 port 22088 ssh2 Jun 30 19:09:45 dns1 sshd[29052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.6 |
2020-07-02 03:36:57 |
| 186.251.224.200 | attackbotsspam | Multiple SSH authentication failures from 186.251.224.200 |
2020-07-02 03:52:28 |
| 104.248.5.69 | attack | Jun 30 18:47:24 NPSTNNYC01T sshd[27378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.5.69 Jun 30 18:47:25 NPSTNNYC01T sshd[27378]: Failed password for invalid user pablo from 104.248.5.69 port 58994 ssh2 Jun 30 18:50:28 NPSTNNYC01T sshd[27596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.5.69 ... |
2020-07-02 04:14:42 |
| 159.89.157.126 | attackbots | TCP ports : 21 / 23 / 110 / 502 / 993 / 1521 / 3306 / 5432 / 27017 / 47808 |
2020-07-02 03:53:02 |
| 49.235.90.244 | attackspam | Jul 1 00:10:32 server sshd[42002]: Failed password for invalid user vnc from 49.235.90.244 port 53788 ssh2 Jul 1 00:18:32 server sshd[48348]: Failed password for invalid user git from 49.235.90.244 port 55300 ssh2 Jul 1 00:23:41 server sshd[52592]: Failed password for invalid user administrador from 49.235.90.244 port 32874 ssh2 |
2020-07-02 04:25:07 |
| 86.120.194.93 | attack | Unauthorised access (Apr 9) SRC=86.120.194.93 LEN=40 TTL=245 ID=44045 DF TCP DPT=23 WINDOW=14600 SYN |
2020-07-02 04:01:38 |
| 14.160.38.18 | attack | ... |
2020-07-02 03:58:22 |
| 157.230.19.72 | attackbots | Jun 30 18:24:49 NPSTNNYC01T sshd[25826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.19.72 Jun 30 18:24:52 NPSTNNYC01T sshd[25826]: Failed password for invalid user dbseller from 157.230.19.72 port 47764 ssh2 Jun 30 18:27:52 NPSTNNYC01T sshd[25976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.19.72 ... |
2020-07-02 03:50:19 |