City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.131.53.42 | attack | SSH Brute Force |
2020-04-29 13:39:00 |
| 104.131.53.42 | attackbots | k+ssh-bruteforce |
2020-04-15 06:04:24 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.53.113
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2968
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.131.53.113. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 02:18:52 CST 2022
;; MSG SIZE rcvd: 107113.53.131.104.in-addr.arpa domain name pointer genustecnologia.com.br.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
113.53.131.104.in-addr.arpa name = genustecnologia.com.br.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.28.250.66 | attackspam | 202.28.250.66 - - [22/Sep/2020:21:34:58 +0200] "GET /wp-login.php HTTP/1.1" 200 8558 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 202.28.250.66 - - [22/Sep/2020:21:35:02 +0200] "POST /wp-login.php HTTP/1.1" 200 8809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 202.28.250.66 - - [22/Sep/2020:21:35:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-23 06:51:40 |
| 170.80.141.41 | attackbots | Unauthorized connection attempt from IP address 170.80.141.41 on Port 445(SMB) |
2020-09-23 06:55:34 |
| 185.191.171.7 | attackspam | The IP has triggered Cloudflare WAF. CF-Ray: 5d694d0e1e8fea24 | WAF_Rule_ID: 4c344d8609cf47c88674e7c5f743a22c | WAF_Kind: firewall | CF_Action: drop | Country: NL | CF_IPClass: unknown | Protocol: HTTP/1.1 | Method: GET | Host: www.wevg.org | User-Agent: Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html) | CF_DC: IAD. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2020-09-23 06:35:13 |
| 78.189.213.11 | attackbotsspam | Unauthorized connection attempt from IP address 78.189.213.11 on Port 445(SMB) |
2020-09-23 06:20:31 |
| 189.26.221.82 | attack | Unauthorized connection attempt from IP address 189.26.221.82 on Port 445(SMB) |
2020-09-23 06:17:04 |
| 114.33.63.209 | attackbots | Telnet Server BruteForce Attack |
2020-09-23 06:16:46 |
| 115.98.13.144 | attackspam | Tried our host z. |
2020-09-23 06:36:43 |
| 91.144.218.61 | attackspam | SSH Brute-force |
2020-09-23 06:53:31 |
| 106.51.98.159 | attack | Sep 23 00:07:53 jane sshd[5086]: Failed password for root from 106.51.98.159 port 34446 ssh2 ... |
2020-09-23 06:44:33 |
| 68.183.94.180 | attackbots | 68.183.94.180 - - [23/Sep/2020:00:21:30 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.94.180 - - [23/Sep/2020:00:21:31 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.94.180 - - [23/Sep/2020:00:21:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-23 06:27:29 |
| 78.87.195.4 | attack | Telnet Server BruteForce Attack |
2020-09-23 06:25:21 |
| 174.235.10.247 | attackbots | Brute forcing email accounts |
2020-09-23 06:45:58 |
| 42.112.201.39 | attackbots | port scan and connect, tcp 23 (telnet) |
2020-09-23 06:56:07 |
| 49.88.112.60 | attackbots | Sep 23 01:12:30 baraca inetd[2558]: refused connection from 49.88.112.60, service sshd (tcp) Sep 23 01:13:36 baraca inetd[2611]: refused connection from 49.88.112.60, service sshd (tcp) Sep 23 01:14:43 baraca inetd[2637]: refused connection from 49.88.112.60, service sshd (tcp) ... |
2020-09-23 06:47:12 |
| 218.92.0.175 | attack | Sep 23 00:19:34 jane sshd[14715]: Failed password for root from 218.92.0.175 port 17250 ssh2 Sep 23 00:19:38 jane sshd[14715]: Failed password for root from 218.92.0.175 port 17250 ssh2 ... |
2020-09-23 06:26:57 |