City: Shenzhen
Region: Guangdong
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 115.45.41.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6121
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;115.45.41.140. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026012501 1800 900 604800 86400
;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 26 11:59:11 CST 2026
;; MSG SIZE rcvd: 106Host 140.41.45.115.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 140.41.45.115.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 75.86.184.75 | attackspam | Sep 11 18:03:33 root sshd[22318]: Invalid user user from 75.86.184.75 ... |
2020-09-11 23:32:28 |
| 145.239.82.87 | attackspambots | $f2bV_matches |
2020-09-11 23:28:00 |
| 119.45.50.126 | attackbotsspam | Sep 11 09:18:21 Ubuntu-1404-trusty-64-minimal sshd\[26901\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.50.126 user=root Sep 11 09:18:23 Ubuntu-1404-trusty-64-minimal sshd\[26901\]: Failed password for root from 119.45.50.126 port 44734 ssh2 Sep 11 09:30:50 Ubuntu-1404-trusty-64-minimal sshd\[7043\]: Invalid user cecilia from 119.45.50.126 Sep 11 09:30:50 Ubuntu-1404-trusty-64-minimal sshd\[7043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.50.126 Sep 11 09:30:53 Ubuntu-1404-trusty-64-minimal sshd\[7043\]: Failed password for invalid user cecilia from 119.45.50.126 port 46320 ssh2 |
2020-09-11 23:52:42 |
| 195.54.166.211 | attackspambots | Sep 10 18:55:09 10.23.102.230 wordpress(www.ruhnke.cloud)[31671]: Blocked user enumeration attempt from 195.54.166.211 ... |
2020-09-11 23:49:09 |
| 115.99.72.185 | attackbotsspam | /HNAP1/ |
2020-09-11 23:29:07 |
| 24.51.127.161 | attack | Sep 11 10:01:45 vps639187 sshd\[4807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.51.127.161 user=root Sep 11 10:01:47 vps639187 sshd\[4807\]: Failed password for root from 24.51.127.161 port 55944 ssh2 Sep 11 10:01:49 vps639187 sshd\[4809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.51.127.161 user=root ... |
2020-09-11 23:44:59 |
| 186.64.111.114 | attackspambots | [f2b] sshd bruteforce, retries: 1 |
2020-09-11 23:21:57 |
| 61.84.196.50 | attackbotsspam | Automatic report BANNED IP |
2020-09-11 23:11:55 |
| 61.177.172.168 | attack | [MK-VM4] SSH login failed |
2020-09-11 23:46:16 |
| 181.46.164.9 | attackbots | (cxs) cxs mod_security triggered by 181.46.164.9 (AR/Argentina/cpe-181-46-164-9.telecentro-reversos.com.ar): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_CXS; Logs: [Thu Sep 10 18:55:20.401814 2020] [:error] [pid 3943566:tid 47466712020736] [client 181.46.164.9:17461] [client 181.46.164.9] ModSecurity: Access denied with code 403 (phase 2). File "/tmp/20200910-185518-X1padp1cg7rkBOBCfBdcDgAAAA0-file-JRUfUL" rejected by the approver script "/etc/cxs/cxscgi.sh": 0 [file "/etc/apache2/conf.d/modsec_vendor_configs/configserver/00_configserver.conf"] [line "7"] [id "1010101"] [msg "ConfigServer Exploit Scanner (cxs) triggered"] [severity "CRITICAL"] [hostname "gastro-ptuj.si"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "X1padp1cg7rkBOBCfBdcDgAAAA0"], referer: http://gastro-ptuj.si/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php |
2020-09-11 23:34:52 |
| 111.71.36.30 | attack | 1599756914 - 09/10/2020 18:55:14 Host: 111.71.36.30/111.71.36.30 Port: 445 TCP Blocked |
2020-09-11 23:44:22 |
| 94.102.49.159 | attackspam | Excessive Port-Scanning |
2020-09-11 23:51:01 |
| 175.206.43.79 | attack | Sep 10 18:55:45 db sshd[26783]: User root from 175.206.43.79 not allowed because none of user's groups are listed in AllowGroups ... |
2020-09-11 23:17:18 |
| 42.200.78.78 | attackbots | Sep 11 12:19:55 firewall sshd[9674]: Failed password for root from 42.200.78.78 port 32816 ssh2 Sep 11 12:22:24 firewall sshd[9724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.200.78.78 user=root Sep 11 12:22:27 firewall sshd[9724]: Failed password for root from 42.200.78.78 port 43448 ssh2 ... |
2020-09-11 23:48:11 |
| 177.184.202.217 | attackspambots | 5x Failed Password |
2020-09-11 23:46:41 |