City: Boca Raton
Region: Florida
Country: United States
Internet Service Provider: AT&T
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.149.93.39
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58023
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;12.149.93.39. IN A
;; AUTHORITY SECTION:
. 282 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020090601 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 07 07:58:58 CST 2020
;; MSG SIZE rcvd: 116Host 39.93.149.12.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 39.93.149.12.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 121.7.194.71 | attack | SSH bruteforce (Triggered fail2ban) |
2019-10-21 23:32:35 |
| 138.197.13.103 | attackspam | [munged]::443 138.197.13.103 - - [21/Oct/2019:13:42:24 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 138.197.13.103 - - [21/Oct/2019:13:42:26 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 138.197.13.103 - - [21/Oct/2019:13:42:28 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 138.197.13.103 - - [21/Oct/2019:13:42:30 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 138.197.13.103 - - [21/Oct/2019:13:42:32 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 138.197.13.103 - - [21/Oct/2019:13:42:34 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11 |
2019-10-21 22:48:20 |
| 134.255.31.150 | attackspam | Automatic report - Port Scan Attack |
2019-10-21 23:01:53 |
| 178.175.132.165 | attackspambots | SSH bruteforce from 178.175.132.165 triggering fail2ban. |
2019-10-21 23:19:36 |
| 109.123.117.252 | attackspam | Port Scan |
2019-10-21 22:54:42 |
| 199.249.230.106 | attackbots | Automatic report - Banned IP Access |
2019-10-21 23:23:17 |
| 182.185.158.12 | attack | 2019-10-21 x@x 2019-10-21 11:58:48 unexpected disconnection while reading SMTP command from ([182.185.158.12]) [182.185.158.12]:39600 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=182.185.158.12 |
2019-10-21 23:27:37 |
| 41.67.44.189 | attack | C1,WP GET /wp-login.php |
2019-10-21 23:14:00 |
| 103.215.80.81 | attack | Oct 21 14:34:22 localhost sshd\[129821\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.215.80.81 user=root Oct 21 14:34:23 localhost sshd\[129821\]: Failed password for root from 103.215.80.81 port 34718 ssh2 Oct 21 14:38:34 localhost sshd\[129952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.215.80.81 user=root Oct 21 14:38:36 localhost sshd\[129952\]: Failed password for root from 103.215.80.81 port 57616 ssh2 Oct 21 14:43:03 localhost sshd\[130140\]: Invalid user tester from 103.215.80.81 port 52478 ... |
2019-10-21 22:55:41 |
| 88.118.215.157 | attackbots | Port Scan: TCP/443 |
2019-10-21 23:24:16 |
| 106.12.189.217 | attackspam | Automatic report - Banned IP Access |
2019-10-21 23:31:58 |
| 81.22.45.190 | attackbotsspam | Oct 21 16:53:06 mc1 kernel: \[2955940.227352\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=1500 PROTO=TCP SPT=56783 DPT=20918 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 16:56:20 mc1 kernel: \[2956133.652398\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=28451 PROTO=TCP SPT=56783 DPT=20938 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 16:57:39 mc1 kernel: \[2956213.267212\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=32980 PROTO=TCP SPT=56783 DPT=20833 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-21 23:06:49 |
| 41.249.231.249 | attack | 2019-10-21 x@x 2019-10-21 13:22:55 unexpected disconnection while reading SMTP command from ([41.249.231.249]) [41.249.231.249]:21487 I=[10.100.18.20]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=41.249.231.249 |
2019-10-21 22:53:04 |
| 212.156.77.122 | attack | 2019-10-21 x@x 2019-10-21 13:25:14 unexpected disconnection while reading SMTP command from (212.156.77.122.static.turktelekom.com.tr) [212.156.77.122]:33464 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=212.156.77.122 |
2019-10-21 23:21:01 |
| 113.11.37.175 | attackspambots | 2019-10-21 x@x 2019-10-21 12:03:16 unexpected disconnection while reading SMTP command from (113-11-37-175-smile.com.bd) [113.11.37.175]:26095 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.11.37.175 |
2019-10-21 23:33:12 |