City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.97.149.135
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46626
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.97.149.135. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012401 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 25 04:02:09 CST 2025
;; MSG SIZE rcvd: 106Host 135.149.97.13.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 135.149.97.13.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 176.108.27.157 | attackspambots | honeypot forum registration (user=Marionbit; email=gerbSorail@gmail.com) |
2020-09-02 05:04:19 |
| 95.179.141.174 | attackbots | Sep 1 13:25:58 shivevps sshd[27017]: Did not receive identification string from 95.179.141.174 port 55136 ... |
2020-09-02 05:09:10 |
| 193.112.49.125 | attackspambots | Sep 1 03:36:34 web1 sshd\[31386\]: Invalid user odoo from 193.112.49.125 Sep 1 03:36:34 web1 sshd\[31386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.49.125 Sep 1 03:36:36 web1 sshd\[31386\]: Failed password for invalid user odoo from 193.112.49.125 port 41626 ssh2 Sep 1 03:42:31 web1 sshd\[31881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.49.125 user=root Sep 1 03:42:32 web1 sshd\[31881\]: Failed password for root from 193.112.49.125 port 54028 ssh2 |
2020-09-02 04:56:17 |
| 182.208.252.91 | attackbots | Sep 1 14:30:54 web8 sshd\[20912\]: Invalid user oracle from 182.208.252.91 Sep 1 14:30:54 web8 sshd\[20912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.208.252.91 Sep 1 14:30:56 web8 sshd\[20912\]: Failed password for invalid user oracle from 182.208.252.91 port 40328 ssh2 Sep 1 14:33:54 web8 sshd\[22271\]: Invalid user zy from 182.208.252.91 Sep 1 14:33:54 web8 sshd\[22271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.208.252.91 |
2020-09-02 04:49:24 |
| 138.197.194.207 | attack | 138.197.194.207 - - \[01/Sep/2020:17:15:13 +0200\] "POST /wp-login.php HTTP/1.0" 200 3149 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 138.197.194.207 - - \[01/Sep/2020:17:15:16 +0200\] "POST /wp-login.php HTTP/1.0" 200 3152 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 138.197.194.207 - - \[01/Sep/2020:17:15:19 +0200\] "POST /wp-login.php HTTP/1.0" 200 3147 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-09-02 04:37:38 |
| 45.129.33.47 | attackspam | ET DROP Dshield Block Listed Source group 1 - port: 15577 proto: tcp cat: Misc Attackbytes: 60 |
2020-09-02 04:57:20 |
| 221.143.48.143 | attack | Sep 1 19:40:45 rotator sshd\[16792\]: Address 221.143.48.143 maps to mailfwd.mailplug.co.kr, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Sep 1 19:40:48 rotator sshd\[16792\]: Failed password for root from 221.143.48.143 port 33726 ssh2Sep 1 19:44:19 rotator sshd\[16809\]: Address 221.143.48.143 maps to mailfwd.mailplug.co.kr, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Sep 1 19:44:19 rotator sshd\[16809\]: Invalid user made from 221.143.48.143Sep 1 19:44:21 rotator sshd\[16809\]: Failed password for invalid user made from 221.143.48.143 port 41260 ssh2Sep 1 19:47:58 rotator sshd\[17571\]: Address 221.143.48.143 maps to mailfwd.mailplug.co.kr, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Sep 1 19:47:58 rotator sshd\[17571\]: Invalid user hadoop from 221.143.48.143 ... |
2020-09-02 04:41:41 |
| 186.229.25.18 | attackspam | Sep 1 13:26:03 shivevps sshd[27073]: Bad protocol version identification '\024' from 186.229.25.18 port 49485 ... |
2020-09-02 05:05:04 |
| 12.218.209.130 | attackspambots | Sep 1 13:26:32 shivevps sshd[27227]: Did not receive identification string from 12.218.209.130 port 45867 ... |
2020-09-02 04:42:15 |
| 122.35.120.59 | attackbotsspam | Sep 1 18:20:33 ajax sshd[30732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.35.120.59 Sep 1 18:20:35 ajax sshd[30732]: Failed password for invalid user sunil from 122.35.120.59 port 34072 ssh2 |
2020-09-02 05:10:20 |
| 222.175.100.120 | attackspam | Icarus honeypot on github |
2020-09-02 04:36:56 |
| 106.13.128.71 | attack | " " |
2020-09-02 04:59:04 |
| 167.249.168.131 | botsattack | https://youtu.be/OORReN7pQ5M |
2020-09-02 05:10:20 |
| 173.201.196.61 | attackspambots | xmlrpc attack |
2020-09-02 04:57:47 |
| 103.112.58.252 | attackbotsspam | Sep 1 13:26:04 shivevps sshd[27092]: Bad protocol version identification '\024' from 103.112.58.252 port 60487 ... |
2020-09-02 05:05:32 |