City: unknown
Region: unknown
Country: Canada
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.138.239.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5603
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;131.138.239.157. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 00:41:47 CST 2025
;; MSG SIZE rcvd: 108Host 157.239.138.131.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 157.239.138.131.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 200.150.77.93 | attackspambots | Aug 11 05:49:14 mail sshd[30792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.150.77.93 user=root Aug 11 05:49:16 mail sshd[30792]: Failed password for root from 200.150.77.93 port 37000 ssh2 ... |
2020-08-11 18:28:47 |
| 218.94.143.226 | attackspambots | Aug 11 08:10:18 piServer sshd[15497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.94.143.226 Aug 11 08:10:20 piServer sshd[15497]: Failed password for invalid user itsoft from 218.94.143.226 port 33582 ssh2 Aug 11 08:14:37 piServer sshd[17336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.94.143.226 ... |
2020-08-11 18:21:48 |
| 187.217.79.94 | attack | Aug 11 10:38:59 vps647732 sshd[13441]: Failed password for root from 187.217.79.94 port 56858 ssh2 ... |
2020-08-11 18:34:20 |
| 112.85.42.104 | attackspam | 2020-08-11T12:38:15.833780vps751288.ovh.net sshd\[622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.104 user=root 2020-08-11T12:38:17.368109vps751288.ovh.net sshd\[622\]: Failed password for root from 112.85.42.104 port 15767 ssh2 2020-08-11T12:38:20.295295vps751288.ovh.net sshd\[622\]: Failed password for root from 112.85.42.104 port 15767 ssh2 2020-08-11T12:38:22.963121vps751288.ovh.net sshd\[622\]: Failed password for root from 112.85.42.104 port 15767 ssh2 2020-08-11T12:38:26.663881vps751288.ovh.net sshd\[624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.104 user=root |
2020-08-11 18:40:03 |
| 72.166.243.197 | attackspam | 2020-08-10 15:19:30 Unauthorized connection attempt to IMAP/POP |
2020-08-11 18:56:01 |
| 219.85.82.161 | attackbotsspam | Hits on port : 23 |
2020-08-11 18:37:26 |
| 35.236.186.77 | attackspam | Lines containing failures of 35.236.186.77 Aug 1 13:58:01 server-name sshd[30264]: User r.r from 35.236.186.77 not allowed because not listed in AllowUsers Aug 1 13:58:01 server-name sshd[30264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.236.186.77 user=r.r Aug 1 13:58:03 server-name sshd[30264]: Failed password for invalid user r.r from 35.236.186.77 port 48522 ssh2 Aug 1 13:58:04 server-name sshd[30264]: Received disconnect from 35.236.186.77 port 48522:11: Bye Bye [preauth] Aug 1 13:58:04 server-name sshd[30264]: Disconnected from invalid user r.r 35.236.186.77 port 48522 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=35.236.186.77 |
2020-08-11 18:58:25 |
| 222.186.52.78 | attack | Too many connections or unauthorized access detected from Arctic banned ip |
2020-08-11 18:50:24 |
| 167.71.45.35 | attack | 167.71.45.35 - - [11/Aug/2020:09:22:33 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.45.35 - - [11/Aug/2020:09:22:34 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.45.35 - - [11/Aug/2020:09:22:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-11 18:39:20 |
| 69.171.251.119 | attack | [Tue Aug 11 10:49:25.609140 2020] [:error] [pid 19073:tid 140057356908288] [client 69.171.251.119:61404] [client 69.171.251.119] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "XzIVRQItzlV1MKh79GOpigABEAM"], referer: https://karangploso.jatim.bmkg.go.id/ ... |
2020-08-11 18:24:49 |
| 51.77.194.232 | attackbots | fail2ban -- 51.77.194.232 ... |
2020-08-11 18:47:14 |
| 218.161.56.226 | attackbotsspam | Hits on port : 23 |
2020-08-11 18:38:17 |
| 125.161.165.129 | attack | sshd: Failed password for .... from 125.161.165.129 port 41962 ssh2 |
2020-08-11 18:49:18 |
| 49.234.67.23 | attackbotsspam | 2020-08-10 UTC: (7x) - 123123abc,1qaz#EDCxsw2,321a,43210,784512,root(2x) |
2020-08-11 18:56:43 |
| 175.125.95.160 | attackspambots | Aug 11 06:45:24 cosmoit sshd[20016]: Failed password for root from 175.125.95.160 port 33476 ssh2 |
2020-08-11 18:45:00 |