City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.75.29.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47673
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;131.75.29.252. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 01:37:58 CST 2025
;; MSG SIZE rcvd: 106b'Host 252.29.75.131.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 131.75.29.252.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 168.128.70.151 | attackbots | Aug 6 15:55:50 marvibiene sshd[11797]: Failed password for root from 168.128.70.151 port 52570 ssh2 Aug 6 16:05:05 marvibiene sshd[12252]: Failed password for root from 168.128.70.151 port 37938 ssh2 |
2020-08-06 23:28:25 |
| 69.175.97.170 | attackspam | Automatic report - Banned IP Access |
2020-08-06 23:01:25 |
| 31.13.115.7 | attackspambots | [Thu Aug 06 20:25:04.020163 2020] [:error] [pid 20419:tid 139707921213184] [client 31.13.115.7:39632] [client 31.13.115.7] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/553-klimatologi/prakiraan-klimatologi/peringatan-dini/peringatan-dini-kekeringan/peringatan-dini-kekeringan-di-propinsi-jawa-timur/555558196-peringatan-dini-kekeringan-meteorologis-di-provinsi-jawa-timur-pemutakhiran-data-hingga-31-juli-202 ... |
2020-08-06 23:18:09 |
| 145.239.78.111 | attackspambots | 2020-08-06T16:11:44.946627amanda2.illicoweb.com sshd\[25275\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hopper.xsrvr.net user=root 2020-08-06T16:11:46.858644amanda2.illicoweb.com sshd\[25275\]: Failed password for root from 145.239.78.111 port 39658 ssh2 2020-08-06T16:17:21.508361amanda2.illicoweb.com sshd\[26596\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hopper.xsrvr.net user=root 2020-08-06T16:17:23.686183amanda2.illicoweb.com sshd\[26596\]: Failed password for root from 145.239.78.111 port 38332 ssh2 2020-08-06T16:20:13.473792amanda2.illicoweb.com sshd\[27255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hopper.xsrvr.net user=root ... |
2020-08-06 23:11:07 |
| 49.233.166.113 | attack | Aug 6 16:28:38 ip40 sshd[24374]: Failed password for root from 49.233.166.113 port 37402 ssh2 ... |
2020-08-06 23:04:07 |
| 202.133.56.235 | attackbots | Aug 6 15:16:14 ns382633 sshd\[4029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.133.56.235 user=root Aug 6 15:16:16 ns382633 sshd\[4029\]: Failed password for root from 202.133.56.235 port 58450 ssh2 Aug 6 15:17:21 ns382633 sshd\[4113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.133.56.235 user=root Aug 6 15:17:23 ns382633 sshd\[4113\]: Failed password for root from 202.133.56.235 port 41761 ssh2 Aug 6 15:25:45 ns382633 sshd\[5771\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.133.56.235 user=root |
2020-08-06 22:55:24 |
| 14.232.160.213 | attackbotsspam | Aug 6 17:05:01 nextcloud sshd\[11651\]: Invalid user !QA\#sw2\#ED from 14.232.160.213 Aug 6 17:05:01 nextcloud sshd\[11651\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.232.160.213 Aug 6 17:05:03 nextcloud sshd\[11651\]: Failed password for invalid user !QA\#sw2\#ED from 14.232.160.213 port 36262 ssh2 |
2020-08-06 23:06:09 |
| 49.234.124.120 | attack | Aug 6 17:57:52 journals sshd\[40809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.124.120 user=root Aug 6 17:57:54 journals sshd\[40809\]: Failed password for root from 49.234.124.120 port 42192 ssh2 Aug 6 18:00:05 journals sshd\[41076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.124.120 user=root Aug 6 18:00:07 journals sshd\[41076\]: Failed password for root from 49.234.124.120 port 37772 ssh2 Aug 6 18:02:26 journals sshd\[41284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.124.120 user=root ... |
2020-08-06 23:03:46 |
| 163.172.136.227 | attackbots | Aug 6 16:36:29 abendstille sshd\[14743\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.136.227 user=root Aug 6 16:36:31 abendstille sshd\[14743\]: Failed password for root from 163.172.136.227 port 41224 ssh2 Aug 6 16:40:39 abendstille sshd\[18328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.136.227 user=root Aug 6 16:40:41 abendstille sshd\[18328\]: Failed password for root from 163.172.136.227 port 51288 ssh2 Aug 6 16:44:37 abendstille sshd\[21839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.136.227 user=root ... |
2020-08-06 22:58:30 |
| 108.191.21.166 | attackbots | Automatic report - Banned IP Access |
2020-08-06 22:46:44 |
| 222.186.169.192 | attackbotsspam | 2020-08-06T14:50:14.588615abusebot.cloudsearch.cf sshd[22143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.192 user=root 2020-08-06T14:50:16.625060abusebot.cloudsearch.cf sshd[22143]: Failed password for root from 222.186.169.192 port 62848 ssh2 2020-08-06T14:50:19.587369abusebot.cloudsearch.cf sshd[22143]: Failed password for root from 222.186.169.192 port 62848 ssh2 2020-08-06T14:50:14.588615abusebot.cloudsearch.cf sshd[22143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.192 user=root 2020-08-06T14:50:16.625060abusebot.cloudsearch.cf sshd[22143]: Failed password for root from 222.186.169.192 port 62848 ssh2 2020-08-06T14:50:19.587369abusebot.cloudsearch.cf sshd[22143]: Failed password for root from 222.186.169.192 port 62848 ssh2 2020-08-06T14:50:14.588615abusebot.cloudsearch.cf sshd[22143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ... |
2020-08-06 22:51:34 |
| 212.174.9.218 | spam | phising attack in SA |
2020-08-06 23:05:04 |
| 112.85.42.174 | attack | Aug 6 11:29:54 firewall sshd[12438]: Failed password for root from 112.85.42.174 port 18639 ssh2 Aug 6 11:29:57 firewall sshd[12438]: Failed password for root from 112.85.42.174 port 18639 ssh2 Aug 6 11:30:01 firewall sshd[12438]: Failed password for root from 112.85.42.174 port 18639 ssh2 ... |
2020-08-06 22:46:28 |
| 138.68.221.125 | attackbots | Aug 6 15:25:01 rancher-0 sshd[844998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.221.125 user=root Aug 6 15:25:03 rancher-0 sshd[844998]: Failed password for root from 138.68.221.125 port 34710 ssh2 ... |
2020-08-06 23:11:36 |
| 179.177.220.255 | attackbotsspam | Failed password for root from 179.177.220.255 port 54596 ssh2 |
2020-08-06 23:28:58 |