City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.8.110.17
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42527
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;131.8.110.17. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020302 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 13:09:37 CST 2025
;; MSG SIZE rcvd: 105Host 17.110.8.131.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 17.110.8.131.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 114.79.19.223 | attackbots | [Thu Aug 13 10:47:47.880065 2020] [:error] [pid 6782:tid 140397710505728] [client 114.79.19.223:45013] [client 114.79.19.223] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "XzS34702rmmayZvC0xQrTgABaAM"], referer: https://www.google.com/
... |
2020-08-13 18:55:48 |
| 118.24.119.49 | attack | Aug 13 05:53:47 ns382633 sshd\[26199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.119.49 user=root Aug 13 05:53:48 ns382633 sshd\[26199\]: Failed password for root from 118.24.119.49 port 57924 ssh2 Aug 13 05:59:59 ns382633 sshd\[27228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.119.49 user=root Aug 13 06:00:01 ns382633 sshd\[27228\]: Failed password for root from 118.24.119.49 port 33266 ssh2 Aug 13 06:03:18 ns382633 sshd\[28045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.119.49 user=root |
2020-08-13 18:51:19 |
| 51.79.160.138 | attackbots | Aug 11 03:07:50 pl3server sshd[30754]: Invalid user admin from 51.79.160.138 port 45715 Aug 11 03:07:51 pl3server sshd[30754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.160.138 Aug 11 03:07:53 pl3server sshd[30754]: Failed password for invalid user admin from 51.79.160.138 port 45715 ssh2 Aug 11 03:07:54 pl3server sshd[30754]: Connection closed by 51.79.160.138 port 45715 [preauth] Aug 11 03:07:57 pl3server sshd[30800]: Invalid user admin from 51.79.160.138 port 42111 Aug 11 03:07:58 pl3server sshd[30800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.160.138 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=51.79.160.138 |
2020-08-13 19:20:30 |
| 45.148.121.124 | attackspambots | TCP port : 52869 |
2020-08-13 18:47:48 |
| 84.27.182.186 | attackspambots | Invalid user pi from 84.27.182.186 port 59074 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84-27-182-186.cable.dynamic.v4.ziggo.nl Invalid user pi from 84.27.182.186 port 59074 Failed password for invalid user pi from 84.27.182.186 port 59074 ssh2 Invalid user pi from 84.27.182.186 port 36136 |
2020-08-13 19:18:22 |
| 195.54.161.59 | attackbotsspam | TCP port : 18930 |
2020-08-13 19:21:58 |
| 218.92.0.219 | attackbots | Aug 13 11:08:22 scw-6657dc sshd[28980]: Failed password for root from 218.92.0.219 port 61876 ssh2 Aug 13 11:08:22 scw-6657dc sshd[28980]: Failed password for root from 218.92.0.219 port 61876 ssh2 Aug 13 11:08:25 scw-6657dc sshd[28980]: Failed password for root from 218.92.0.219 port 61876 ssh2 ... |
2020-08-13 19:08:29 |
| 195.54.161.252 | attackspambots |
|
2020-08-13 19:17:52 |
| 61.177.172.41 | attack | Aug 13 06:51:50 ny01 sshd[30495]: Failed password for root from 61.177.172.41 port 59734 ssh2 Aug 13 06:52:03 ny01 sshd[30495]: Failed password for root from 61.177.172.41 port 59734 ssh2 Aug 13 06:52:03 ny01 sshd[30495]: error: maximum authentication attempts exceeded for root from 61.177.172.41 port 59734 ssh2 [preauth] |
2020-08-13 18:54:09 |
| 154.204.25.158 | attack | Aug 12 16:57:23 cumulus sshd[21056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.204.25.158 user=r.r Aug 12 16:57:25 cumulus sshd[21056]: Failed password for r.r from 154.204.25.158 port 39882 ssh2 Aug 12 16:57:25 cumulus sshd[21056]: Received disconnect from 154.204.25.158 port 39882:11: Bye Bye [preauth] Aug 12 16:57:25 cumulus sshd[21056]: Disconnected from 154.204.25.158 port 39882 [preauth] Aug 12 17:09:10 cumulus sshd[22320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.204.25.158 user=r.r Aug 12 17:09:11 cumulus sshd[22320]: Failed password for r.r from 154.204.25.158 port 56618 ssh2 Aug 12 17:09:12 cumulus sshd[22320]: Received disconnect from 154.204.25.158 port 56618:11: Bye Bye [preauth] Aug 12 17:09:12 cumulus sshd[22320]: Disconnected from 154.204.25.158 port 56618 [preauth] Aug 12 17:12:54 cumulus sshd[22634]: pam_unix(sshd:auth): authentication failure; lognam........ ------------------------------- |
2020-08-13 19:17:14 |
| 98.143.148.45 | attackspam | Aug 13 08:53:22 serwer sshd\[645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.143.148.45 user=root Aug 13 08:53:24 serwer sshd\[645\]: Failed password for root from 98.143.148.45 port 38704 ssh2 Aug 13 08:59:12 serwer sshd\[1183\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.143.148.45 user=root ... |
2020-08-13 19:07:28 |
| 139.219.234.171 | attackbotsspam | Aug 13 05:47:56 kh-dev-server sshd[3487]: Failed password for root from 139.219.234.171 port 10112 ssh2 ... |
2020-08-13 18:50:55 |
| 3.237.24.79 | attack |
|
2020-08-13 19:13:26 |
| 116.196.101.168 | attackspam | Aug 13 17:53:22 itv-usvr-01 sshd[22451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.101.168 user=root Aug 13 17:53:24 itv-usvr-01 sshd[22451]: Failed password for root from 116.196.101.168 port 49442 ssh2 Aug 13 17:57:25 itv-usvr-01 sshd[23027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.101.168 user=root Aug 13 17:57:27 itv-usvr-01 sshd[23027]: Failed password for root from 116.196.101.168 port 35402 ssh2 Aug 13 17:59:41 itv-usvr-01 sshd[23141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.101.168 user=root Aug 13 17:59:43 itv-usvr-01 sshd[23141]: Failed password for root from 116.196.101.168 port 33916 ssh2 |
2020-08-13 19:23:38 |
| 2a01:4f8:161:7181::2 | attack | Web bot scraping website [bot:mj12bot] |
2020-08-13 19:08:03 |