City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.200.1.15
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25545
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.200.1.15. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021900 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 21:42:19 CST 2025
;; MSG SIZE rcvd: 105Host 15.1.200.134.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 15.1.200.134.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 41.72.219.102 | attack | 2019-11-20T00:34:40.219840hub.schaetter.us sshd\[22069\]: Invalid user ABC1234%\^\&\* from 41.72.219.102 port 37134 2019-11-20T00:34:40.229903hub.schaetter.us sshd\[22069\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.72.219.102 2019-11-20T00:34:42.381773hub.schaetter.us sshd\[22069\]: Failed password for invalid user ABC1234%\^\&\* from 41.72.219.102 port 37134 ssh2 2019-11-20T00:40:22.019827hub.schaetter.us sshd\[22110\]: Invalid user testuser from 41.72.219.102 port 45396 2019-11-20T00:40:22.033364hub.schaetter.us sshd\[22110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.72.219.102 ... |
2019-11-20 08:47:24 |
| 167.99.82.150 | attackbotsspam | WEB Masscan Scanner Activity |
2019-11-20 08:59:06 |
| 163.172.47.200 | attack | [Tue Nov 19 19:41:40.835593 2019] [:error] [pid 224330] [client 163.172.47.200:61000] [client 163.172.47.200] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ws22vmsma01.ufn.edu.br"] [uri "/"] [unique_id "XdRvpDj-GIgicCSeUO4JFAAAAAQ"] ... |
2019-11-20 08:59:52 |
| 40.68.102.132 | attackspam | Nov 20 05:53:46 MK-Soft-Root2 sshd[32711]: Failed password for news from 40.68.102.132 port 44056 ssh2 Nov 20 05:57:49 MK-Soft-Root2 sshd[1006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.68.102.132 ... |
2019-11-20 13:06:21 |
| 65.102.177.195 | attackbotsspam | WEB Dasan GPON Routers Command Injection -1.1 (CVE-2018-10561) |
2019-11-20 08:53:21 |
| 45.148.10.62 | attack | 26/tcp 465/tcp 587/tcp... [2019-09-21/11-19]34pkt,6pt.(tcp) |
2019-11-20 08:43:19 |
| 220.179.68.246 | attack | detected by Fail2Ban |
2019-11-20 13:07:26 |
| 109.190.43.165 | attackspam | Nov 20 06:18:30 areeb-Workstation sshd[7003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.190.43.165 Nov 20 06:18:32 areeb-Workstation sshd[7003]: Failed password for invalid user Asdf1234!@#$ from 109.190.43.165 port 51833 ssh2 ... |
2019-11-20 09:05:19 |
| 111.225.0.208 | attackspambots | Bruteforce on smtp |
2019-11-20 09:07:08 |
| 193.56.28.130 | attackbotsspam | Nov 19 23:50:30 heicom postfix/smtpd\[4850\]: warning: unknown\[193.56.28.130\]: SASL LOGIN authentication failed: authentication failure Nov 19 23:50:30 heicom postfix/smtpd\[4850\]: warning: unknown\[193.56.28.130\]: SASL LOGIN authentication failed: authentication failure Nov 19 23:50:31 heicom postfix/smtpd\[4850\]: warning: unknown\[193.56.28.130\]: SASL LOGIN authentication failed: authentication failure Nov 19 23:50:31 heicom postfix/smtpd\[4850\]: warning: unknown\[193.56.28.130\]: SASL LOGIN authentication failed: authentication failure Nov 19 23:50:31 heicom postfix/smtpd\[4850\]: warning: unknown\[193.56.28.130\]: SASL LOGIN authentication failed: authentication failure ... |
2019-11-20 09:07:25 |
| 159.148.211.97 | attack | WEB Masscan Scanner Activity |
2019-11-20 08:49:41 |
| 112.85.42.89 | attackbotsspam | Nov 20 05:02:39 raspberrypi sshd\[10225\]: Failed password for root from 112.85.42.89 port 14875 ssh2Nov 20 05:02:41 raspberrypi sshd\[10225\]: Failed password for root from 112.85.42.89 port 14875 ssh2Nov 20 05:02:44 raspberrypi sshd\[10225\]: Failed password for root from 112.85.42.89 port 14875 ssh2 ... |
2019-11-20 13:06:39 |
| 106.75.134.239 | attackspambots | Nov 20 01:15:36 MK-Soft-VM8 sshd[17181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.134.239 Nov 20 01:15:38 MK-Soft-VM8 sshd[17181]: Failed password for invalid user passwd000 from 106.75.134.239 port 54674 ssh2 ... |
2019-11-20 09:08:08 |
| 162.62.26.17 | attack | 6082/tcp 445/tcp 27016/tcp... [2019-09-25/11-19]9pkt,7pt.(tcp),2pt.(udp) |
2019-11-20 08:46:41 |
| 51.75.53.115 | attackspam | Nov 20 06:00:30 SilenceServices sshd[13805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.53.115 Nov 20 06:00:31 SilenceServices sshd[13805]: Failed password for invalid user rebe from 51.75.53.115 port 54478 ssh2 Nov 20 06:04:13 SilenceServices sshd[14854]: Failed password for root from 51.75.53.115 port 34746 ssh2 |
2019-11-20 13:05:33 |