City: Albuquerque
Region: New Mexico
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.253.159.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22056
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.253.159.38. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012802 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 08:11:15 CST 2025
;; MSG SIZE rcvd: 107Host 38.159.253.134.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 38.159.253.134.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.143.98.84 | attackspam | Aug 12 04:43:03 vayu sshd[26036]: reveeclipse mapping checking getaddrinfo for 14.143.98.84.static-mumbai.vsnl.net.in [14.143.98.84] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 12 04:43:03 vayu sshd[26036]: Invalid user clue from 14.143.98.84 Aug 12 04:43:04 vayu sshd[26036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.143.98.84 Aug 12 04:43:05 vayu sshd[26036]: Failed password for invalid user clue from 14.143.98.84 port 47548 ssh2 Aug 12 04:43:05 vayu sshd[26036]: Received disconnect from 14.143.98.84: 11: Bye Bye [preauth] Aug 12 04:53:27 vayu sshd[32588]: reveeclipse mapping checking getaddrinfo for 14.143.98.84.static-mumbai.vsnl.net.in [14.143.98.84] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 12 04:53:27 vayu sshd[32588]: Invalid user staffc from 14.143.98.84 Aug 12 04:53:27 vayu sshd[32588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.143.98.84 Aug 12 04:53:29 vayu sshd[32588........ ------------------------------- |
2019-08-12 15:05:09 |
| 36.89.146.252 | attackspambots | Aug 12 04:21:34 debian sshd\[30988\]: Invalid user mc3 from 36.89.146.252 port 20040 Aug 12 04:21:34 debian sshd\[30988\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.89.146.252 ... |
2019-08-12 14:43:40 |
| 185.176.27.18 | attackbots | 08/12/2019-02:02:33.629662 185.176.27.18 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-08-12 14:38:58 |
| 59.188.250.56 | attack | Aug 12 08:19:41 dedicated sshd[31687]: Invalid user erpnext from 59.188.250.56 port 55106 |
2019-08-12 14:39:49 |
| 124.156.13.156 | attack | Aug 12 07:51:05 MK-Soft-Root1 sshd\[26913\]: Invalid user oriiz from 124.156.13.156 port 53749 Aug 12 07:51:05 MK-Soft-Root1 sshd\[26913\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.13.156 Aug 12 07:51:07 MK-Soft-Root1 sshd\[26913\]: Failed password for invalid user oriiz from 124.156.13.156 port 53749 ssh2 ... |
2019-08-12 14:26:35 |
| 118.24.210.254 | attackbotsspam | Aug 12 04:39:36 h2570396 sshd[454]: Failed password for invalid user edineide from 118.24.210.254 port 39794 ssh2 Aug 12 04:39:36 h2570396 sshd[454]: Received disconnect from 118.24.210.254: 11: Bye Bye [preauth] Aug 12 04:57:55 h2570396 sshd[581]: Failed password for invalid user gogs from 118.24.210.254 port 39566 ssh2 Aug 12 04:57:55 h2570396 sshd[581]: Received disconnect from 118.24.210.254: 11: Bye Bye [preauth] Aug 12 05:02:09 h2570396 sshd[2246]: Failed password for invalid user hadoop from 118.24.210.254 port 47526 ssh2 Aug 12 05:02:09 h2570396 sshd[2246]: Received disconnect from 118.24.210.254: 11: Bye Bye [preauth] Aug 12 05:06:15 h2570396 sshd[2291]: Failed password for invalid user centos from 118.24.210.254 port 55618 ssh2 Aug 12 05:06:16 h2570396 sshd[2291]: Received disconnect from 118.24.210.254: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=118.24.210.254 |
2019-08-12 15:21:33 |
| 187.162.32.186 | attackbots | Automatic report - Port Scan Attack |
2019-08-12 15:17:25 |
| 103.111.52.54 | attackspambots | 103.111.52.54 - - [12/Aug/2019:04:39:00 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.111.52.54 - - [12/Aug/2019:04:39:01 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.111.52.54 - - [12/Aug/2019:04:39:02 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.111.52.54 - - [12/Aug/2019:04:39:03 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.111.52.54 - - [12/Aug/2019:04:39:04 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.111.52.54 - - [12/Aug/2019:04:39:04 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-08-12 15:00:10 |
| 111.61.65.233 | attackspambots | Time: Mon Aug 12 00:22:35 2019 -0400 IP: 111.61.65.233 (CN/China/-) Failures: 10 (ftpd) Interval: 3600 seconds Blocked: Permanent Block |
2019-08-12 14:42:39 |
| 83.32.34.201 | attack | Automatic report - Port Scan Attack |
2019-08-12 15:15:34 |
| 144.76.185.113 | attackbotsspam | 144.76.185.113 - - [12/Aug/2019:04:38:05 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 144.76.185.113 - - [12/Aug/2019:04:38:05 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 144.76.185.113 - - [12/Aug/2019:04:38:05 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 144.76.185.113 - - [12/Aug/2019:04:38:05 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 144.76.185.113 - - [12/Aug/2019:04:38:05 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 144.76.185.113 - - [12/Aug/2019:04:38:06 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-08-12 15:27:54 |
| 14.63.167.192 | attack | Aug 12 02:44:00 TORMINT sshd\[17151\]: Invalid user sms from 14.63.167.192 Aug 12 02:44:00 TORMINT sshd\[17151\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.167.192 Aug 12 02:44:02 TORMINT sshd\[17151\]: Failed password for invalid user sms from 14.63.167.192 port 46278 ssh2 ... |
2019-08-12 14:51:11 |
| 159.65.151.216 | attackspambots | Automated report - ssh fail2ban: Aug 12 08:15:31 wrong password, user=sharon, port=49846, ssh2 Aug 12 08:50:02 authentication failure Aug 12 08:50:05 wrong password, user=np, port=57368, ssh2 |
2019-08-12 15:23:33 |
| 112.252.17.17 | attackspam | Attempts to probe for or exploit a Drupal site on url: /data/admin/ver.txt. Reported by the module https://www.drupal.org/project/abuseipdb. |
2019-08-12 15:08:20 |
| 45.227.253.216 | attackbots | Aug 12 08:45:21 relay postfix/smtpd\[22651\]: warning: unknown\[45.227.253.216\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 08:45:28 relay postfix/smtpd\[21731\]: warning: unknown\[45.227.253.216\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 08:50:42 relay postfix/smtpd\[19648\]: warning: unknown\[45.227.253.216\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 08:50:49 relay postfix/smtpd\[24817\]: warning: unknown\[45.227.253.216\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 08:51:12 relay postfix/smtpd\[19648\]: warning: unknown\[45.227.253.216\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-08-12 14:57:55 |