City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 137.52.13.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14545
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;137.52.13.1. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012601 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 11:23:22 CST 2025
;; MSG SIZE rcvd: 104
b'Host 1.13.52.137.in-addr.arpa not found: 2(SERVFAIL)
'
server can't find 137.52.13.1.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.188.86.156 | attackbots | (mod_security) mod_security (id:211650) triggered by 5.188.86.156 (IE/Ireland/-): 5 in the last 3600 secs |
2020-09-10 15:45:54 |
| 170.83.230.2 | attackbotsspam | 170.83.230.2 (BR/Brazil/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 9 22:21:20 server2 sshd[2757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.207.11 user=root Sep 9 22:21:22 server2 sshd[2757]: Failed password for root from 161.35.207.11 port 50652 ssh2 Sep 9 22:25:46 server2 sshd[6424]: Failed password for root from 111.229.67.3 port 35186 ssh2 Sep 9 22:22:33 server2 sshd[3880]: Failed password for root from 170.83.230.2 port 45791 ssh2 Sep 9 22:26:16 server2 sshd[6785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.124.24.114 user=root Sep 9 22:25:44 server2 sshd[6424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.67.3 user=root IP Addresses Blocked: 161.35.207.11 (US/United States/-) 111.229.67.3 (CN/China/-) |
2020-09-10 15:54:51 |
| 218.92.0.158 | attack | Sep 10 09:30:14 abendstille sshd\[28018\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.158 user=root Sep 10 09:30:16 abendstille sshd\[28018\]: Failed password for root from 218.92.0.158 port 64864 ssh2 Sep 10 09:30:29 abendstille sshd\[28018\]: Failed password for root from 218.92.0.158 port 64864 ssh2 Sep 10 09:30:37 abendstille sshd\[28470\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.158 user=root Sep 10 09:30:38 abendstille sshd\[28470\]: Failed password for root from 218.92.0.158 port 32662 ssh2 ... |
2020-09-10 15:57:54 |
| 111.229.13.242 | attack | SSH |
2020-09-10 16:10:38 |
| 91.103.248.23 | attackspambots | Sep 10 06:47:18 localhost sshd[97434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.103.248.23 user=root Sep 10 06:47:20 localhost sshd[97434]: Failed password for root from 91.103.248.23 port 41220 ssh2 Sep 10 06:51:15 localhost sshd[97884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.103.248.23 user=root Sep 10 06:51:16 localhost sshd[97884]: Failed password for root from 91.103.248.23 port 44520 ssh2 Sep 10 06:55:13 localhost sshd[98335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.103.248.23 user=root Sep 10 06:55:15 localhost sshd[98335]: Failed password for root from 91.103.248.23 port 47818 ssh2 ... |
2020-09-10 15:41:11 |
| 137.74.171.160 | attackbots | ... |
2020-09-10 16:11:30 |
| 190.109.43.252 | attack | (smtpauth) Failed SMTP AUTH login from 190.109.43.252 (AR/Argentina/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-09-09 21:22:03 plain authenticator failed for ([190.109.43.252]) [190.109.43.252]: 535 Incorrect authentication data (set_id=info@tochalfire.com) |
2020-09-10 16:02:28 |
| 68.170.67.122 | attackbots | invalid user |
2020-09-10 15:41:49 |
| 106.13.231.103 | attackspambots | $f2bV_matches |
2020-09-10 16:13:47 |
| 94.102.56.151 | attackbots | MultiHost/MultiPort Probe, Scan, Hack - |
2020-09-10 15:44:21 |
| 193.228.91.105 | attack | SSH Invalid Login |
2020-09-10 16:21:30 |
| 102.130.122.21 | attackspam | 21 attempts against mh-misbehave-ban on pluto |
2020-09-10 16:20:11 |
| 14.34.6.69 | attackbotsspam | Scanning |
2020-09-10 16:05:55 |
| 64.225.25.59 | attackbots | Invalid user bill from 64.225.25.59 port 49050 |
2020-09-10 16:16:40 |
| 14.173.222.222 | attackspambots | 20/9/9@17:02:00: FAIL: Alarm-Network address from=14.173.222.222 ... |
2020-09-10 16:06:46 |