City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.17.78.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12911
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.17.78.13. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022500 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 25 13:57:00 CST 2025
;; MSG SIZE rcvd: 105Host 13.78.17.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 13.78.17.138.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 80.82.70.162 | attack | 2020-09-30T18:46:42.923035ks3355764 sshd[16020]: Invalid user anna from 80.82.70.162 port 57408 2020-09-30T18:46:44.475093ks3355764 sshd[16020]: Failed password for invalid user anna from 80.82.70.162 port 57408 ssh2 ... |
2020-10-01 01:15:38 |
| 2.228.87.194 | attackspam | Sep 30 16:14:37 Ubuntu-1404-trusty-64-minimal sshd\[20511\]: Invalid user teamspeak from 2.228.87.194 Sep 30 16:14:37 Ubuntu-1404-trusty-64-minimal sshd\[20511\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.228.87.194 Sep 30 16:14:38 Ubuntu-1404-trusty-64-minimal sshd\[20511\]: Failed password for invalid user teamspeak from 2.228.87.194 port 54665 ssh2 Sep 30 16:26:03 Ubuntu-1404-trusty-64-minimal sshd\[28259\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.228.87.194 user=root Sep 30 16:26:05 Ubuntu-1404-trusty-64-minimal sshd\[28259\]: Failed password for root from 2.228.87.194 port 34096 ssh2 |
2020-10-01 01:12:07 |
| 46.101.156.213 | attack | 46.101.156.213 - - [30/Sep/2020:03:57:42 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 46.101.156.213 - - [30/Sep/2020:03:57:44 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 46.101.156.213 - - [30/Sep/2020:03:57:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-10-01 00:44:27 |
| 106.12.47.108 | attack | Sep 30 18:26:27 xeon sshd[63131]: Failed password for invalid user dbadmin from 106.12.47.108 port 45866 ssh2 |
2020-10-01 01:05:53 |
| 93.118.115.77 | attackbotsspam | Automatic report - Port Scan Attack |
2020-10-01 01:21:32 |
| 190.217.26.154 | attack | Sep 29 22:35:59 ip106 sshd[27688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.217.26.154 Sep 29 22:36:00 ip106 sshd[27688]: Failed password for invalid user dircreate from 190.217.26.154 port 52238 ssh2 ... |
2020-10-01 01:00:05 |
| 128.199.204.164 | attack | 2020-09-30T13:13:00.979478abusebot-2.cloudsearch.cf sshd[560]: Invalid user postgres from 128.199.204.164 port 49698 2020-09-30T13:13:00.984944abusebot-2.cloudsearch.cf sshd[560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.204.164 2020-09-30T13:13:00.979478abusebot-2.cloudsearch.cf sshd[560]: Invalid user postgres from 128.199.204.164 port 49698 2020-09-30T13:13:03.283048abusebot-2.cloudsearch.cf sshd[560]: Failed password for invalid user postgres from 128.199.204.164 port 49698 ssh2 2020-09-30T13:17:20.823943abusebot-2.cloudsearch.cf sshd[617]: Invalid user ftpuser from 128.199.204.164 port 55974 2020-09-30T13:17:20.829622abusebot-2.cloudsearch.cf sshd[617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.204.164 2020-09-30T13:17:20.823943abusebot-2.cloudsearch.cf sshd[617]: Invalid user ftpuser from 128.199.204.164 port 55974 2020-09-30T13:17:22.485551abusebot-2.cloudsearch.cf sshd[6 ... |
2020-10-01 00:47:39 |
| 200.69.234.168 | attack | (sshd) Failed SSH login from 200.69.234.168 (AR/Argentina/customer-static-.iplannetworks.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 30 09:36:58 optimus sshd[22801]: Invalid user squid from 200.69.234.168 Sep 30 09:36:58 optimus sshd[22801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.69.234.168 Sep 30 09:37:00 optimus sshd[22801]: Failed password for invalid user squid from 200.69.234.168 port 59302 ssh2 Sep 30 09:42:43 optimus sshd[24507]: Invalid user web27p1 from 200.69.234.168 Sep 30 09:42:43 optimus sshd[24507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.69.234.168 |
2020-10-01 00:46:03 |
| 157.55.39.253 | attackbots | $f2bV_matches |
2020-10-01 00:51:42 |
| 192.241.233.247 | attackbotsspam | Port Scan ... |
2020-10-01 00:57:49 |
| 101.89.63.136 | attack | 101.89.63.136 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 30 08:42:57 server2 sshd[7870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.124.6.166 user=root Sep 30 08:39:51 server2 sshd[1917]: Failed password for root from 128.116.154.5 port 33058 ssh2 Sep 30 08:39:00 server2 sshd[1412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.89.63.136 user=root Sep 30 08:39:02 server2 sshd[1412]: Failed password for root from 101.89.63.136 port 32992 ssh2 Sep 30 08:40:45 server2 sshd[2568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.175.247 user=root Sep 30 08:40:47 server2 sshd[2568]: Failed password for root from 103.45.175.247 port 53816 ssh2 IP Addresses Blocked: 59.124.6.166 (TW/Taiwan/-) 128.116.154.5 (IT/Italy/-) |
2020-10-01 00:53:35 |
| 112.166.159.199 | attack | Fail2Ban Ban Triggered (2) |
2020-10-01 00:40:44 |
| 193.57.40.4 | attackbots | RDPBruteCAu |
2020-10-01 01:16:32 |
| 106.13.181.242 | attack | Sep 30 15:40:45 ns382633 sshd\[3367\]: Invalid user edu from 106.13.181.242 port 48262 Sep 30 15:40:45 ns382633 sshd\[3367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.181.242 Sep 30 15:40:48 ns382633 sshd\[3367\]: Failed password for invalid user edu from 106.13.181.242 port 48262 ssh2 Sep 30 16:29:27 ns382633 sshd\[13225\]: Invalid user testftp1 from 106.13.181.242 port 33436 Sep 30 16:29:27 ns382633 sshd\[13225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.181.242 |
2020-10-01 00:48:52 |
| 177.124.201.61 | attack | Sep 30 13:13:01 prod4 sshd\[23192\]: Invalid user art from 177.124.201.61 Sep 30 13:13:03 prod4 sshd\[23192\]: Failed password for invalid user art from 177.124.201.61 port 35902 ssh2 Sep 30 13:17:17 prod4 sshd\[24778\]: Invalid user jeffrey from 177.124.201.61 ... |
2020-10-01 01:13:07 |