City: unknown
Region: unknown
Country: New Zealand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.211.166.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46893
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.211.166.145. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 10:16:49 CST 2025
;; MSG SIZE rcvd: 108Host 145.166.211.138.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 145.166.211.138.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 181.115.156.59 | attack | SSH invalid-user multiple login attempts |
2019-11-22 22:20:43 |
| 185.176.27.178 | attack | Nov 22 15:09:13 h2177944 kernel: \[7307138.222473\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=26967 PROTO=TCP SPT=41739 DPT=36632 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 22 15:09:28 h2177944 kernel: \[7307152.886843\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=23185 PROTO=TCP SPT=41739 DPT=48622 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 22 15:10:10 h2177944 kernel: \[7307194.704422\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=30230 PROTO=TCP SPT=41739 DPT=57584 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 22 15:10:14 h2177944 kernel: \[7307199.294356\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=13489 PROTO=TCP SPT=41739 DPT=4699 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 22 15:10:28 h2177944 kernel: \[7307212.974606\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.2 |
2019-11-22 22:22:04 |
| 218.92.0.139 | attack | Brute force attempt |
2019-11-22 22:10:04 |
| 96.43.109.13 | attackbots | Nov 22 11:22:06 ip-172-31-62-245 sshd\[15095\]: Invalid user oper01 from 96.43.109.13\ Nov 22 11:22:08 ip-172-31-62-245 sshd\[15095\]: Failed password for invalid user oper01 from 96.43.109.13 port 42532 ssh2\ Nov 22 11:25:46 ip-172-31-62-245 sshd\[15108\]: Invalid user thorg from 96.43.109.13\ Nov 22 11:25:48 ip-172-31-62-245 sshd\[15108\]: Failed password for invalid user thorg from 96.43.109.13 port 59968 ssh2\ Nov 22 11:29:31 ip-172-31-62-245 sshd\[15123\]: Invalid user http from 96.43.109.13\ |
2019-11-22 22:21:44 |
| 152.32.96.209 | attack | Attempts to probe for or exploit a Drupal site on url: /wp-login.php. Reported by the module https://www.drupal.org/project/abuseipdb. |
2019-11-22 21:54:05 |
| 51.77.193.213 | attackspambots | Invalid user rolo from 51.77.193.213 port 45592 |
2019-11-22 22:10:29 |
| 35.239.205.85 | attackspam | Automatic report - XMLRPC Attack |
2019-11-22 21:48:19 |
| 27.75.143.244 | attackbotsspam | Unauthorized connection attempt from IP address 27.75.143.244 on Port 445(SMB) |
2019-11-22 22:20:23 |
| 92.118.37.83 | attackbots | 11/22/2019-07:03:57.837547 92.118.37.83 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-22 22:08:00 |
| 54.37.226.173 | attack | Invalid user uucp from 54.37.226.173 port 38362 |
2019-11-22 22:02:34 |
| 23.102.164.110 | attack | ssh intrusion attempt |
2019-11-22 21:59:14 |
| 138.68.245.137 | attackbotsspam | 138.68.245.137 - - \[22/Nov/2019:13:15:04 +0100\] "POST /wp-login.php HTTP/1.0" 200 5269 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 138.68.245.137 - - \[22/Nov/2019:13:15:07 +0100\] "POST /wp-login.php HTTP/1.0" 200 5099 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 138.68.245.137 - - \[22/Nov/2019:13:15:10 +0100\] "POST /wp-login.php HTTP/1.0" 200 5093 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-22 21:49:36 |
| 61.163.190.49 | attack | Invalid user test from 61.163.190.49 port 59017 |
2019-11-22 22:12:43 |
| 157.230.124.83 | attackbotsspam | Hits on port : 6379 |
2019-11-22 21:40:01 |
| 51.77.148.87 | attackbotsspam | Nov 22 10:14:05 vps647732 sshd[31867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.148.87 Nov 22 10:14:07 vps647732 sshd[31867]: Failed password for invalid user gratz from 51.77.148.87 port 58796 ssh2 ... |
2019-11-22 22:19:53 |