City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.5.245.185
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56858
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.5.245.185. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013100 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 15:06:01 CST 2025
;; MSG SIZE rcvd: 106Host 185.245.5.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 185.245.5.138.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.248.80.78 | attackspam | Jun 25 19:24:19 lnxweb62 sshd[13334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.80.78 Jun 25 19:24:19 lnxweb62 sshd[13334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.80.78 |
2019-06-26 02:06:13 |
| 185.246.128.25 | attack | Jun 25 19:25:39 rpi sshd\[20831\]: Invalid user 0 from 185.246.128.25 port 57281 Jun 25 19:25:39 rpi sshd\[20831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.246.128.25 Jun 25 19:25:41 rpi sshd\[20831\]: Failed password for invalid user 0 from 185.246.128.25 port 57281 ssh2 |
2019-06-26 01:44:04 |
| 156.198.184.176 | attackspam | Detected by ModSecurity. Request URI: /wp-login.php |
2019-06-26 01:40:53 |
| 95.95.251.185 | attackbots | Detected by ModSecurity. Request URI: /wp-login.php |
2019-06-26 02:13:52 |
| 91.67.77.26 | attack | SSH-BRUTEFORCE |
2019-06-26 01:53:02 |
| 202.75.100.26 | attack | Jun 25 19:23:31 meumeu sshd[19515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.75.100.26 Jun 25 19:23:33 meumeu sshd[19515]: Failed password for invalid user abc123 from 202.75.100.26 port 55073 ssh2 Jun 25 19:25:18 meumeu sshd[19781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.75.100.26 ... |
2019-06-26 01:42:11 |
| 165.22.78.120 | attackbotsspam | Jun 25 22:54:23 tanzim-HP-Z238-Microtower-Workstation sshd\[11124\]: Invalid user support from 165.22.78.120 Jun 25 22:54:23 tanzim-HP-Z238-Microtower-Workstation sshd\[11124\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.78.120 Jun 25 22:54:24 tanzim-HP-Z238-Microtower-Workstation sshd\[11124\]: Failed password for invalid user support from 165.22.78.120 port 56878 ssh2 ... |
2019-06-26 02:05:03 |
| 105.159.242.212 | attackspam | SS5,WP GET /wp-login.php |
2019-06-26 01:59:35 |
| 189.121.176.100 | attackbots | frenzy |
2019-06-26 01:39:03 |
| 198.199.106.97 | attack | Automatic report - Web App Attack |
2019-06-26 01:42:58 |
| 125.64.94.212 | attackspambots | Port scan: Attack repeated for 24 hours |
2019-06-26 01:47:37 |
| 125.118.64.182 | attackspam | Jun 25 19:16:43 mail sshd[7290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.118.64.182 user=root Jun 25 19:16:45 mail sshd[7290]: Failed password for root from 125.118.64.182 port 43170 ssh2 Jun 25 19:25:11 mail sshd[8351]: Invalid user sub from 125.118.64.182 Jun 25 19:25:11 mail sshd[8351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.118.64.182 Jun 25 19:25:11 mail sshd[8351]: Invalid user sub from 125.118.64.182 Jun 25 19:25:13 mail sshd[8351]: Failed password for invalid user sub from 125.118.64.182 port 45002 ssh2 ... |
2019-06-26 01:47:11 |
| 186.42.103.178 | attackbotsspam | Invalid user uftp from 186.42.103.178 port 38500 |
2019-06-26 01:24:13 |
| 14.63.223.226 | attackbots | $f2bV_matches |
2019-06-26 02:00:00 |
| 125.161.138.102 | attackbotsspam | Jun 24 12:59:26 *** sshd[22400]: reveeclipse mapping checking getaddrinfo for 102.subnet125-161-138.speedy.telkom.net.id [125.161.138.102] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 24 12:59:26 *** sshd[22400]: Invalid user 2 from 125.161.138.102 Jun 24 12:59:26 *** sshd[22400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.138.102 Jun 24 12:59:28 *** sshd[22400]: Failed password for invalid user 2 from 125.161.138.102 port 42626 ssh2 Jun 24 12:59:28 *** sshd[22400]: Received disconnect from 125.161.138.102: 11: Bye Bye [preauth] Jun 24 13:03:57 *** sshd[22481]: reveeclipse mapping checking getaddrinfo for 102.subnet125-161-138.speedy.telkom.net.id [125.161.138.102] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 24 13:03:57 *** sshd[22481]: Invalid user terraria from 125.161.138.102 Jun 24 13:03:57 *** sshd[22481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.138.102 ........ ------------------------------------------ |
2019-06-26 01:52:15 |