City: unknown
Region: unknown
Country: Australia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.7.0.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45726
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.7.0.148. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020301 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 03:22:31 CST 2025
;; MSG SIZE rcvd: 104Host 148.0.7.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 148.0.7.138.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 201.48.4.15 | attack | Nov 24 12:29:54 vibhu-HP-Z238-Microtower-Workstation sshd\[12863\]: Invalid user wwwrun from 201.48.4.15 Nov 24 12:29:54 vibhu-HP-Z238-Microtower-Workstation sshd\[12863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.4.15 Nov 24 12:29:56 vibhu-HP-Z238-Microtower-Workstation sshd\[12863\]: Failed password for invalid user wwwrun from 201.48.4.15 port 55834 ssh2 Nov 24 12:34:21 vibhu-HP-Z238-Microtower-Workstation sshd\[13001\]: Invalid user guest from 201.48.4.15 Nov 24 12:34:21 vibhu-HP-Z238-Microtower-Workstation sshd\[13001\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.4.15 ... |
2019-11-24 15:08:23 |
| 41.72.219.102 | attackspam | Nov 24 07:53:41 lnxmysql61 sshd[7925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.72.219.102 Nov 24 07:53:41 lnxmysql61 sshd[7925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.72.219.102 |
2019-11-24 15:23:43 |
| 63.88.23.226 | attack | 63.88.23.226 was recorded 9 times by 5 hosts attempting to connect to the following ports: 80. Incident counter (4h, 24h, all-time): 9, 43, 580 |
2019-11-24 15:14:31 |
| 45.141.84.18 | attackbotsspam | Nov 24 07:49:00 mail postfix/smtpd[29854]: warning: unknown[45.141.84.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 24 07:54:32 mail postfix/smtpd[32562]: warning: unknown[45.141.84.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 24 07:58:31 mail postfix/smtpd[32527]: warning: unknown[45.141.84.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-24 15:10:07 |
| 84.3.198.123 | attackspam | 84.3.198.123 - - \[24/Nov/2019:07:28:55 +0100\] "POST /wp-login.php HTTP/1.0" 200 2406 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 84.3.198.123 - - \[24/Nov/2019:07:28:57 +0100\] "POST /wp-login.php HTTP/1.0" 200 2364 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 84.3.198.123 - - \[24/Nov/2019:07:28:59 +0100\] "POST /wp-login.php HTTP/1.0" 200 2374 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-24 15:20:26 |
| 182.171.245.130 | attackbotsspam | 2019-11-24T06:29:48.710074abusebot-2.cloudsearch.cf sshd\[15757\]: Invalid user plouse from 182.171.245.130 port 52375 |
2019-11-24 14:49:58 |
| 177.128.104.207 | attack | Nov 18 19:43:15 roadrisk sshd[894]: reveeclipse mapping checking getaddrinfo for 177-128-104-207.supercabotv.com.br [177.128.104.207] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 18 19:43:17 roadrisk sshd[894]: Failed password for invalid user home from 177.128.104.207 port 50345 ssh2 Nov 18 19:43:17 roadrisk sshd[894]: Received disconnect from 177.128.104.207: 11: Bye Bye [preauth] Nov 18 20:00:43 roadrisk sshd[1301]: reveeclipse mapping checking getaddrinfo for 177-128-104-207.supercabotv.com.br [177.128.104.207] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 18 20:00:45 roadrisk sshd[1301]: Failed password for invalid user ghost from 177.128.104.207 port 45617 ssh2 Nov 18 20:00:46 roadrisk sshd[1301]: Received disconnect from 177.128.104.207: 11: Bye Bye [preauth] Nov 18 20:04:47 roadrisk sshd[1327]: reveeclipse mapping checking getaddrinfo for 177-128-104-207.supercabotv.com.br [177.128.104.207] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 18 20:04:49 roadrisk sshd[1327]: Failed pas........ ------------------------------- |
2019-11-24 14:56:17 |
| 80.211.9.57 | attackbotsspam | Nov 23 07:10:30 sshd[593]: Connection from 80.211.9.57 port 56544 Nov 23 07:10:31 sshd[593]: Invalid user cron from 80.211.9.57 port 56544 Nov 23 07:10:31 sshd[593]: Received disconnect from 80.211.9.57 port 56544:11: Normal Shutdown, Thank you for playing [preauth] Nov 23 07:10:31 sshd[593]: Disconnected from invalid user cron 80.211.9.57 port 56544 [preauth] |
2019-11-24 15:06:03 |
| 142.93.241.93 | attackbots | Nov 24 08:47:37 sauna sshd[202778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.241.93 Nov 24 08:47:38 sauna sshd[202778]: Failed password for invalid user admin333 from 142.93.241.93 port 46518 ssh2 ... |
2019-11-24 14:59:22 |
| 104.144.103.126 | attackspam | (From fowlered34@gmail.com) Hello, I ran some SEO reporting tests on your website, and the results showed there are keywords you're using that search engines aren't able to pick up. Your website is most likely losing some points in possibly ranking high on search engine results. This is due to some issues that prevent Google and the other search engines to index your web pages better. For a cheap cost, I'll fix that for you. If you're interested, I'll give you a free consultation and show you how this will be achieved and show you the substantial benefit it can give to your business one you start getting more traffic (therefore generating more sales). I'd really like to help you out on your site, so please write back to inform me about when you're free for the consultation. Talk to you soon! Sincerely, Ed Fowler |
2019-11-24 15:11:31 |
| 45.136.109.95 | attackbots | Portscan or hack attempt detected by psad/fwsnort |
2019-11-24 15:00:40 |
| 119.27.177.251 | attackspam | Nov 24 06:53:38 localhost sshd\[22248\]: Invalid user !!!! from 119.27.177.251 port 48092 Nov 24 06:53:38 localhost sshd\[22248\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.177.251 Nov 24 06:53:40 localhost sshd\[22248\]: Failed password for invalid user !!!! from 119.27.177.251 port 48092 ssh2 Nov 24 07:02:22 localhost sshd\[22528\]: Invalid user 777777777 from 119.27.177.251 port 54942 Nov 24 07:02:22 localhost sshd\[22528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.177.251 ... |
2019-11-24 15:25:37 |
| 106.13.144.78 | attack | Nov 24 07:11:43 localhost sshd[48948]: Failed password for invalid user network from 106.13.144.78 port 38070 ssh2 Nov 24 07:24:57 localhost sshd[49052]: Failed password for invalid user takishima from 106.13.144.78 port 34168 ssh2 Nov 24 07:29:25 localhost sshd[49086]: Failed password for invalid user factorio from 106.13.144.78 port 38706 ssh2 |
2019-11-24 15:06:21 |
| 200.149.231.50 | attackbotsspam | Nov 23 20:21:51 hanapaa sshd\[22719\]: Invalid user dehlia from 200.149.231.50 Nov 23 20:21:51 hanapaa sshd\[22719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.149.231.50 Nov 23 20:21:53 hanapaa sshd\[22719\]: Failed password for invalid user dehlia from 200.149.231.50 port 47938 ssh2 Nov 23 20:29:50 hanapaa sshd\[23389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.149.231.50 user=root Nov 23 20:29:51 hanapaa sshd\[23389\]: Failed password for root from 200.149.231.50 port 55526 ssh2 |
2019-11-24 14:47:49 |
| 106.13.31.70 | attack | Nov 24 07:29:28 dedicated sshd[18203]: Invalid user guest from 106.13.31.70 port 40828 |
2019-11-24 15:05:09 |