City: unknown
Region: unknown
Country: Korea (the Republic of)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.138.249.135
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1319
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.138.249.135. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 04:13:00 CST 2025
;; MSG SIZE rcvd: 107Host 135.249.138.14.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 135.249.138.14.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 123.206.14.58 | attack | Lines containing failures of 123.206.14.58 Apr 9 15:44:25 penfold sshd[18137]: Invalid user elasticsearch from 123.206.14.58 port 48584 Apr 9 15:44:25 penfold sshd[18137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.14.58 Apr 9 15:44:27 penfold sshd[18137]: Failed password for invalid user elasticsearch from 123.206.14.58 port 48584 ssh2 Apr 9 15:44:28 penfold sshd[18137]: Received disconnect from 123.206.14.58 port 48584:11: Bye Bye [preauth] Apr 9 15:44:28 penfold sshd[18137]: Disconnected from invalid user elasticsearch 123.206.14.58 port 48584 [preauth] Apr 9 16:02:47 penfold sshd[19475]: Invalid user teamspeak from 123.206.14.58 port 36381 Apr 9 16:02:47 penfold sshd[19475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.14.58 Apr 9 16:02:48 penfold sshd[19475]: Failed password for invalid user teamspeak from 123.206.14.58 port 36381 ssh2 Apr 9 16:02:49 pe........ ------------------------------ |
2020-04-11 00:42:05 |
| 18.224.119.66 | attackbotsspam | Brute-force attempt banned |
2020-04-11 00:15:12 |
| 185.36.81.57 | attackspam | Rude login attack (40 tries in 1d) |
2020-04-11 00:35:34 |
| 79.124.62.254 | attackspambots | Unauthorized connection attempt detected from IP address 79.124.62.254 |
2020-04-11 00:46:47 |
| 128.199.67.22 | attackspam | Apr 10 15:30:23 124388 sshd[8324]: Invalid user hadoop from 128.199.67.22 port 52122 Apr 10 15:30:23 124388 sshd[8324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.67.22 Apr 10 15:30:23 124388 sshd[8324]: Invalid user hadoop from 128.199.67.22 port 52122 Apr 10 15:30:25 124388 sshd[8324]: Failed password for invalid user hadoop from 128.199.67.22 port 52122 ssh2 Apr 10 15:34:30 124388 sshd[8349]: Invalid user admin from 128.199.67.22 port 32890 |
2020-04-11 00:29:46 |
| 128.199.192.125 | attackspam | 128.199.192.125 - - [10/Apr/2020:14:08:08 +0200] "GET /wp-login.php HTTP/1.1" 200 5821 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 128.199.192.125 - - [10/Apr/2020:14:08:10 +0200] "POST /wp-login.php HTTP/1.1" 200 6601 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 128.199.192.125 - - [10/Apr/2020:14:08:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-04-11 00:14:37 |
| 139.99.141.237 | attackbots | W 31101,/var/log/nginx/access.log,-,- |
2020-04-11 00:12:38 |
| 138.197.21.218 | attackspam | 2020-04-10T08:08:13.825000sorsha.thespaminator.com sshd[6973]: Invalid user user from 138.197.21.218 port 40922 2020-04-10T08:08:16.101899sorsha.thespaminator.com sshd[6973]: Failed password for invalid user user from 138.197.21.218 port 40922 ssh2 ... |
2020-04-11 00:10:17 |
| 82.223.71.139 | attack | Apr 10 15:03:41 vlre-nyc-1 sshd\[30673\]: Invalid user steam1 from 82.223.71.139 Apr 10 15:03:41 vlre-nyc-1 sshd\[30673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.223.71.139 Apr 10 15:03:43 vlre-nyc-1 sshd\[30673\]: Failed password for invalid user steam1 from 82.223.71.139 port 36662 ssh2 Apr 10 15:07:42 vlre-nyc-1 sshd\[30756\]: Invalid user tom from 82.223.71.139 Apr 10 15:07:42 vlre-nyc-1 sshd\[30756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.223.71.139 ... |
2020-04-11 00:33:42 |
| 209.17.96.90 | attackbots | Unauthorized connection attempt detected from IP address 209.17.96.90 |
2020-04-11 00:45:03 |
| 167.99.194.54 | attackspam | Apr 10 17:28:50 |
2020-04-11 00:23:52 |
| 97.123.28.2 | attack | This IP address notified me via email on April 5, 2020 that my Facebook password was reset, "on Tuesday, mars 31, 2020 at 5:24pm (MDT)". The email address shown (although might be spoofed): news@bagno.trairs.com |
2020-04-11 00:48:31 |
| 167.99.41.242 | attackbotsspam | Invalid user admin from 167.99.41.242 port 59188 |
2020-04-11 00:26:43 |
| 149.56.142.198 | attackspambots | $f2bV_matches |
2020-04-11 00:24:12 |
| 112.85.42.174 | attackbotsspam | Apr 10 18:12:58 nextcloud sshd\[15644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174 user=root Apr 10 18:12:59 nextcloud sshd\[15644\]: Failed password for root from 112.85.42.174 port 57821 ssh2 Apr 10 18:13:03 nextcloud sshd\[15644\]: Failed password for root from 112.85.42.174 port 57821 ssh2 |
2020-04-11 00:25:19 |