City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.102.80.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28177
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;141.102.80.13. IN A
;; AUTHORITY SECTION:
. 296 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023102501 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 26 11:14:56 CST 2023
;; MSG SIZE rcvd: 106Host 13.80.102.141.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 13.80.102.141.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 111.230.157.219 | attackbots | Nov 5 13:12:46 hanapaa sshd\[7233\]: Invalid user pi from 111.230.157.219 Nov 5 13:12:46 hanapaa sshd\[7233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.157.219 Nov 5 13:12:48 hanapaa sshd\[7233\]: Failed password for invalid user pi from 111.230.157.219 port 35686 ssh2 Nov 5 13:17:12 hanapaa sshd\[7570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.157.219 user=root Nov 5 13:17:14 hanapaa sshd\[7570\]: Failed password for root from 111.230.157.219 port 45120 ssh2 |
2019-11-06 07:24:47 |
| 185.153.197.116 | attackspambots | Nov 6 00:40:49 h2177944 kernel: \[5872891.425417\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.197.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=29063 PROTO=TCP SPT=47485 DPT=7899 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 00:45:08 h2177944 kernel: \[5873150.664894\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.197.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=54488 PROTO=TCP SPT=47485 DPT=7070 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 00:46:10 h2177944 kernel: \[5873212.946650\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.197.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=41189 PROTO=TCP SPT=47485 DPT=8192 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 00:47:59 h2177944 kernel: \[5873321.481192\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.197.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=25561 PROTO=TCP SPT=47485 DPT=6778 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 00:55:29 h2177944 kernel: \[5873771.817657\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.197.116 DST=85 |
2019-11-06 07:59:37 |
| 34.70.39.111 | attackspambots | [TueNov0523:38:10.5719732019][:error][pid9792:tid139667731097344][client34.70.39.111:42694][client34.70.39.111]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"211"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname"specialfood.ch"][uri"/robots.txt"][unique_id"XcH50ls0jdyMrKSE3EkFOQAAAMY"][TueNov0523:38:11.1449102019][:error][pid10006:tid139667705919232][client34.70.39.111:54626][client34.70.39.111]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"211"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][ |
2019-11-06 07:26:42 |
| 222.186.180.17 | attack | Nov 6 00:25:07 SilenceServices sshd[12897]: Failed password for root from 222.186.180.17 port 15554 ssh2 Nov 6 00:25:19 SilenceServices sshd[12897]: Failed password for root from 222.186.180.17 port 15554 ssh2 Nov 6 00:25:23 SilenceServices sshd[12897]: Failed password for root from 222.186.180.17 port 15554 ssh2 Nov 6 00:25:23 SilenceServices sshd[12897]: error: maximum authentication attempts exceeded for root from 222.186.180.17 port 15554 ssh2 [preauth] |
2019-11-06 07:41:03 |
| 106.12.190.104 | attackbotsspam | Nov 6 00:43:23 legacy sshd[5907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.190.104 Nov 6 00:43:25 legacy sshd[5907]: Failed password for invalid user tomcat from 106.12.190.104 port 37036 ssh2 Nov 6 00:47:47 legacy sshd[6041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.190.104 ... |
2019-11-06 07:53:55 |
| 222.186.180.223 | attackspam | Nov 5 13:54:40 web1 sshd\[17302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root Nov 5 13:54:42 web1 sshd\[17302\]: Failed password for root from 222.186.180.223 port 20858 ssh2 Nov 5 13:54:46 web1 sshd\[17302\]: Failed password for root from 222.186.180.223 port 20858 ssh2 Nov 5 13:54:50 web1 sshd\[17302\]: Failed password for root from 222.186.180.223 port 20858 ssh2 Nov 5 13:55:06 web1 sshd\[17345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root |
2019-11-06 07:56:57 |
| 66.214.37.122 | attack | Fail2Ban - FTP Abuse Attempt |
2019-11-06 07:29:25 |
| 78.128.113.120 | attackbots | 2019-11-06T00:19:48.345401mail01 postfix/smtpd[22023]: warning: unknown[78.128.113.120]: SASL PLAIN authentication failed: 2019-11-06T00:19:48.345822mail01 postfix/smtpd[9524]: warning: unknown[78.128.113.120]: SASL PLAIN authentication failed: 2019-11-06T00:19:53.100494mail01 postfix/smtpd[8649]: warning: unknown[78.128.113.120]: SASL PLAIN authentication failed: |
2019-11-06 07:22:38 |
| 144.34.221.47 | attack | Nov 5 23:55:03 game-panel sshd[2553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.221.47 Nov 5 23:55:05 game-panel sshd[2553]: Failed password for invalid user temp1 from 144.34.221.47 port 41188 ssh2 Nov 5 23:58:54 game-panel sshd[2632]: Failed password for root from 144.34.221.47 port 51538 ssh2 |
2019-11-06 07:59:04 |
| 62.234.66.145 | attackspambots | Nov 6 00:42:47 vps691689 sshd[24838]: Failed password for root from 62.234.66.145 port 58093 ssh2 Nov 6 00:47:14 vps691689 sshd[24884]: Failed password for root from 62.234.66.145 port 48554 ssh2 ... |
2019-11-06 07:54:23 |
| 79.79.57.190 | attack | port scan and connect, tcp 8080 (http-proxy) |
2019-11-06 07:50:11 |
| 132.232.66.60 | attackspambots | Port Scans detected and blocked. |
2019-11-06 07:39:06 |
| 1.193.160.164 | attack | Nov 5 12:50:48 php1 sshd\[23464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.193.160.164 user=root Nov 5 12:50:50 php1 sshd\[23464\]: Failed password for root from 1.193.160.164 port 9040 ssh2 Nov 5 12:55:00 php1 sshd\[23868\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.193.160.164 user=root Nov 5 12:55:02 php1 sshd\[23868\]: Failed password for root from 1.193.160.164 port 28829 ssh2 Nov 5 12:59:13 php1 sshd\[24700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.193.160.164 user=root |
2019-11-06 07:20:20 |
| 180.68.177.209 | attack | Nov 5 18:29:24 ny01 sshd[17886]: Failed password for root from 180.68.177.209 port 58892 ssh2 Nov 5 18:36:10 ny01 sshd[18560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.68.177.209 Nov 5 18:36:12 ny01 sshd[18560]: Failed password for invalid user guest from 180.68.177.209 port 35564 ssh2 |
2019-11-06 07:37:17 |
| 106.248.249.26 | attackbotsspam | Nov 5 23:35:33 *** sshd[14701]: User root from 106.248.249.26 not allowed because not listed in AllowUsers |
2019-11-06 07:39:55 |