City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.138.137.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25317
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.138.137.7. IN A
;; AUTHORITY SECTION:
. 295 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023032900 1800 900 604800 86400
;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 29 17:40:35 CST 2023
;; MSG SIZE rcvd: 106Host 7.137.138.149.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 7.137.138.149.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.122.76.222 | attack | May 31 23:25:09 root sshd[27300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.76.222 user=root May 31 23:25:11 root sshd[27300]: Failed password for root from 134.122.76.222 port 60336 ssh2 ... |
2020-06-01 06:11:26 |
| 106.13.15.122 | attackspam | 2020-05-31 15:40:11.380325-0500 localhost sshd[83931]: Failed password for root from 106.13.15.122 port 53648 ssh2 |
2020-06-01 06:12:21 |
| 106.13.68.190 | attackbots | $f2bV_matches |
2020-06-01 06:24:26 |
| 124.251.110.148 | attack | Jun 1 00:43:09 journals sshd\[67834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.251.110.148 user=root Jun 1 00:43:11 journals sshd\[67834\]: Failed password for root from 124.251.110.148 port 49294 ssh2 Jun 1 00:44:30 journals sshd\[67915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.251.110.148 user=root Jun 1 00:44:33 journals sshd\[67915\]: Failed password for root from 124.251.110.148 port 32902 ssh2 Jun 1 00:45:46 journals sshd\[68026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.251.110.148 user=root ... |
2020-06-01 05:59:20 |
| 188.166.164.10 | attackspam | May 31 17:22:04 firewall sshd[13695]: Failed password for root from 188.166.164.10 port 42320 ssh2 May 31 17:25:10 firewall sshd[13813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.164.10 user=root May 31 17:25:11 firewall sshd[13813]: Failed password for root from 188.166.164.10 port 45828 ssh2 ... |
2020-06-01 06:09:36 |
| 180.76.165.48 | attackspam | May 31 22:19:02 roki sshd[12652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.165.48 user=root May 31 22:19:04 roki sshd[12652]: Failed password for root from 180.76.165.48 port 60156 ssh2 May 31 22:36:23 roki sshd[13838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.165.48 user=root May 31 22:36:24 roki sshd[13838]: Failed password for root from 180.76.165.48 port 43424 ssh2 May 31 22:40:43 roki sshd[14232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.165.48 user=root ... |
2020-06-01 06:10:54 |
| 125.87.95.40 | attackbots | [SunMay3122:25:18.8157292020][:error][pid7818:tid47395492247296][client125.87.95.40:60707][client125.87.95.40]ModSecurity:Accessdeniedwithcode403\(phase2\).File"/tmp/20200531-222517-XtQSrJGbLHS4OomTzlCAAgAAAYk-file-HhZnJ7"rejectedbytheapproverscript"/etc/cxs/cxscgi.sh":0[file"/etc/apache2/conf.d/modsec_vendor_configs/configserver/00_configserver.conf"][line"7"][id"1010101"][msg"ConfigServerExploitScanner\(cxs\)triggered"][severity"CRITICAL"][hostname"inerta.eu"][uri"/wp-admin/admin-ajax.php"][unique_id"XtQSrJGbLHS4OomTzlCAAgAAAYk"] |
2020-06-01 06:01:37 |
| 52.15.245.63 | attackbotsspam | May 30 23:32:13 kmh-wmh-003-nbg03 sshd[18227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.15.245.63 user=r.r May 30 23:32:16 kmh-wmh-003-nbg03 sshd[18227]: Failed password for r.r from 52.15.245.63 port 51956 ssh2 May 30 23:32:16 kmh-wmh-003-nbg03 sshd[18227]: Received disconnect from 52.15.245.63 port 51956:11: Bye Bye [preauth] May 30 23:32:16 kmh-wmh-003-nbg03 sshd[18227]: Disconnected from 52.15.245.63 port 51956 [preauth] May 31 00:51:37 kmh-wmh-003-nbg03 sshd[2765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.15.245.63 user=r.r May 31 00:51:39 kmh-wmh-003-nbg03 sshd[2765]: Failed password for r.r from 52.15.245.63 port 56992 ssh2 May 31 00:51:39 kmh-wmh-003-nbg03 sshd[2765]: Received disconnect from 52.15.245.63 port 56992:11: Bye Bye [preauth] May 31 00:51:39 kmh-wmh-003-nbg03 sshd[2765]: Disconnected from 52.15.245.63 port 56992 [preauth] May 31 00:54:09 kmh-wmh-003-........ ------------------------------- |
2020-06-01 06:08:25 |
| 187.38.172.64 | attackbotsspam | Jun 1 03:21:49 itv-usvr-01 sshd[22193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.38.172.64 user=root Jun 1 03:21:51 itv-usvr-01 sshd[22193]: Failed password for root from 187.38.172.64 port 33744 ssh2 Jun 1 03:23:46 itv-usvr-01 sshd[22264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.38.172.64 user=root Jun 1 03:23:48 itv-usvr-01 sshd[22264]: Failed password for root from 187.38.172.64 port 57790 ssh2 Jun 1 03:25:28 itv-usvr-01 sshd[22351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.38.172.64 user=root Jun 1 03:25:29 itv-usvr-01 sshd[22351]: Failed password for root from 187.38.172.64 port 51944 ssh2 |
2020-06-01 05:56:05 |
| 187.122.124.185 | attackbots | blogonese.net 187.122.124.185 [31/May/2020:22:25:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4263 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" blogonese.net 187.122.124.185 [31/May/2020:22:25:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4263 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" |
2020-06-01 05:54:00 |
| 54.215.188.193 | attack | Unauthorized connection attempt detected from IP address 54.215.188.193 to port 4000 |
2020-06-01 06:14:56 |
| 188.166.20.141 | attackspam | Automatic report - Banned IP Access |
2020-06-01 06:02:40 |
| 195.122.226.164 | attackbotsspam | May 31 17:19:48 mail sshd\[529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.122.226.164 user=root ... |
2020-06-01 06:00:42 |
| 120.203.29.78 | attackspambots | 225. On May 31 2020 experienced a Brute Force SSH login attempt -> 2 unique times by 120.203.29.78. |
2020-06-01 06:29:06 |
| 185.208.226.177 | attackspam | Fail2Ban - SSH Bruteforce Attempt |
2020-06-01 06:15:12 |