City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.38.133.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 191
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.38.133.140. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012902 1800 900 604800 86400
;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 08:04:33 CST 2025
;; MSG SIZE rcvd: 107Host 140.133.38.149.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 140.133.38.149.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.91.218.189 | attackspambots | Dec 25 17:58:08 vps691689 sshd[17359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.218.189 Dec 25 17:58:10 vps691689 sshd[17359]: Failed password for invalid user testuser from 51.91.218.189 port 52218 ssh2 Dec 25 17:58:31 vps691689 sshd[17376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.218.189 ... |
2019-12-26 02:37:53 |
| 104.131.52.16 | attack | SSH/22 MH Probe, BF, Hack - |
2019-12-26 02:31:04 |
| 197.253.211.150 | attackbots | HTTP/80/443 Probe, BF, WP, Hack - |
2019-12-26 02:43:37 |
| 103.77.19.4 | attackbots | Unauthorized access or intrusion attempt detected from Bifur banned IP |
2019-12-26 02:15:07 |
| 196.52.43.55 | attack | ICMP MH Probe, Scan /Distributed - |
2019-12-26 02:44:21 |
| 98.206.193.254 | attack | SSH Brute Force |
2019-12-26 02:34:08 |
| 113.247.218.107 | attackbotsspam | Dec 25 21:49:49 areeb-Workstation sshd[23710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.247.218.107 Dec 25 21:49:52 areeb-Workstation sshd[23710]: Failed password for invalid user capper from 113.247.218.107 port 62781 ssh2 ... |
2019-12-26 02:14:07 |
| 212.32.245.154 | attackbotsspam | Dec 24 19:24:15 our-server-hostname postfix/smtpd[14581]: connect from unknown[212.32.245.154] Dec x@x Dec 24 19:24:18 our-server-hostname postfix/smtpd[14581]: disconnect from unknown[212.32.245.154] Dec 24 19:24:38 our-server-hostname postfix/smtpd[14581]: connect from unknown[212.32.245.154] Dec x@x Dec 24 19:24:40 our-server-hostname postfix/smtpd[14581]: disconnect from unknown[212.32.245.154] Dec 24 19:25:16 our-server-hostname postfix/smtpd[21088]: connect from unknown[212.32.245.154] Dec x@x Dec 24 19:25:17 our-server-hostname postfix/smtpd[21088]: disconnect from unknown[212.32.245.154] Dec 24 19:25:21 our-server-hostname postfix/smtpd[14512]: connect from unknown[212.32.245.154] Dec x@x Dec 24 19:25:23 our-server-hostname postfix/smtpd[14512]: disconnect from unknown[212.32.245.154] Dec 24 19:25:36 our-server-hostname postfix/smtpd[18816]: connect from unknown[212.32.245.154] Dec x@x Dec 24 19:25:38 our-server-hostname postfix/smtpd[18816]: disconnect from unk........ ------------------------------- |
2019-12-26 02:40:46 |
| 138.68.94.173 | attack | Fail2Ban Ban Triggered |
2019-12-26 02:20:50 |
| 18.237.159.175 | attack | Unauthorized connection attempt detected from IP address 18.237.159.175 to port 80 |
2019-12-26 02:34:38 |
| 103.45.102.124 | attackspam | Lines containing failures of 103.45.102.124 Dec 24 10:35:00 shared10 sshd[30758]: Invalid user sundsby from 103.45.102.124 port 41842 Dec 24 10:35:00 shared10 sshd[30758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.102.124 Dec 24 10:35:03 shared10 sshd[30758]: Failed password for invalid user sundsby from 103.45.102.124 port 41842 ssh2 Dec 24 10:35:03 shared10 sshd[30758]: Received disconnect from 103.45.102.124 port 41842:11: Bye Bye [preauth] Dec 24 10:35:03 shared10 sshd[30758]: Disconnected from invalid user sundsby 103.45.102.124 port 41842 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.45.102.124 |
2019-12-26 02:51:33 |
| 194.152.206.93 | attack | Dec 25 16:25:37 *** sshd[4655]: User root from 194.152.206.93 not allowed because not listed in AllowUsers |
2019-12-26 02:50:17 |
| 51.77.192.141 | attackspambots | Dec 25 15:52:18 163-172-32-151 sshd[1138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.ip-51-77-192.eu user=root Dec 25 15:52:20 163-172-32-151 sshd[1138]: Failed password for root from 51.77.192.141 port 40264 ssh2 ... |
2019-12-26 02:23:50 |
| 137.74.194.194 | attack | kidness.family 137.74.194.194 [25/Dec/2019:15:52:25 +0100] "POST /wp-login.php HTTP/1.1" 200 6279 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" kidness.family 137.74.194.194 [25/Dec/2019:15:52:25 +0100] "POST /xmlrpc.php HTTP/1.1" 200 4055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-12-26 02:21:14 |
| 208.73.203.84 | attackbots | 208.73.203.84 - - [25/Dec/2019:19:21:17 +0100] "GET /test/wp-login.php HTTP/1.1" 302 546 ... |
2019-12-26 02:37:22 |