City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.141.9.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57052
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;157.141.9.20. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021601 1800 900 604800 86400
;; Query time: 159 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 04:02:53 CST 2025
;; MSG SIZE rcvd: 105Host 20.9.141.157.in-addr.arpa not found: 2(SERVFAIL)
server can't find 157.141.9.20.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 117.102.118.122 | attackspambots | Unauthorized connection attempt from IP address 117.102.118.122 on Port 445(SMB) |
2020-03-24 03:39:13 |
| 113.168.175.37 | attackbotsspam | Unauthorized connection attempt from IP address 113.168.175.37 on Port 445(SMB) |
2020-03-24 03:48:31 |
| 14.233.131.88 | attack | Unauthorized connection attempt from IP address 14.233.131.88 on Port 445(SMB) |
2020-03-24 03:40:31 |
| 78.83.57.73 | attackspambots | Mar 23 18:35:58 h2646465 sshd[17246]: Invalid user ii from 78.83.57.73 Mar 23 18:35:58 h2646465 sshd[17246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.83.57.73 Mar 23 18:35:58 h2646465 sshd[17246]: Invalid user ii from 78.83.57.73 Mar 23 18:36:00 h2646465 sshd[17246]: Failed password for invalid user ii from 78.83.57.73 port 35036 ssh2 Mar 23 18:47:05 h2646465 sshd[20767]: Invalid user universitaetsgelaende from 78.83.57.73 Mar 23 18:47:05 h2646465 sshd[20767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.83.57.73 Mar 23 18:47:05 h2646465 sshd[20767]: Invalid user universitaetsgelaende from 78.83.57.73 Mar 23 18:47:06 h2646465 sshd[20767]: Failed password for invalid user universitaetsgelaende from 78.83.57.73 port 58278 ssh2 Mar 23 18:50:48 h2646465 sshd[22058]: Invalid user he from 78.83.57.73 ... |
2020-03-24 03:32:13 |
| 51.161.51.147 | attackbotsspam | (sshd) Failed SSH login from 51.161.51.147 (CA/Canada/ip147.ip-51-161-51.net): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 23 15:38:54 andromeda sshd[8157]: Invalid user grazia from 51.161.51.147 port 38500 Mar 23 15:38:56 andromeda sshd[8157]: Failed password for invalid user grazia from 51.161.51.147 port 38500 ssh2 Mar 23 15:45:09 andromeda sshd[8534]: Invalid user paintball from 51.161.51.147 port 34436 |
2020-03-24 03:57:53 |
| 14.145.172.111 | attack | (ftpd) Failed FTP login from 14.145.172.111 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Mar 23 20:15:02 ir1 pure-ftpd: (?@14.145.172.111) [WARNING] Authentication failed for user [anonymous] |
2020-03-24 04:07:58 |
| 189.129.178.180 | attack | Automatic report - Port Scan Attack |
2020-03-24 04:07:14 |
| 188.166.46.64 | attack | Mar 23 11:45:21 lanister sshd[26900]: Invalid user zeki from 188.166.46.64 Mar 23 11:45:21 lanister sshd[26900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.46.64 Mar 23 11:45:21 lanister sshd[26900]: Invalid user zeki from 188.166.46.64 Mar 23 11:45:23 lanister sshd[26900]: Failed password for invalid user zeki from 188.166.46.64 port 36448 ssh2 |
2020-03-24 03:45:13 |
| 222.186.15.166 | attackspam | 2020-03-23T19:58:28.390623abusebot-8.cloudsearch.cf sshd[15692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.166 user=root 2020-03-23T19:58:30.063607abusebot-8.cloudsearch.cf sshd[15692]: Failed password for root from 222.186.15.166 port 14767 ssh2 2020-03-23T19:58:33.144983abusebot-8.cloudsearch.cf sshd[15692]: Failed password for root from 222.186.15.166 port 14767 ssh2 2020-03-23T19:58:28.390623abusebot-8.cloudsearch.cf sshd[15692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.166 user=root 2020-03-23T19:58:30.063607abusebot-8.cloudsearch.cf sshd[15692]: Failed password for root from 222.186.15.166 port 14767 ssh2 2020-03-23T19:58:33.144983abusebot-8.cloudsearch.cf sshd[15692]: Failed password for root from 222.186.15.166 port 14767 ssh2 2020-03-23T19:58:28.390623abusebot-8.cloudsearch.cf sshd[15692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ss ... |
2020-03-24 04:08:35 |
| 94.23.58.228 | attackspambots | SSH Brute Force |
2020-03-24 04:08:51 |
| 27.115.15.8 | attack | 2020-03-23T17:08:33.739671 sshd[21444]: Invalid user info from 27.115.15.8 port 49806 2020-03-23T17:08:33.752838 sshd[21444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.115.15.8 2020-03-23T17:08:33.739671 sshd[21444]: Invalid user info from 27.115.15.8 port 49806 2020-03-23T17:08:35.608329 sshd[21444]: Failed password for invalid user info from 27.115.15.8 port 49806 ssh2 ... |
2020-03-24 03:44:14 |
| 113.160.18.238 | attack | Unauthorized connection attempt from IP address 113.160.18.238 on Port 445(SMB) |
2020-03-24 03:59:22 |
| 141.8.183.90 | attack | [Mon Mar 23 22:45:10.601907 2020] [:error] [pid 25293:tid 140519768332032] [client 141.8.183.90:39169] [client 141.8.183.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XnjZhrdSec56q6n39A6CPwAAAqM"] ... |
2020-03-24 03:58:58 |
| 41.199.136.78 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 23-03-2020 15:45:09. |
2020-03-24 04:00:05 |
| 142.129.152.171 | attackspam | Automatic report - Port Scan Attack |
2020-03-24 03:57:31 |