City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.142.64.197
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10354
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;157.142.64.197. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 31 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 21:18:44 CST 2025
;; MSG SIZE rcvd: 107Host 197.64.142.157.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 197.64.142.157.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 34.80.55.216 | attackspambots | WordPress (CMS) attack attempts. Date: 2019 Jul 30. 22:26:52 Source IP: 34.80.55.216 Portion of the log(s): 34.80.55.216 - [30/Jul/2019:22:26:51 +0200] "GET /wp-login.php HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.80.55.216 - [30/Jul/2019:22:26:51 +0200] "POST /wp-login.php HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.80.55.216 - [30/Jul/2019:22:26:49 +0200] "GET /wp-login.php HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.80.55.216 - [30/Jul/2019:22:26:48 +0200] "POST /wp-login.php HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.80.55.216 - [30/Jul/2019:22:26:47 +0200] "GET /wp-login.php HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.80.55.216 - [30/Jul/2019:22:26:46 +0200] "POST /wp-login.php |
2019-07-31 13:28:28 |
| 183.56.161.218 | attack | 19/7/30@20:51:03: FAIL: Alarm-Intrusion address from=183.56.161.218 ... |
2019-07-31 13:13:04 |
| 46.246.182.183 | attackbots | port 23 attempt blocked |
2019-07-31 12:48:49 |
| 174.138.26.48 | attackspambots | Jul 31 04:50:24 yabzik sshd[12369]: Failed password for root from 174.138.26.48 port 35472 ssh2 Jul 31 04:55:44 yabzik sshd[14113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.26.48 Jul 31 04:55:45 yabzik sshd[14113]: Failed password for invalid user zliu from 174.138.26.48 port 60014 ssh2 |
2019-07-31 13:37:01 |
| 201.182.223.59 | attackspambots | Jul 31 07:00:12 vps647732 sshd[24641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.182.223.59 Jul 31 07:00:15 vps647732 sshd[24641]: Failed password for invalid user nexthink from 201.182.223.59 port 39732 ssh2 ... |
2019-07-31 13:22:43 |
| 206.214.2.106 | attackspam | Jul 31 00:17:44 master sshd[12401]: Failed password for invalid user admin from 206.214.2.106 port 34300 ssh2 |
2019-07-31 13:01:50 |
| 86.13.251.169 | attackbotsspam | Telnet/23 MH Probe, BF, Hack - |
2019-07-31 13:29:45 |
| 42.237.91.159 | attack | Honeypot attack, port: 23, PTR: hn.kd.ny.adsl. |
2019-07-31 13:28:04 |
| 37.230.137.121 | attack | 23/tcp 23/tcp 23/tcp... [2019-07-30]5pkt,1pt.(tcp) |
2019-07-31 13:03:33 |
| 36.71.121.201 | attackspam | Unauthorized connection attempt from IP address 36.71.121.201 on Port 445(SMB) |
2019-07-31 12:45:15 |
| 173.212.197.93 | attackspam | Honeypot attack, port: 23, PTR: vmi147202.contaboserver.net. |
2019-07-31 12:44:24 |
| 49.234.102.232 | attackbots | Jul 31 03:27:36 db sshd\[9359\]: Invalid user mail1 from 49.234.102.232 Jul 31 03:27:36 db sshd\[9359\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.102.232 Jul 31 03:27:38 db sshd\[9359\]: Failed password for invalid user mail1 from 49.234.102.232 port 38266 ssh2 Jul 31 03:31:27 db sshd\[9427\]: Invalid user jamil from 49.234.102.232 Jul 31 03:31:27 db sshd\[9427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.102.232 ... |
2019-07-31 12:38:35 |
| 118.163.67.139 | attack | Honeypot attack, port: 445, PTR: 118-163-67-139.HINET-IP.hinet.net. |
2019-07-31 12:39:01 |
| 191.180.225.191 | attackbots | SSH Brute-Force reported by Fail2Ban |
2019-07-31 12:58:08 |
| 36.255.91.70 | attackspam | Unauthorized connection attempt from IP address 36.255.91.70 on Port 445(SMB) |
2019-07-31 13:15:29 |