City: unknown
Region: unknown
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 158.149.14.144
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19163
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;158.149.14.144. IN A
;; AUTHORITY SECTION:
. 159 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022072202 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 23 09:24:12 CST 2022
;; MSG SIZE rcvd: 107Host 144.14.149.158.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 144.14.149.158.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 120.92.153.47 | attackbots | Fail2Ban - SMTP Bruteforce Attempt |
2019-10-13 02:50:43 |
| 51.158.106.54 | attack | Automatic report - XMLRPC Attack |
2019-10-13 02:48:59 |
| 222.186.180.17 | attackbotsspam | Oct 12 20:56:52 minden010 sshd[10642]: Failed password for root from 222.186.180.17 port 4464 ssh2 Oct 12 20:56:56 minden010 sshd[10642]: Failed password for root from 222.186.180.17 port 4464 ssh2 Oct 12 20:57:01 minden010 sshd[10642]: Failed password for root from 222.186.180.17 port 4464 ssh2 Oct 12 20:57:05 minden010 sshd[10642]: Failed password for root from 222.186.180.17 port 4464 ssh2 ... |
2019-10-13 03:06:09 |
| 222.186.175.155 | attackspambots | Oct 12 20:58:49 mail sshd\[3021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155 user=root Oct 12 20:58:50 mail sshd\[3021\]: Failed password for root from 222.186.175.155 port 21106 ssh2 Oct 12 20:58:55 mail sshd\[3021\]: Failed password for root from 222.186.175.155 port 21106 ssh2 ... |
2019-10-13 02:59:23 |
| 5.199.130.188 | attackspambots | goldgier-uhren-ankauf.de:80 5.199.130.188 - - \[12/Oct/2019:16:11:34 +0200\] "POST /xmlrpc.php HTTP/1.0" 301 515 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" goldgier-uhren-ankauf.de 5.199.130.188 \[12/Oct/2019:16:11:35 +0200\] "POST /xmlrpc.php HTTP/1.0" 302 3617 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-13 02:49:45 |
| 106.12.60.137 | attackbots | Oct 12 11:13:43 ny01 sshd[5304]: Failed password for root from 106.12.60.137 port 41020 ssh2 Oct 12 11:20:07 ny01 sshd[5885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.60.137 Oct 12 11:20:09 ny01 sshd[5885]: Failed password for invalid user 123 from 106.12.60.137 port 53534 ssh2 |
2019-10-13 02:36:22 |
| 61.244.174.142 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/61.244.174.142/ HK - 1H : (17) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : HK NAME ASN : ASN9269 IP : 61.244.174.142 CIDR : 61.244.168.0/21 PREFIX COUNT : 310 UNIQUE IP COUNT : 1386240 WYKRYTE ATAKI Z ASN9269 : 1H - 1 3H - 1 6H - 2 12H - 3 24H - 4 DateTime : 2019-10-12 16:10:50 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-13 03:12:28 |
| 112.85.42.186 | attackbots | Oct 13 00:39:49 areeb-Workstation sshd[29700]: Failed password for root from 112.85.42.186 port 34997 ssh2 Oct 13 00:39:52 areeb-Workstation sshd[29700]: Failed password for root from 112.85.42.186 port 34997 ssh2 ... |
2019-10-13 03:14:07 |
| 209.177.94.56 | attackspam | 2019-10-10T14:34:11.576000shiva sshd[13954]: Unable to negotiate whostnameh 209.177.94.56 port 64540: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] 2019-10-10T14:34:14.876242shiva sshd[13956]: Unable to negotiate whostnameh 209.177.94.56 port 49932: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] 2019-10-10T14:34:18.284267shiva sshd[13958]: Unable to negotiate whostnameh 209.177.94.56 port 51617: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] 2019-10-10T14:34:21.598907shiva sshd[13974]: Unable to negotiate whostnameh 209.177.94.56 port 53264: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie........ ------------------------------ |
2019-10-13 03:13:36 |
| 158.69.117.126 | attackspam | Lines containing failures of 158.69.117.126 /var/log/apache/pucorp.org.log:2019-10-12T15:29:40.615524+02:00 edughostname sshd[22354]: Received disconnect from 158.69.117.126 port 44832:11: Normal Shutdown, Thank you for playing [preauth] /var/log/apache/pucorp.org.log:2019-10-12T15:29:40.616350+02:00 edughostname sshd[22354]: Disconnected from authenticating user r.r 158.69.117.126 port 44832 [preauth] /var/log/apache/pucorp.org.log:2019-10-12T15:30:06.160551+02:00 edughostname sshd[22427]: Received disconnect from 158.69.117.126 port 35832:11: Normal Shutdown, Thank you for playing [preauth] /var/log/apache/pucorp.org.log:2019-10-12T15:30:06.161228+02:00 edughostname sshd[22427]: Disconnected from authenticating user r.r 158.69.117.126 port 35832 [preauth] /var/log/apache/pucorp.org.log:2019-10-12T15:30:34.236040+02:00 edughostname sshd[22544]: Received disconnect from 158.69.117.126 port 55094:11: Normal Shutdown, Thank you for playing [preauth] /var/log/apache/pucorp......... ------------------------------ |
2019-10-13 03:08:48 |
| 88.135.46.46 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/88.135.46.46/ IR - 1H : (36) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IR NAME ASN : ASN57240 IP : 88.135.46.46 CIDR : 88.135.46.0/24 PREFIX COUNT : 8 UNIQUE IP COUNT : 2048 WYKRYTE ATAKI Z ASN57240 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-12 16:11:25 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-13 02:54:44 |
| 195.224.138.61 | attackspam | Oct 13 02:09:41 webhost01 sshd[27456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.224.138.61 Oct 13 02:09:44 webhost01 sshd[27456]: Failed password for invalid user P4ssw0rt from 195.224.138.61 port 43566 ssh2 ... |
2019-10-13 03:18:34 |
| 197.44.174.49 | attackbots | Automatic report - Port Scan Attack |
2019-10-13 03:04:25 |
| 49.88.112.70 | attackspam | Oct 12 20:14:50 MK-Soft-VM7 sshd[14281]: Failed password for root from 49.88.112.70 port 58777 ssh2 Oct 12 20:14:53 MK-Soft-VM7 sshd[14281]: Failed password for root from 49.88.112.70 port 58777 ssh2 ... |
2019-10-13 03:03:34 |
| 187.1.57.210 | attack | Oct 12 08:45:08 php1 sshd\[25171\]: Invalid user 123David from 187.1.57.210 Oct 12 08:45:08 php1 sshd\[25171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-187-1-57-210.isp.valenet.com.br Oct 12 08:45:10 php1 sshd\[25171\]: Failed password for invalid user 123David from 187.1.57.210 port 46766 ssh2 Oct 12 08:50:20 php1 sshd\[25759\]: Invalid user P4ssword!@\# from 187.1.57.210 Oct 12 08:50:20 php1 sshd\[25759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-187-1-57-210.isp.valenet.com.br |
2019-10-13 03:01:48 |