City: unknown
Region: unknown
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 163.174.75.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3261
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;163.174.75.137. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021300 1800 900 604800 86400
;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 16:34:10 CST 2025
;; MSG SIZE rcvd: 107Host 137.75.174.163.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 137.75.174.163.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.52.78 | attack | Nov 20 05:55:26 v22018053744266470 sshd[18176]: Failed password for root from 222.186.52.78 port 39756 ssh2 Nov 20 06:00:57 v22018053744266470 sshd[18541]: Failed password for root from 222.186.52.78 port 63483 ssh2 ... |
2019-11-20 13:11:18 |
| 54.38.207.237 | attackbots | [Tue Nov 19 18:26:19.920558 2019] [:error] [pid 224328] [client 54.38.207.237:61000] [client 54.38.207.237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ws22vmsma01.ufn.edu.br"] [uri "/"] [unique_id "XdRd@0ec0fIq8HYm17EDewAAAAI"] ... |
2019-11-20 08:53:52 |
| 49.235.242.253 | attackspambots | Nov 20 05:57:48 vpn01 sshd[9672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.242.253 Nov 20 05:57:50 vpn01 sshd[9672]: Failed password for invalid user master from 49.235.242.253 port 39890 ssh2 ... |
2019-11-20 13:06:03 |
| 46.101.167.221 | attack | WEB Masscan Scanner Activity |
2019-11-20 08:56:04 |
| 210.56.28.219 | attackbots | Nov 19 12:59:47 tdfoods sshd\[30016\]: Invalid user mp from 210.56.28.219 Nov 19 12:59:47 tdfoods sshd\[30016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.56.28.219 Nov 19 12:59:49 tdfoods sshd\[30016\]: Failed password for invalid user mp from 210.56.28.219 port 38724 ssh2 Nov 19 13:04:21 tdfoods sshd\[30419\]: Invalid user pete from 210.56.28.219 Nov 19 13:04:21 tdfoods sshd\[30419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.56.28.219 |
2019-11-20 09:06:35 |
| 117.50.12.10 | attackspam | 2019-11-19T22:02:53.919036homeassistant sshd[3855]: Invalid user mysql from 117.50.12.10 port 50404 2019-11-19T22:02:53.925919homeassistant sshd[3855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.12.10 ... |
2019-11-20 08:47:50 |
| 46.101.73.64 | attackbots | Nov 20 06:51:37 pkdns2 sshd\[1085\]: Invalid user saturn from 46.101.73.64Nov 20 06:51:39 pkdns2 sshd\[1085\]: Failed password for invalid user saturn from 46.101.73.64 port 45968 ssh2Nov 20 06:54:42 pkdns2 sshd\[1197\]: Invalid user vi from 46.101.73.64Nov 20 06:54:44 pkdns2 sshd\[1197\]: Failed password for invalid user vi from 46.101.73.64 port 53618 ssh2Nov 20 06:57:51 pkdns2 sshd\[1342\]: Invalid user haugom from 46.101.73.64Nov 20 06:57:53 pkdns2 sshd\[1342\]: Failed password for invalid user haugom from 46.101.73.64 port 33040 ssh2 ... |
2019-11-20 13:01:09 |
| 45.143.221.6 | attackspambots | Fail2Ban Ban Triggered |
2019-11-20 13:04:05 |
| 50.239.143.195 | attackspambots | $f2bV_matches |
2019-11-20 08:46:09 |
| 1.71.129.49 | attackbots | ssh failed login |
2019-11-20 13:08:39 |
| 51.68.226.118 | attack | Scanning unused Default website or suspicious access to valid sites from IP marked as abusive |
2019-11-20 09:00:27 |
| 41.208.68.28 | attackspam | Port scan on 12 port(s): 3332 3354 3355 3356 3365 3372 3373 3381 3386 3389 33389 33589 |
2019-11-20 09:06:08 |
| 159.148.211.97 | attack | WEB Masscan Scanner Activity |
2019-11-20 08:49:41 |
| 145.239.253.73 | attackspam | WEB Masscan Scanner Activity |
2019-11-20 08:50:46 |
| 5.8.18.88 | attack | Connection by 5.8.18.88 on port: 3408 got caught by honeypot at 11/20/2019 3:57:51 AM |
2019-11-20 13:09:40 |