City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 254.138.212.41
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16289
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;254.138.212.41. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 09:47:43 CST 2025
;; MSG SIZE rcvd: 107Host 41.212.138.254.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 41.212.138.254.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.175.169 | attack | $f2bV_matches |
2020-06-09 22:15:03 |
| 46.165.29.54 | attackbots | Unauthorized connection attempt detected from IP address 46.165.29.54 to port 23 [T] |
2020-06-09 22:17:14 |
| 35.204.201.153 | attack | 35.204.201.153 - - \[09/Jun/2020:14:07:21 +0200\] "POST /wp-login.php HTTP/1.1" 200 9952 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 35.204.201.153 - - \[09/Jun/2020:14:07:22 +0200\] "POST /wp-login.php HTTP/1.1" 200 9787 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2020-06-09 22:02:01 |
| 49.236.195.150 | attackbotsspam | Jun 9 13:54:30 ns392434 sshd[29763]: Invalid user festival from 49.236.195.150 port 47598 Jun 9 13:54:30 ns392434 sshd[29763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.236.195.150 Jun 9 13:54:30 ns392434 sshd[29763]: Invalid user festival from 49.236.195.150 port 47598 Jun 9 13:54:33 ns392434 sshd[29763]: Failed password for invalid user festival from 49.236.195.150 port 47598 ssh2 Jun 9 14:01:42 ns392434 sshd[29897]: Invalid user ovh from 49.236.195.150 port 33710 Jun 9 14:01:42 ns392434 sshd[29897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.236.195.150 Jun 9 14:01:42 ns392434 sshd[29897]: Invalid user ovh from 49.236.195.150 port 33710 Jun 9 14:01:44 ns392434 sshd[29897]: Failed password for invalid user ovh from 49.236.195.150 port 33710 ssh2 Jun 9 14:07:21 ns392434 sshd[30007]: Invalid user admin from 49.236.195.150 port 34758 |
2020-06-09 22:04:06 |
| 31.221.81.222 | attackbots | $f2bV_matches |
2020-06-09 22:27:55 |
| 144.172.79.3 | attackspam | Jun 10 00:13:15 web1 sshd[14213]: Invalid user honey from 144.172.79.3 port 51694 Jun 10 00:13:15 web1 sshd[14213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.172.79.3 Jun 10 00:13:15 web1 sshd[14213]: Invalid user honey from 144.172.79.3 port 51694 Jun 10 00:13:17 web1 sshd[14213]: Failed password for invalid user honey from 144.172.79.3 port 51694 ssh2 Jun 10 00:13:19 web1 sshd[14229]: Invalid user admin from 144.172.79.3 port 55206 Jun 10 00:13:19 web1 sshd[14229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.172.79.3 Jun 10 00:13:19 web1 sshd[14229]: Invalid user admin from 144.172.79.3 port 55206 Jun 10 00:13:21 web1 sshd[14229]: Failed password for invalid user admin from 144.172.79.3 port 55206 ssh2 Jun 10 00:13:24 web1 sshd[14245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.172.79.3 user=root Jun 10 00:13:25 web1 sshd[14245]: Failed p ... |
2020-06-09 22:34:20 |
| 89.229.3.189 | attackspambots | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-06-09 22:42:01 |
| 106.75.156.107 | attackbots | 2020-06-09T06:53:23.788800morrigan.ad5gb.com sshd[19088]: Failed password for root from 106.75.156.107 port 50894 ssh2 2020-06-09T06:53:25.019088morrigan.ad5gb.com sshd[19088]: Disconnected from authenticating user root 106.75.156.107 port 50894 [preauth] 2020-06-09T07:06:43.948174morrigan.ad5gb.com sshd[19281]: Invalid user rf from 106.75.156.107 port 53936 |
2020-06-09 22:45:57 |
| 112.85.42.188 | attackbots | 06/09/2020-10:11:03.404739 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan |
2020-06-09 22:12:38 |
| 193.228.162.185 | attack | Jun 9 13:50:36 sip sshd[19587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.228.162.185 Jun 9 13:50:39 sip sshd[19587]: Failed password for invalid user aichele from 193.228.162.185 port 40100 ssh2 Jun 9 14:07:06 sip sshd[25678]: Failed password for root from 193.228.162.185 port 50240 ssh2 |
2020-06-09 22:20:39 |
| 47.8.41.174 | attack | Automatic report - Port Scan Attack |
2020-06-09 22:01:12 |
| 80.11.130.221 | attack | Automatic report - Port Scan Attack |
2020-06-09 22:25:38 |
| 99.185.76.161 | attack | Unauthorised connection attempt detected at AUO FR1 NODE2. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-06-09 22:46:21 |
| 120.92.80.120 | attackbots | Jun 9 15:10:25 server sshd[5181]: Failed password for invalid user csserver from 120.92.80.120 port 59929 ssh2 Jun 9 15:15:31 server sshd[10363]: Failed password for invalid user tihan from 120.92.80.120 port 20486 ssh2 Jun 9 15:20:35 server sshd[32031]: Failed password for invalid user zhanggang from 120.92.80.120 port 45554 ssh2 |
2020-06-09 22:18:11 |
| 188.113.166.184 | attackbotsspam | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-06-09 22:08:18 |