City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 6.13.40.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46119
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;6.13.40.85. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 08:21:52 CST 2025
;; MSG SIZE rcvd: 103b'Host 85.40.13.6.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 6.13.40.85.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.15.115 | attack | 11.08.2020 11:23:16 SSH access blocked by firewall |
2020-08-11 19:38:38 |
| 106.14.211.77 | attackspam | k+ssh-bruteforce |
2020-08-11 19:37:30 |
| 35.236.186.77 | attackspam | Lines containing failures of 35.236.186.77 Aug 1 13:58:01 server-name sshd[30264]: User r.r from 35.236.186.77 not allowed because not listed in AllowUsers Aug 1 13:58:01 server-name sshd[30264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.236.186.77 user=r.r Aug 1 13:58:03 server-name sshd[30264]: Failed password for invalid user r.r from 35.236.186.77 port 48522 ssh2 Aug 1 13:58:04 server-name sshd[30264]: Received disconnect from 35.236.186.77 port 48522:11: Bye Bye [preauth] Aug 1 13:58:04 server-name sshd[30264]: Disconnected from invalid user r.r 35.236.186.77 port 48522 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=35.236.186.77 |
2020-08-11 18:58:25 |
| 183.82.41.250 | attackbotsspam | RDP Bruteforce |
2020-08-11 18:43:05 |
| 180.180.237.78 | attack | 1597117646 - 08/11/2020 05:47:26 Host: 180.180.237.78/180.180.237.78 Port: 445 TCP Blocked |
2020-08-11 19:36:50 |
| 183.217.193.115 | attack | Server penetration trying other domain names than server publicly serves (ex https://localhost) |
2020-08-11 19:21:48 |
| 195.154.53.237 | attackspam | [2020-08-11 07:24:45] NOTICE[1185][C-00000ed9] chan_sip.c: Call from '' (195.154.53.237:59171) to extension '011972595725668' rejected because extension not found in context 'public'. [2020-08-11 07:24:45] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-11T07:24:45.610-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595725668",SessionID="0x7f10c43e3a48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.53.237/59171",ACLName="no_extension_match" [2020-08-11 07:32:06] NOTICE[1185][C-00000ee5] chan_sip.c: Call from '' (195.154.53.237:52779) to extension '011972595725668' rejected because extension not found in context 'public'. [2020-08-11 07:32:06] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-11T07:32:06.846-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595725668",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/U ... |
2020-08-11 19:35:51 |
| 222.186.169.192 | attackspam | Aug 11 00:53:42 web1 sshd\[31573\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.192 user=root Aug 11 00:53:44 web1 sshd\[31573\]: Failed password for root from 222.186.169.192 port 24560 ssh2 Aug 11 00:53:48 web1 sshd\[31573\]: Failed password for root from 222.186.169.192 port 24560 ssh2 Aug 11 00:53:51 web1 sshd\[31573\]: Failed password for root from 222.186.169.192 port 24560 ssh2 Aug 11 00:53:54 web1 sshd\[31573\]: Failed password for root from 222.186.169.192 port 24560 ssh2 |
2020-08-11 19:26:33 |
| 87.98.152.54 | attackspambots | (mod_security) mod_security (id:210492) triggered by 87.98.152.54 (FR/France/ip54.ip-87-98-152.eu): 5 in the last 3600 secs |
2020-08-11 19:20:40 |
| 223.155.32.83 | attackspam | Port scan on 2 port(s): 21 1433 |
2020-08-11 18:56:32 |
| 149.202.175.11 | attackspam | Aug 11 06:57:16 OPSO sshd\[5069\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.175.11 user=root Aug 11 06:57:18 OPSO sshd\[5069\]: Failed password for root from 149.202.175.11 port 58188 ssh2 Aug 11 07:01:17 OPSO sshd\[5601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.175.11 user=root Aug 11 07:01:19 OPSO sshd\[5601\]: Failed password for root from 149.202.175.11 port 40994 ssh2 Aug 11 07:05:30 OPSO sshd\[6196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.175.11 user=root |
2020-08-11 19:32:12 |
| 51.77.194.232 | attackbots | fail2ban -- 51.77.194.232 ... |
2020-08-11 18:47:14 |
| 85.209.0.103 | attackbots | SSH auth scanning - multiple failed logins |
2020-08-11 19:36:17 |
| 191.233.142.46 | attackbotsspam | Lines containing failures of 191.233.142.46 Aug 2 09:42:41 server-name sshd[16999]: User r.r from 191.233.142.46 not allowed because not listed in AllowUsers Aug 2 09:42:41 server-name sshd[16999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.233.142.46 user=r.r Aug 2 09:42:42 server-name sshd[16999]: Failed password for invalid user r.r from 191.233.142.46 port 57062 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=191.233.142.46 |
2020-08-11 19:41:42 |
| 185.49.87.86 | attackspam | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-08-11 19:39:45 |