City: unknown
Region: Chungcheongnam-do
Country: South Korea
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 61.34.225.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45976
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;61.34.225.138. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 18:56:43 CST 2025
;; MSG SIZE rcvd: 106
Host 138.225.34.61.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 138.225.34.61.in-addr.arpa: NXDOMAIN
IP | Type | Details | Datetime |
---|---|---|---|
138.97.246.148 | attack | $f2bV_matches |
2019-06-23 19:24:45 |
189.254.33.157 | attack | Jun 23 13:08:55 bouncer sshd\[3763\]: Invalid user hadoop from 189.254.33.157 port 42011 Jun 23 13:08:55 bouncer sshd\[3763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.254.33.157 Jun 23 13:08:57 bouncer sshd\[3763\]: Failed password for invalid user hadoop from 189.254.33.157 port 42011 ssh2 ... |
2019-06-23 19:21:56 |
191.35.14.7 | attack | : |
2019-06-23 19:17:53 |
193.70.37.140 | attackspambots | Jun 23 09:27:55 XXXXXX sshd[38317]: Invalid user beau from 193.70.37.140 port 53710 |
2019-06-23 19:38:40 |
167.99.71.144 | attackbots | SSH Bruteforce Attack |
2019-06-23 19:08:21 |
83.42.141.244 | attack | DATE:2019-06-23 12:09:29, IP:83.42.141.244, PORT:ssh SSH brute force auth (ermes) |
2019-06-23 19:08:43 |
80.241.208.185 | attackspam | fail2ban honeypot |
2019-06-23 19:26:58 |
101.91.216.179 | attackspam | ssh failed login |
2019-06-23 19:40:01 |
188.216.23.117 | attack | NAME : VODAFONE-IT CIDR : 188.216.0.0/15 | STATUS : 200 ROBOT {Looking for resource vulnerabilities} DDoS Attack Italy - block certain countries :) IP: 188.216.23.117 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-06-23 19:42:09 |
5.13.169.141 | attackspambots | : |
2019-06-23 19:10:21 |
198.23.210.39 | attackbotsspam | NAME : CC-10 CIDR : 198.23.128.0/17 | STATUS : 200 ROBOT {Looking for resource vulnerabilities} DDoS Attack USA - New York - block certain countries :) IP: 198.23.210.39 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-06-23 19:40:43 |
191.240.68.179 | attackbots | SMTP-sasl brute force ... |
2019-06-23 19:41:47 |
82.102.173.84 | attackbots | firewall-block, port(s): 443/tcp |
2019-06-23 19:45:59 |
159.65.24.244 | attack | 159.65.24.244 - - \[23/Jun/2019:12:02:31 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 159.65.24.244 - - \[23/Jun/2019:12:02:32 +0200\] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 159.65.24.244 - - \[23/Jun/2019:12:02:32 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 159.65.24.244 - - \[23/Jun/2019:12:02:33 +0200\] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 159.65.24.244 - - \[23/Jun/2019:12:02:33 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 159.65.24.244 - - \[23/Jun/2019:12:02:33 +0200\] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) |
2019-06-23 19:24:17 |
78.206.153.68 | attack | Jun 23 12:49:36 mout sshd[21210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.206.153.68 user=root Jun 23 12:49:38 mout sshd[21210]: Failed password for root from 78.206.153.68 port 42368 ssh2 |
2019-06-23 18:57:34 |