City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 63.107.0.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11687
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;63.107.0.100. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025030100 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 15:52:20 CST 2025
;; MSG SIZE rcvd: 105Host 100.0.107.63.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 100.0.107.63.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 69.28.234.137 | attackbotsspam | May 15 08:02:26 : SSH login attempts with invalid user |
2020-05-16 13:37:24 |
| 36.66.4.62 | attack | [Fri May 15 21:25:02.997922 2020] [:error] [pid 160980] [client 36.66.4.62:40932] [client 36.66.4.62] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "200.132.59.214"] [uri "/user/soapCaller.bs"] [unique_id "Xr8y3mXaAQVjgJelI8TAEQAAAAI"] ... |
2020-05-16 13:40:05 |
| 45.82.122.19 | attackspambots | Repeated brute force against a port |
2020-05-16 13:38:37 |
| 188.25.88.155 | attackspam | May 15 17:52:09 raspberrypi sshd\[12765\]: Failed password for pi from 188.25.88.155 port 58054 ssh2May 15 21:49:34 raspberrypi sshd\[3569\]: Failed password for pi from 188.25.88.155 port 49262 ssh2May 16 01:49:14 raspberrypi sshd\[6812\]: Failed password for pi from 188.25.88.155 port 40450 ssh2 ... |
2020-05-16 13:49:13 |
| 35.200.183.13 | attackbotsspam | ... |
2020-05-16 14:05:24 |
| 112.160.128.103 | attackspam | Unauthorized connection attempt detected from IP address 112.160.128.103 to port 23 |
2020-05-16 13:57:12 |
| 213.217.0.132 | attack | May 16 03:59:36 [host] kernel: [6223066.723729] [U May 16 04:07:40 [host] kernel: [6223550.372981] [U May 16 04:08:46 [host] kernel: [6223616.888618] [U May 16 04:19:50 [host] kernel: [6224280.721410] [U May 16 04:32:39 [host] kernel: [6225049.775283] [U May 16 04:37:43 [host] kernel: [6225353.661150] [U |
2020-05-16 13:59:01 |
| 178.128.183.90 | attackspam | Invalid user deploy from 178.128.183.90 port 46834 |
2020-05-16 13:39:48 |
| 194.36.191.35 | attackspam | GET /Telerik.Web.UI.WebResource.axd?type=rau This vulnerability is detailed in CVE-2017-9248, and similarly in CVE-2017-11317 and CVE-2017-11357. Vulnerable versions of Telerik are those published between 2007 and 2017. |
2020-05-16 13:35:57 |
| 195.155.169.44 | attackspam | Port scan denied |
2020-05-16 14:11:05 |
| 112.85.42.180 | attackbotsspam | May 16 04:44:40 srv-ubuntu-dev3 sshd[32163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180 user=root May 16 04:44:42 srv-ubuntu-dev3 sshd[32163]: Failed password for root from 112.85.42.180 port 36039 ssh2 May 16 04:44:45 srv-ubuntu-dev3 sshd[32163]: Failed password for root from 112.85.42.180 port 36039 ssh2 May 16 04:44:40 srv-ubuntu-dev3 sshd[32163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180 user=root May 16 04:44:42 srv-ubuntu-dev3 sshd[32163]: Failed password for root from 112.85.42.180 port 36039 ssh2 May 16 04:44:45 srv-ubuntu-dev3 sshd[32163]: Failed password for root from 112.85.42.180 port 36039 ssh2 May 16 04:44:40 srv-ubuntu-dev3 sshd[32163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180 user=root May 16 04:44:42 srv-ubuntu-dev3 sshd[32163]: Failed password for root from 112.85.42.180 port 36039 ssh2 M ... |
2020-05-16 13:56:18 |
| 5.135.129.180 | attackspam | xmlrpc attack |
2020-05-16 13:40:24 |
| 106.13.71.1 | attack | May 16 09:48:26 webhost01 sshd[5821]: Failed password for root from 106.13.71.1 port 57308 ssh2 May 16 09:52:50 webhost01 sshd[5866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.71.1 ... |
2020-05-16 13:42:16 |
| 61.74.118.139 | attack | May 15 22:54:45 ny01 sshd[2947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.74.118.139 May 15 22:54:47 ny01 sshd[2947]: Failed password for invalid user newuser from 61.74.118.139 port 52082 ssh2 May 15 22:57:05 ny01 sshd[3643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.74.118.139 |
2020-05-16 14:03:19 |
| 222.186.175.167 | attackspambots | Found by fail2ban |
2020-05-16 14:15:27 |