City: Seattle
Region: Washington
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 73.140.219.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63522
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;73.140.219.5. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024120701 1800 900 604800 86400
;; Query time: 388 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 08 11:52:49 CST 2024
;; MSG SIZE rcvd: 105Host 5.219.140.73.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 5.219.140.73.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 52.187.65.70 | attackspam | Jul 18 10:21:59 lunarastro sshd[15298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.187.65.70 Jul 18 10:22:02 lunarastro sshd[15298]: Failed password for invalid user admin from 52.187.65.70 port 50352 ssh2 |
2020-07-18 13:40:19 |
| 23.95.85.68 | attackbotsspam | Jul 18 07:47:29 server sshd[4364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.95.85.68 Jul 18 07:47:30 server sshd[4364]: Failed password for invalid user good from 23.95.85.68 port 56680 ssh2 Jul 18 07:51:37 server sshd[4748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.95.85.68 ... |
2020-07-18 13:58:41 |
| 54.37.22.46 | attackspam | [Sat Jul 18 10:55:07.481075 2020] [:error] [pid 13494:tid 140632571827968] [client 54.37.22.46:34666] [client 54.37.22.46] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1224"] [id "920320"] [msg "Missing User Agent Header"] [severity "NOTICE"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_UA"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/images/Meteorologi/Prakiraan/Prakiraan-Harian/02-Besok-Hari/2018/10-Oktober-2018/11-10-2-Prakiraan_Cuaca_BESOK_HARI_untuk_Pagi-Siang-Malam-Dini_Hari_di_Provinsi_Jawa_Timur_Berlaku_Mulai_JUMAT_12_OKTOBER_2018_Jam_07.00_WIB_Hingga_SABTU_13_OKTOBER_2018_Jam_07.00_WIB_Updat ... |
2020-07-18 13:47:13 |
| 191.232.210.185 | attackbotsspam | Jul 18 07:56:56 vps639187 sshd\[23581\]: Invalid user admin from 191.232.210.185 port 18001 Jul 18 07:56:56 vps639187 sshd\[23581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.232.210.185 Jul 18 07:56:58 vps639187 sshd\[23581\]: Failed password for invalid user admin from 191.232.210.185 port 18001 ssh2 ... |
2020-07-18 14:10:22 |
| 138.197.145.26 | attack | srv02 Mass scanning activity detected Target: 25369 .. |
2020-07-18 13:38:06 |
| 49.88.112.69 | attack | 2020-07-18T04:24:10.701257shield sshd\[2367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.69 user=root 2020-07-18T04:24:13.432804shield sshd\[2367\]: Failed password for root from 49.88.112.69 port 29833 ssh2 2020-07-18T04:24:15.508180shield sshd\[2367\]: Failed password for root from 49.88.112.69 port 29833 ssh2 2020-07-18T04:24:18.187794shield sshd\[2367\]: Failed password for root from 49.88.112.69 port 29833 ssh2 2020-07-18T04:26:03.728140shield sshd\[2852\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.69 user=root |
2020-07-18 14:16:56 |
| 122.181.16.134 | attackbotsspam | Jul 18 07:11:58 nextcloud sshd\[11687\]: Invalid user user14 from 122.181.16.134 Jul 18 07:11:58 nextcloud sshd\[11687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.181.16.134 Jul 18 07:12:00 nextcloud sshd\[11687\]: Failed password for invalid user user14 from 122.181.16.134 port 41209 ssh2 |
2020-07-18 14:09:10 |
| 129.28.174.147 | attack | Jul 18 07:48:30 abendstille sshd\[9075\]: Invalid user test from 129.28.174.147 Jul 18 07:48:30 abendstille sshd\[9075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.174.147 Jul 18 07:48:32 abendstille sshd\[9075\]: Failed password for invalid user test from 129.28.174.147 port 57982 ssh2 Jul 18 07:53:01 abendstille sshd\[13894\]: Invalid user lab from 129.28.174.147 Jul 18 07:53:01 abendstille sshd\[13894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.174.147 ... |
2020-07-18 14:06:09 |
| 64.227.5.37 | attackspambots | Invalid user shu from 64.227.5.37 port 52192 |
2020-07-18 14:13:51 |
| 146.88.240.4 | attackbots | 146.88.240.4 was recorded 47 times by 6 hosts attempting to connect to the following ports: 123,1194,111,17,27960,520,5093,161,1900,1701,5353,1434,69. Incident counter (4h, 24h, all-time): 47, 143, 81885 |
2020-07-18 13:42:45 |
| 118.36.234.187 | attack | Jul 18 06:51:25 ajax sshd[9187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.36.234.187 Jul 18 06:51:27 ajax sshd[9187]: Failed password for invalid user ubuntu from 118.36.234.187 port 49068 ssh2 |
2020-07-18 14:12:32 |
| 139.59.161.78 | attackspambots | Invalid user klara from 139.59.161.78 port 34323 |
2020-07-18 13:56:33 |
| 141.98.81.6 | attack | Jul 18 08:09:03 vps639187 sshd\[24000\]: Invalid user admin from 141.98.81.6 port 46576 Jul 18 08:09:03 vps639187 sshd\[24000\]: Failed none for invalid user admin from 141.98.81.6 port 46576 ssh2 Jul 18 08:09:03 vps639187 sshd\[24002\]: Invalid user admin from 141.98.81.6 port 62574 Jul 18 08:09:04 vps639187 sshd\[24002\]: Failed none for invalid user admin from 141.98.81.6 port 62574 ssh2 ... |
2020-07-18 14:12:12 |
| 52.247.1.180 | attackspambots | 2020-07-18T07:57:54.9960201240 sshd\[5165\]: Invalid user admin from 52.247.1.180 port 57977 2020-07-18T07:57:55.0011341240 sshd\[5165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.247.1.180 2020-07-18T07:57:56.8067601240 sshd\[5165\]: Failed password for invalid user admin from 52.247.1.180 port 57977 ssh2 ... |
2020-07-18 13:59:37 |
| 185.39.11.105 | attack | 185.39.11.105 - - [18/Jul/2020:05:12:25 +0000] "POST /boaform/admin/formLogin HTTP/1.1" 404 153 "http://77.4.121.171:80/admin/login.asp" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" "-" |
2020-07-18 13:38:54 |