City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.37.124.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7174
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.37.124.4. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 22 21:15:06 CST 2025
;; MSG SIZE rcvd: 104
Host 4.124.37.94.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 4.124.37.94.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 122.51.159.186 | attackspam | Ssh brute force |
2020-09-20 17:21:21 |
| 34.233.114.158 | attackspam | CF RAY ID: 5d597fe32a0b7486 IP Class: noRecord URI: /xmlrpc.php |
2020-09-20 17:29:54 |
| 49.233.204.30 | attackbots | Sep 20 09:04:06 onepixel sshd[1260931]: Failed password for invalid user ts2 from 49.233.204.30 port 43400 ssh2 Sep 20 09:07:55 onepixel sshd[1261535]: Invalid user ubuntu from 49.233.204.30 port 33636 Sep 20 09:07:55 onepixel sshd[1261535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.204.30 Sep 20 09:07:55 onepixel sshd[1261535]: Invalid user ubuntu from 49.233.204.30 port 33636 Sep 20 09:07:57 onepixel sshd[1261535]: Failed password for invalid user ubuntu from 49.233.204.30 port 33636 ssh2 |
2020-09-20 17:26:57 |
| 200.73.129.102 | attackbotsspam | Invalid user administrador from 200.73.129.102 port 42838 |
2020-09-20 17:20:32 |
| 222.186.175.212 | attackspambots | Sep 20 05:13:13 NPSTNNYC01T sshd[28376]: Failed password for root from 222.186.175.212 port 8990 ssh2 Sep 20 05:13:26 NPSTNNYC01T sshd[28376]: error: maximum authentication attempts exceeded for root from 222.186.175.212 port 8990 ssh2 [preauth] Sep 20 05:13:34 NPSTNNYC01T sshd[28412]: Failed password for root from 222.186.175.212 port 48202 ssh2 ... |
2020-09-20 17:15:02 |
| 23.129.64.207 | attack | (sshd) Failed SSH login from 23.129.64.207 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 05:20:23 server sshd[20305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.207 user=root Sep 20 05:20:25 server sshd[20305]: Failed password for root from 23.129.64.207 port 61165 ssh2 Sep 20 05:20:27 server sshd[20305]: Failed password for root from 23.129.64.207 port 61165 ssh2 Sep 20 05:20:29 server sshd[20305]: Failed password for root from 23.129.64.207 port 61165 ssh2 Sep 20 05:20:32 server sshd[20305]: Failed password for root from 23.129.64.207 port 61165 ssh2 |
2020-09-20 17:23:17 |
| 2.139.185.217 | attack | firewall-block, port(s): 445/tcp |
2020-09-20 17:23:44 |
| 158.69.222.2 | attackspambots | SSH bruteforce |
2020-09-20 17:24:01 |
| 93.76.71.130 | attackspambots | RDP Bruteforce |
2020-09-20 17:09:14 |
| 111.93.33.227 | attackspam | SSH/22 MH Probe, BF, Hack - |
2020-09-20 17:20:55 |
| 222.186.30.57 | attack | Time: Sun Sep 20 05:22:55 2020 00 IP: 222.186.30.57 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 20 05:14:29 -11 sshd[14853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57 user=root Sep 20 05:14:31 -11 sshd[14853]: Failed password for root from 222.186.30.57 port 51771 ssh2 Sep 20 05:14:34 -11 sshd[14853]: Failed password for root from 222.186.30.57 port 51771 ssh2 Sep 20 05:14:36 -11 sshd[14853]: Failed password for root from 222.186.30.57 port 51771 ssh2 Sep 20 05:22:52 -11 sshd[15134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57 user=root |
2020-09-20 17:29:40 |
| 139.99.148.4 | attack | 139.99.148.4 - - [20/Sep/2020:09:02:17 +0200] "GET /wp-login.php HTTP/1.1" 200 8558 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.99.148.4 - - [20/Sep/2020:09:02:19 +0200] "POST /wp-login.php HTTP/1.1" 200 8809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.99.148.4 - - [20/Sep/2020:09:02:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-20 17:34:25 |
| 107.167.109.39 | attackspambots | Time: Sat Sep 19 13:39:45 2020 -0300 IP: 107.167.109.39 (US/United States/a27-04-01.opera-mini.net) Failures: 5 (mod_security) Interval: 3600 seconds Blocked: Permanent Block |
2020-09-20 17:08:27 |
| 46.46.85.97 | attack | RDP Bruteforce |
2020-09-20 17:10:34 |
| 104.244.75.153 | attackspambots | (sshd) Failed SSH login from 104.244.75.153 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 05:14:52 server sshd[14399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.75.153 user=root Sep 20 05:14:54 server sshd[14399]: Failed password for root from 104.244.75.153 port 45608 ssh2 Sep 20 05:14:57 server sshd[14399]: Failed password for root from 104.244.75.153 port 45608 ssh2 Sep 20 05:14:59 server sshd[14399]: Failed password for root from 104.244.75.153 port 45608 ssh2 Sep 20 05:15:01 server sshd[14399]: Failed password for root from 104.244.75.153 port 45608 ssh2 |
2020-09-20 17:37:46 |