City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.0.138.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26438
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.0.138.71. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021901 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 02:34:46 CST 2025
;; MSG SIZE rcvd: 105
71.138.0.104.in-addr.arpa domain name pointer 104-0-138-71.lightspeed.austtx.sbcglobal.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
71.138.0.104.in-addr.arpa name = 104-0-138-71.lightspeed.austtx.sbcglobal.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 101.64.144.46 | attackbotsspam | Fail2Ban Ban Triggered |
2019-10-18 16:07:09 |
| 149.129.74.9 | attack | Detected by ModSecurity. Request URI: /wp-login.php/ip-redirect/ |
2019-10-18 16:13:47 |
| 83.111.151.245 | attack | $f2bV_matches |
2019-10-18 15:42:43 |
| 106.12.85.12 | attackspambots | Oct 18 08:42:47 dedicated sshd[28652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.85.12 user=root Oct 18 08:42:50 dedicated sshd[28652]: Failed password for root from 106.12.85.12 port 63940 ssh2 |
2019-10-18 15:54:24 |
| 113.172.96.85 | attack | 2019-10-17 22:49:48 dovecot_plain authenticator failed for (mail.lerctr.org) [113.172.96.85]:52835 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=you@lerctr.org) 2019-10-17 22:50:06 dovecot_plain authenticator failed for (mail.lerctr.org) [113.172.96.85]:52904 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=you@lerctr.org) 2019-10-17 22:50:28 dovecot_plain authenticator failed for (mail.lerctr.org) [113.172.96.85]:52966 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=you@lerctr.org) ... |
2019-10-18 16:00:00 |
| 183.129.160.229 | attackbots | Portscan or hack attempt detected by psad/fwsnort |
2019-10-18 16:10:26 |
| 104.131.55.236 | attackspam | Oct 18 00:45:36 cumulus sshd[9929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.236 user=r.r Oct 18 00:45:38 cumulus sshd[9929]: Failed password for r.r from 104.131.55.236 port 50450 ssh2 Oct 18 00:45:38 cumulus sshd[9929]: Received disconnect from 104.131.55.236 port 50450:11: Bye Bye [preauth] Oct 18 00:45:38 cumulus sshd[9929]: Disconnected from 104.131.55.236 port 50450 [preauth] Oct 18 01:09:57 cumulus sshd[10725]: Invalid user nearftp from 104.131.55.236 port 35391 Oct 18 01:09:58 cumulus sshd[10725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.236 Oct 18 01:09:59 cumulus sshd[10725]: Failed password for invalid user nearftp from 104.131.55.236 port 35391 ssh2 Oct 18 01:09:59 cumulus sshd[10725]: Received disconnect from 104.131.55.236 port 35391:11: Bye Bye [preauth] Oct 18 01:09:59 cumulus sshd[10725]: Disconnected from 104.131.55.236 port 35391 [preau........ ------------------------------- |
2019-10-18 15:56:33 |
| 67.205.158.17 | attackspam | Oct 18 11:27:55 our-server-hostname postfix/smtp[5911]: connect to mail1.anzcommunications.anz.worldwidesof.com[67.205.158.17]:25: Connection servered out Oct 18 11:28:17 our-server-hostname postfix/smtpd[9946]: connect from unknown[67.205.158.17] Oct 18 11:28:18 our-server-hostname postfix/smtpd[9946]: NOQUEUE: reject: RCPT from unknown[67.205.158.17]: 504 5.5.2 |
2019-10-18 15:43:51 |
| 50.116.72.164 | attack | www.fahrschule-mihm.de 50.116.72.164 \[18/Oct/2019:05:50:40 +0200\] "POST /wp-login.php HTTP/1.1" 200 5756 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.fahrschule-mihm.de 50.116.72.164 \[18/Oct/2019:05:50:42 +0200\] "POST /wp-login.php HTTP/1.1" 200 5656 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-18 15:51:09 |
| 185.176.27.98 | attackbots | 10/18/2019-03:08:15.348735 185.176.27.98 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-18 16:06:11 |
| 51.75.248.251 | attackbots | Oct 18 03:50:11 work-partkepr sshd\[16895\]: Invalid user node from 51.75.248.251 port 50672 Oct 18 03:50:11 work-partkepr sshd\[16895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.248.251 ... |
2019-10-18 16:16:28 |
| 219.128.51.65 | attack | Oct 18 11:47:59 bacztwo courieresmtpd[832]: error,relay=::ffff:219.128.51.65,from=<>,to=<>: 500 Invalid address Oct 18 11:49:15 bacztwo courieresmtpd[10655]: error,relay=::ffff:219.128.51.65,from=<>,to=<>: 500 Invalid address Oct 18 11:49:26 bacztwo courieresmtpd[11738]: error,relay=::ffff:219.128.51.65,from=<>,to=<>: 500 Invalid address Oct 18 11:49:54 bacztwo courieresmtpd[15290]: error,relay=::ffff:219.128.51.65,from=<>,to=<>: 500 Invalid address Oct 18 11:50:14 bacztwo courieresmtpd[17701]: error,relay=::ffff:219.128.51.65,from=<>,to=<>: 500 Invalid address ... |
2019-10-18 16:09:56 |
| 51.38.238.22 | attack | Invalid user oracle from 51.38.238.22 port 35958 |
2019-10-18 16:20:20 |
| 51.77.230.23 | attack | $f2bV_matches |
2019-10-18 15:53:58 |
| 51.75.24.200 | attackspam | $f2bV_matches |
2019-10-18 16:08:05 |