City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.22.39.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62773
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.22.39.139. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:33:40 CST 2022
;; MSG SIZE rcvd: 106Host 139.39.22.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 139.39.22.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 191.235.64.211 | attackbotsspam | Jul 15 14:35:48 Ubuntu-1404-trusty-64-minimal sshd\[26458\]: Invalid user torux from 191.235.64.211 Jul 15 14:35:48 Ubuntu-1404-trusty-64-minimal sshd\[26459\]: Invalid user invalid.torux.at from 191.235.64.211 Jul 15 14:35:48 Ubuntu-1404-trusty-64-minimal sshd\[26459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.235.64.211 Jul 15 14:35:48 Ubuntu-1404-trusty-64-minimal sshd\[26458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.235.64.211 Jul 15 14:35:48 Ubuntu-1404-trusty-64-minimal sshd\[26460\]: Invalid user invalid from 191.235.64.211 Jul 15 14:35:48 Ubuntu-1404-trusty-64-minimal sshd\[26460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.235.64.211 |
2020-07-15 20:42:03 |
| 49.234.21.36 | attack | Jul 15 12:15:20 nextcloud sshd\[16799\]: Invalid user admin from 49.234.21.36 Jul 15 12:15:20 nextcloud sshd\[16799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.21.36 Jul 15 12:15:22 nextcloud sshd\[16799\]: Failed password for invalid user admin from 49.234.21.36 port 52864 ssh2 |
2020-07-15 20:35:16 |
| 115.73.213.11 | attack | Unauthorized connection attempt from IP address 115.73.213.11 on Port 445(SMB) |
2020-07-15 20:41:00 |
| 47.52.239.42 | attack | 47.52.239.42 - - \[15/Jul/2020:13:40:02 +0200\] "POST /wp-login.php HTTP/1.0" 200 6400 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 47.52.239.42 - - \[15/Jul/2020:13:40:05 +0200\] "POST /wp-login.php HTTP/1.0" 200 6412 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 47.52.239.42 - - \[15/Jul/2020:13:40:08 +0200\] "POST /wp-login.php HTTP/1.0" 200 6404 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-07-15 20:30:52 |
| 203.192.225.87 | attack | Unauthorized connection attempt from IP address 203.192.225.87 on Port 445(SMB) |
2020-07-15 20:49:25 |
| 109.198.114.54 | attack | Unauthorized connection attempt from IP address 109.198.114.54 on Port 445(SMB) |
2020-07-15 20:34:34 |
| 187.95.42.186 | attackbots | Unauthorized connection attempt from IP address 187.95.42.186 on Port 445(SMB) |
2020-07-15 20:46:17 |
| 183.83.145.48 | attackspam | 1594808582 - 07/15/2020 12:23:02 Host: 183.83.145.48/183.83.145.48 Port: 445 TCP Blocked |
2020-07-15 20:53:01 |
| 185.143.144.71 | attackbotsspam | Honeypot attack, port: 5555, PTR: host-71.primonet.com.ua. |
2020-07-15 20:42:44 |
| 39.32.203.196 | attackspambots | ptcl.com.pk |
2020-07-15 20:35:55 |
| 203.195.130.233 | attackspam | 2020-07-15T06:26:39.3564381495-001 sshd[30713]: Invalid user natanael from 203.195.130.233 port 45174 2020-07-15T06:26:41.2077011495-001 sshd[30713]: Failed password for invalid user natanael from 203.195.130.233 port 45174 ssh2 2020-07-15T06:29:24.6116981495-001 sshd[30853]: Invalid user smkim from 203.195.130.233 port 47092 2020-07-15T06:29:24.6186231495-001 sshd[30853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.130.233 2020-07-15T06:29:24.6116981495-001 sshd[30853]: Invalid user smkim from 203.195.130.233 port 47092 2020-07-15T06:29:27.1159411495-001 sshd[30853]: Failed password for invalid user smkim from 203.195.130.233 port 47092 ssh2 ... |
2020-07-15 20:54:43 |
| 59.127.207.189 | attackbotsspam | Honeypot attack, port: 81, PTR: 59-127-207-189.HINET-IP.hinet.net. |
2020-07-15 20:33:31 |
| 125.141.139.9 | attack | Jul 15 13:08:39 OPSO sshd\[8627\]: Invalid user sar from 125.141.139.9 port 45714 Jul 15 13:08:39 OPSO sshd\[8627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.139.9 Jul 15 13:08:41 OPSO sshd\[8627\]: Failed password for invalid user sar from 125.141.139.9 port 45714 ssh2 Jul 15 13:12:15 OPSO sshd\[9254\]: Invalid user abc1 from 125.141.139.9 port 35458 Jul 15 13:12:15 OPSO sshd\[9254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.139.9 |
2020-07-15 20:23:48 |
| 222.186.30.167 | attackspam | 2020-07-15T14:24:29.470149vps751288.ovh.net sshd\[9322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167 user=root 2020-07-15T14:24:31.234250vps751288.ovh.net sshd\[9322\]: Failed password for root from 222.186.30.167 port 34992 ssh2 2020-07-15T14:24:33.211661vps751288.ovh.net sshd\[9322\]: Failed password for root from 222.186.30.167 port 34992 ssh2 2020-07-15T14:24:35.796349vps751288.ovh.net sshd\[9322\]: Failed password for root from 222.186.30.167 port 34992 ssh2 2020-07-15T14:24:43.487062vps751288.ovh.net sshd\[9326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167 user=root |
2020-07-15 20:32:20 |
| 185.143.73.203 | attack | Jul 15 13:21:17 blackbee postfix/smtpd[9986]: warning: unknown[185.143.73.203]: SASL LOGIN authentication failed: authentication failure Jul 15 13:21:41 blackbee postfix/smtpd[9986]: warning: unknown[185.143.73.203]: SASL LOGIN authentication failed: authentication failure Jul 15 13:22:03 blackbee postfix/smtpd[10205]: warning: unknown[185.143.73.203]: SASL LOGIN authentication failed: authentication failure Jul 15 13:22:27 blackbee postfix/smtpd[10226]: warning: unknown[185.143.73.203]: SASL LOGIN authentication failed: authentication failure Jul 15 13:22:49 blackbee postfix/smtpd[10226]: warning: unknown[185.143.73.203]: SASL LOGIN authentication failed: authentication failure ... |
2020-07-15 20:43:07 |