City: San Diego
Region: California
Country: United States
Internet Service Provider: AT&T
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.192.116.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2021
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;12.192.116.129. IN A
;; AUTHORITY SECTION:
. 540 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020050801 1800 900 604800 86400
;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 09 08:08:46 CST 2020
;; MSG SIZE rcvd: 118;; connection timed out; no servers could be reached
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
*** Can't find 129.116.192.12.in-addr.arpa.: No answer
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 125.27.12.20 | attackspam | Nov 5 19:21:47 plusreed sshd[26991]: Invalid user zipdrive from 125.27.12.20 ... |
2019-11-06 08:22:56 |
| 202.164.48.202 | attackbotsspam | 5x Failed Password |
2019-11-06 08:08:50 |
| 159.89.162.118 | attack | Nov 5 13:28:42 auw2 sshd\[16913\]: Invalid user gentry from 159.89.162.118 Nov 5 13:28:42 auw2 sshd\[16913\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.162.118 Nov 5 13:28:44 auw2 sshd\[16913\]: Failed password for invalid user gentry from 159.89.162.118 port 60324 ssh2 Nov 5 13:33:10 auw2 sshd\[17272\]: Invalid user roger from 159.89.162.118 Nov 5 13:33:10 auw2 sshd\[17272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.162.118 |
2019-11-06 08:22:41 |
| 45.148.10.40 | attackbots | Only those who intend to destroy a site make attempts like this below, so if this ip appears on your site, block it immediately 45.148.10.0/24 is high risk: 45.148.10.40 - - [03/Nov/2019:23:35:31 -0300] "GET /.git/index HTTP/1.1" 404 101 "-" "git/2.0.0" 45.148.10.40 - - [04/Nov/2019:00:16:32 -0300] "GET /.git/index HTTP/1.1" 404 101 "-" "git/2.0.0" 45.148.10.40 - - [04/Nov/2019:00:16:33 -0300] "GET /.git/index HTTP/1.1" 404 101 "-" "git/2.0.0" |
2019-11-06 08:42:25 |
| 221.217.52.21 | attackbots | F2B jail: sshd. Time: 2019-11-06 00:49:01, Reported by: VKReport |
2019-11-06 08:11:17 |
| 104.40.8.62 | attackbots | Nov 5 18:04:21 ny01 sshd[15017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.40.8.62 Nov 5 18:04:23 ny01 sshd[15017]: Failed password for invalid user Ar$$2016 from 104.40.8.62 port 20480 ssh2 Nov 5 18:08:20 ny01 sshd[15388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.40.8.62 |
2019-11-06 08:25:53 |
| 123.206.41.205 | attackbots | Nov 5 23:31:50 srv01 sshd[23212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.41.205 user=root Nov 5 23:31:51 srv01 sshd[23212]: Failed password for root from 123.206.41.205 port 51568 ssh2 Nov 5 23:35:55 srv01 sshd[23414]: Invalid user ae from 123.206.41.205 Nov 5 23:35:55 srv01 sshd[23414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.41.205 Nov 5 23:35:55 srv01 sshd[23414]: Invalid user ae from 123.206.41.205 Nov 5 23:35:56 srv01 sshd[23414]: Failed password for invalid user ae from 123.206.41.205 port 60868 ssh2 ... |
2019-11-06 08:35:47 |
| 182.61.132.165 | attackspam | Nov 5 19:15:27 plusreed sshd[25587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.132.165 user=root Nov 5 19:15:28 plusreed sshd[25587]: Failed password for root from 182.61.132.165 port 51448 ssh2 ... |
2019-11-06 08:21:50 |
| 80.211.48.46 | attackspam | 2019-11-05T22:35:43.047036abusebot-6.cloudsearch.cf sshd\[23985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.48.46 user=root |
2019-11-06 08:41:59 |
| 80.211.154.91 | attackbotsspam | Nov 5 23:35:37 xeon sshd[53979]: Failed password for root from 80.211.154.91 port 50020 ssh2 |
2019-11-06 08:32:48 |
| 189.220.195.20 | attack | Hit on /wp-login.php |
2019-11-06 08:24:01 |
| 52.163.90.151 | attackspam | Nov 6 01:23:32 server sshd\[28473\]: Invalid user discret from 52.163.90.151 Nov 6 01:23:32 server sshd\[28473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.163.90.151 Nov 6 01:23:34 server sshd\[28473\]: Failed password for invalid user discret from 52.163.90.151 port 1984 ssh2 Nov 6 01:36:01 server sshd\[31745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.163.90.151 user=root Nov 6 01:36:03 server sshd\[31745\]: Failed password for root from 52.163.90.151 port 1984 ssh2 ... |
2019-11-06 08:30:28 |
| 184.15.242.1 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/184.15.242.1/ US - 1H : (210) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN5650 IP : 184.15.242.1 CIDR : 184.15.224.0/19 PREFIX COUNT : 3395 UNIQUE IP COUNT : 11968768 ATTACKS DETECTED ASN5650 : 1H - 1 3H - 1 6H - 1 12H - 4 24H - 5 DateTime : 2019-11-05 23:36:02 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN - data recovery |
2019-11-06 08:29:38 |
| 103.45.105.236 | attackbotsspam | Nov 5 00:54:12 XXX sshd[48068]: Invalid user cache from 103.45.105.236 port 50820 |
2019-11-06 08:14:15 |
| 157.245.165.133 | attackspambots | Nov 5 23:48:16 web01 sshd[20544]: Received disconnect from 157.245.165.133: 11: Bye Bye [preauth] Nov 5 23:48:18 web01 sshd[20546]: Invalid user admin from 157.245.165.133 Nov 5 23:48:18 web01 sshd[20546]: Received disconnect from 157.245.165.133: 11: Bye Bye [preauth] Nov 5 23:48:19 web01 sshd[20548]: Invalid user admin from 157.245.165.133 Nov 5 23:48:19 web01 sshd[20548]: Received disconnect from 157.245.165.133: 11: Bye Bye [preauth] Nov 5 23:48:20 web01 sshd[20556]: Invalid user user from 157.245.165.133 Nov 5 23:48:21 web01 sshd[20556]: Received disconnect from 157.245.165.133: 11: Bye Bye [preauth] Nov 5 23:48:22 web01 sshd[20559]: Invalid user ubnt from 157.245.165.133 Nov 5 23:48:22 web01 sshd[20559]: Received disconnect from 157.245.165.133: 11: Bye Bye [preauth] Nov 5 23:48:23 web01 sshd[20563]: Invalid user admin from 157.245.165.133 Nov 5 23:48:24 web01 sshd[20563]: Received disconnect from 157.245.165.133: 11: Bye Bye [preauth] Nov 5 23:48:25 w........ ------------------------------- |
2019-11-06 08:38:48 |