City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.139.164.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54498
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.139.164.57. IN A
;; AUTHORITY SECTION:
. 371 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022012801 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 29 05:07:36 CST 2022
;; MSG SIZE rcvd: 107Host 57.164.139.134.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 57.164.139.134.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 149.56.46.220 | attackbotsspam | Nov 29 08:26:35 MK-Soft-VM8 sshd[4093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.46.220 Nov 29 08:26:37 MK-Soft-VM8 sshd[4093]: Failed password for invalid user ssh from 149.56.46.220 port 48818 ssh2 ... |
2019-11-29 16:24:15 |
| 74.121.190.26 | attack | \[2019-11-29 03:04:34\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-29T03:04:34.762-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="0048627490012",SessionID="0x7f26c445f668",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.121.190.26/57671",ACLName="no_extension_match" \[2019-11-29 03:05:31\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-29T03:05:31.175-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="00048627490012",SessionID="0x7f26c44efca8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.121.190.26/55650",ACLName="no_extension_match" \[2019-11-29 03:06:19\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-29T03:06:19.696-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="48627490012",SessionID="0x7f26c4022278",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.121.190.26/59824",ACLName="no_extension_ |
2019-11-29 16:12:27 |
| 148.70.47.216 | attack | Nov 29 07:11:13 zeus sshd[9493]: Failed password for root from 148.70.47.216 port 33242 ssh2 Nov 29 07:14:49 zeus sshd[9560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.47.216 Nov 29 07:14:51 zeus sshd[9560]: Failed password for invalid user gs from 148.70.47.216 port 38674 ssh2 |
2019-11-29 16:45:50 |
| 175.139.243.82 | attackspambots | Invalid user morishima from 175.139.243.82 port 16480 |
2019-11-29 16:11:11 |
| 134.175.154.93 | attackspam | Nov 29 08:28:38 fr01 sshd[21076]: Invalid user dbus from 134.175.154.93 Nov 29 08:28:38 fr01 sshd[21076]: Invalid user dbus from 134.175.154.93 Nov 29 08:28:38 fr01 sshd[21076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.154.93 Nov 29 08:28:38 fr01 sshd[21076]: Invalid user dbus from 134.175.154.93 Nov 29 08:28:41 fr01 sshd[21076]: Failed password for invalid user dbus from 134.175.154.93 port 53824 ssh2 ... |
2019-11-29 16:41:35 |
| 47.101.61.189 | attackspambots | Automatic report - XMLRPC Attack |
2019-11-29 16:32:41 |
| 124.152.158.2 | attackbotsspam | 11/29/2019-07:27:19.931232 124.152.158.2 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2019-11-29 16:40:20 |
| 51.75.24.200 | attack | Nov 29 08:55:46 OPSO sshd\[3306\]: Invalid user mcdonalds from 51.75.24.200 port 59124 Nov 29 08:55:46 OPSO sshd\[3306\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.24.200 Nov 29 08:55:49 OPSO sshd\[3306\]: Failed password for invalid user mcdonalds from 51.75.24.200 port 59124 ssh2 Nov 29 08:59:00 OPSO sshd\[3522\]: Invalid user antone from 51.75.24.200 port 39276 Nov 29 08:59:00 OPSO sshd\[3522\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.24.200 |
2019-11-29 16:11:34 |
| 81.90.54.219 | attack | Nov 28 19:26:57 server6 sshd[30042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81-90-54-219.addr.refertelecom.pt user=r.r Nov 28 19:26:59 server6 sshd[30042]: Failed password for r.r from 81.90.54.219 port 33684 ssh2 Nov 28 19:26:59 server6 sshd[30042]: Received disconnect from 81.90.54.219: 11: Bye Bye [preauth] Nov 28 19:46:44 server6 sshd[15634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81-90-54-219.addr.refertelecom.pt Nov 28 19:46:47 server6 sshd[15634]: Failed password for invalid user nang from 81.90.54.219 port 45481 ssh2 Nov 28 19:46:47 server6 sshd[15634]: Received disconnect from 81.90.54.219: 11: Bye Bye [preauth] Nov 28 19:52:16 server6 sshd[20620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81-90-54-219.addr.refertelecom.pt Nov 28 19:52:18 server6 sshd[20620]: Failed password for invalid user maik from 81.90.54.219 port........ ------------------------------- |
2019-11-29 16:42:28 |
| 222.233.53.132 | attackbotsspam | Invalid user lucchesi from 222.233.53.132 port 46350 |
2019-11-29 16:46:11 |
| 210.99.108.205 | attackbotsspam | Fail2Ban - FTP Abuse Attempt |
2019-11-29 16:17:46 |
| 167.99.155.36 | attackspam | Nov 25 02:42:19 hostnameis sshd[1124]: Address 167.99.155.36 maps to www2.bwell.solutions, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Nov 25 02:42:19 hostnameis sshd[1124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.155.36 user=r.r Nov 25 02:42:21 hostnameis sshd[1124]: Failed password for r.r from 167.99.155.36 port 58152 ssh2 Nov 25 02:42:21 hostnameis sshd[1124]: Received disconnect from 167.99.155.36: 11: Bye Bye [preauth] Nov 25 02:46:59 hostnameis sshd[1143]: Address 167.99.155.36 maps to www2.bwell.solutions, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Nov 25 02:46:59 hostnameis sshd[1143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.155.36 user=r.r Nov 25 02:47:00 hostnameis sshd[1143]: Failed password for r.r from 167.99.155.36 port 50400 ssh2 Nov 25 02:47:00 hostnameis sshd[1143]: Received disconnect fro........ ------------------------------ |
2019-11-29 16:28:12 |
| 82.207.114.64 | attackspam | 2019-11-29T17:14:18.231041luisaranguren sshd[1016806]: Connection from 82.207.114.64 port 52507 on 10.10.10.6 port 22 rdomain "" 2019-11-29T17:14:23.710536luisaranguren sshd[1016806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.207.114.64 user=root 2019-11-29T17:14:25.363234luisaranguren sshd[1016806]: Failed password for root from 82.207.114.64 port 52507 ssh2 2019-11-29T17:27:42.377652luisaranguren sshd[1018648]: Connection from 82.207.114.64 port 49761 on 10.10.10.6 port 22 rdomain "" 2019-11-29T17:27:57.762310luisaranguren sshd[1018648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.207.114.64 user=root 2019-11-29T17:28:00.161213luisaranguren sshd[1018648]: Failed password for root from 82.207.114.64 port 49761 ssh2 ... |
2019-11-29 16:16:38 |
| 106.12.130.235 | attack | Nov 29 04:37:36 firewall sshd[3968]: Invalid user rpc from 106.12.130.235 Nov 29 04:37:38 firewall sshd[3968]: Failed password for invalid user rpc from 106.12.130.235 port 60962 ssh2 Nov 29 04:41:43 firewall sshd[4015]: Invalid user deb from 106.12.130.235 ... |
2019-11-29 16:20:27 |
| 80.211.80.154 | attackbots | Nov 29 12:48:49 areeb-Workstation sshd[10294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.80.154 Nov 29 12:48:51 areeb-Workstation sshd[10294]: Failed password for invalid user tsuneki from 80.211.80.154 port 34454 ssh2 ... |
2019-11-29 16:32:19 |