City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.119.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34677
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.209.119.145. IN A
;; AUTHORITY SECTION:
. 268 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 11:35:29 CST 2022
;; MSG SIZE rcvd: 108Host 145.119.209.134.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 145.119.209.134.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 82.142.162.210 | attack | IP of network, from which recurrent spam was originally sent. |
2019-09-30 00:46:23 |
| 185.244.195.35 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 29-09-2019 13:05:16. |
2019-09-30 00:31:52 |
| 216.218.206.102 | attackbots | 21/tcp 23/tcp 8443/tcp... [2019-07-29/09-29]41pkt,15pt.(tcp),1pt.(udp) |
2019-09-30 00:09:59 |
| 200.236.228.250 | attack | Automatic report - Port Scan Attack |
2019-09-30 00:54:31 |
| 202.129.185.161 | attackbots | Sending SPAM email |
2019-09-30 00:39:16 |
| 134.209.120.1 | attack | Sep 28 20:31:09 new sshd[13784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.120.1 user=postgres Sep 28 20:31:11 new sshd[13784]: Failed password for postgres from 134.209.120.1 port 37668 ssh2 Sep 28 20:31:11 new sshd[13784]: Received disconnect from 134.209.120.1: 11: Bye Bye [preauth] Sep 28 20:45:07 new sshd[17564]: Failed password for invalid user gemma from 134.209.120.1 port 57484 ssh2 Sep 28 20:45:08 new sshd[17564]: Received disconnect from 134.209.120.1: 11: Bye Bye [preauth] Sep 28 20:49:09 new sshd[18347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.120.1 user=postgres Sep 28 20:49:11 new sshd[18347]: Failed password for postgres from 134.209.120.1 port 52822 ssh2 Sep 28 20:49:11 new sshd[18347]: Received disconnect from 134.209.120.1: 11: Bye Bye [preauth] Sep 28 20:53:07 new sshd[19493]: Failed password for invalid user suporte from 134.209.120.1 port ........ ------------------------------- |
2019-09-30 00:53:18 |
| 89.248.160.193 | attackbotsspam | 09/29/2019-11:31:41.735683 89.248.160.193 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 97 |
2019-09-30 00:22:33 |
| 106.12.176.3 | attackspam | Sep 29 16:08:29 hcbbdb sshd\[18230\]: Invalid user xn from 106.12.176.3 Sep 29 16:08:29 hcbbdb sshd\[18230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.176.3 Sep 29 16:08:31 hcbbdb sshd\[18230\]: Failed password for invalid user xn from 106.12.176.3 port 49368 ssh2 Sep 29 16:14:37 hcbbdb sshd\[18890\]: Invalid user matt from 106.12.176.3 Sep 29 16:14:37 hcbbdb sshd\[18890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.176.3 |
2019-09-30 00:25:07 |
| 187.86.101.241 | attackspambots | 8081/tcp 8888/tcp [2019-09-27/28]2pkt |
2019-09-30 00:46:03 |
| 107.170.113.190 | attack | 2019-09-29T12:05:37.297505abusebot-8.cloudsearch.cf sshd\[21338\]: Invalid user support from 107.170.113.190 port 57979 |
2019-09-30 00:13:46 |
| 94.177.214.200 | attackbotsspam | Sep 29 14:55:05 dedicated sshd[15058]: Invalid user user from 94.177.214.200 port 46168 |
2019-09-30 00:19:33 |
| 187.59.225.234 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/187.59.225.234/ BR - 1H : (1241) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN10429 IP : 187.59.225.234 CIDR : 187.59.224.0/20 PREFIX COUNT : 145 UNIQUE IP COUNT : 1862400 WYKRYTE ATAKI Z ASN10429 : 1H - 1 3H - 1 6H - 4 12H - 7 24H - 16 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-09-30 00:20:23 |
| 93.97.217.81 | attackbots | Sep 29 18:10:53 core sshd[30328]: Invalid user cron from 93.97.217.81 port 41593 Sep 29 18:10:54 core sshd[30328]: Failed password for invalid user cron from 93.97.217.81 port 41593 ssh2 ... |
2019-09-30 00:31:20 |
| 174.138.30.96 | attack | Sep 29 05:53:43 auw2 sshd\[6346\]: Invalid user ubnt from 174.138.30.96 Sep 29 05:53:43 auw2 sshd\[6346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.30.96 Sep 29 05:53:44 auw2 sshd\[6346\]: Failed password for invalid user ubnt from 174.138.30.96 port 60036 ssh2 Sep 29 05:58:54 auw2 sshd\[6791\]: Invalid user teamspeak from 174.138.30.96 Sep 29 05:58:54 auw2 sshd\[6791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.30.96 |
2019-09-30 00:08:30 |
| 82.200.65.218 | attackbotsspam | $f2bV_matches |
2019-09-30 00:12:47 |