City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.55.101.59
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8382
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.55.101.59. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025031201 1800 900 604800 86400
;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 13 09:07:27 CST 2025
;; MSG SIZE rcvd: 106Host 59.101.55.134.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 59.101.55.134.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.85.42.175 | attack | Nov 30 07:13:12 dcd-gentoo sshd[7426]: User root from 112.85.42.175 not allowed because none of user's groups are listed in AllowGroups Nov 30 07:13:15 dcd-gentoo sshd[7426]: error: PAM: Authentication failure for illegal user root from 112.85.42.175 Nov 30 07:13:12 dcd-gentoo sshd[7426]: User root from 112.85.42.175 not allowed because none of user's groups are listed in AllowGroups Nov 30 07:13:15 dcd-gentoo sshd[7426]: error: PAM: Authentication failure for illegal user root from 112.85.42.175 Nov 30 07:13:12 dcd-gentoo sshd[7426]: User root from 112.85.42.175 not allowed because none of user's groups are listed in AllowGroups Nov 30 07:13:15 dcd-gentoo sshd[7426]: error: PAM: Authentication failure for illegal user root from 112.85.42.175 Nov 30 07:13:15 dcd-gentoo sshd[7426]: Failed keyboard-interactive/pam for invalid user root from 112.85.42.175 port 50992 ssh2 ... |
2019-11-30 14:13:47 |
| 103.94.5.42 | attackbots | Nov 30 11:25:20 areeb-Workstation sshd[16322]: Failed password for root from 103.94.5.42 port 55286 ssh2 ... |
2019-11-30 14:12:09 |
| 168.232.131.126 | attack | Nov 30 05:56:46 MK-Soft-Root2 sshd[29711]: Failed password for root from 168.232.131.126 port 59377 ssh2 Nov 30 05:56:49 MK-Soft-Root2 sshd[29711]: Failed password for root from 168.232.131.126 port 59377 ssh2 ... |
2019-11-30 14:21:31 |
| 192.144.148.163 | attackbots | Fail2Ban - SSH Bruteforce Attempt |
2019-11-30 14:53:26 |
| 163.172.207.104 | attack | \[2019-11-30 01:02:50\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-30T01:02:50.784-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="999999011972592277524",SessionID="0x7f26c4104768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/50553",ACLName="no_extension_match" \[2019-11-30 01:06:15\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-30T01:06:15.710-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595725636",SessionID="0x7f26c4838a68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/59890",ACLName="no_extension_match" \[2019-11-30 01:06:58\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-30T01:06:58.170-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="9999999011972592277524",SessionID="0x7f26c4838a68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/586 |
2019-11-30 14:14:41 |
| 104.238.73.216 | attackbots | 104.238.73.216 - - \[30/Nov/2019:05:21:17 +0000\] "POST /wp-login.php HTTP/1.1" 200 6393 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 104.238.73.216 - - \[30/Nov/2019:05:21:17 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-11-30 14:27:41 |
| 211.35.76.241 | attack | Nov 30 01:30:31 mail sshd\[22751\]: Invalid user admin from 211.35.76.241 Nov 30 01:30:31 mail sshd\[22751\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.35.76.241 ... |
2019-11-30 14:52:36 |
| 218.92.0.170 | attackspambots | Nov 27 21:25:19 microserver sshd[18448]: Failed none for root from 218.92.0.170 port 14178 ssh2 Nov 27 21:25:20 microserver sshd[18448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.170 user=root Nov 27 21:25:22 microserver sshd[18448]: Failed password for root from 218.92.0.170 port 14178 ssh2 Nov 27 21:25:26 microserver sshd[18448]: Failed password for root from 218.92.0.170 port 14178 ssh2 Nov 27 21:25:29 microserver sshd[18448]: Failed password for root from 218.92.0.170 port 14178 ssh2 Nov 27 21:54:51 microserver sshd[22126]: Failed none for root from 218.92.0.170 port 14302 ssh2 Nov 27 21:54:51 microserver sshd[22126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.170 user=root Nov 27 21:54:52 microserver sshd[22126]: Failed password for root from 218.92.0.170 port 14302 ssh2 Nov 27 21:54:56 microserver sshd[22126]: Failed password for root from 218.92.0.170 port 14302 ssh2 Nov 27 21:54:59 microserve |
2019-11-30 14:39:15 |
| 69.16.204.219 | attack | 69.16.204.219 - - \[30/Nov/2019:06:30:38 +0000\] "POST /wp-login.php HTTP/1.1" 200 6393 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 69.16.204.219 - - \[30/Nov/2019:06:30:39 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-11-30 14:56:12 |
| 222.186.190.2 | attackbotsspam | Nov 30 11:56:38 gw1 sshd[18804]: Failed password for root from 222.186.190.2 port 20328 ssh2 Nov 30 11:56:51 gw1 sshd[18804]: Failed password for root from 222.186.190.2 port 20328 ssh2 Nov 30 11:56:51 gw1 sshd[18804]: error: maximum authentication attempts exceeded for root from 222.186.190.2 port 20328 ssh2 [preauth] ... |
2019-11-30 14:59:27 |
| 218.92.0.138 | attackspambots | Nov 30 09:39:24 server sshd\[9951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138 user=root Nov 30 09:39:26 server sshd\[9951\]: Failed password for root from 218.92.0.138 port 42667 ssh2 Nov 30 09:39:26 server sshd\[9961\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138 user=root Nov 30 09:39:26 server sshd\[9959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138 user=root Nov 30 09:39:27 server sshd\[9961\]: Failed password for root from 218.92.0.138 port 57961 ssh2 ... |
2019-11-30 14:39:59 |
| 123.18.206.15 | attackbotsspam | SSH auth scanning - multiple failed logins |
2019-11-30 14:10:51 |
| 220.164.2.87 | attackspambots | Invalid user admin from 220.164.2.87 port 59602 |
2019-11-30 14:12:58 |
| 112.85.42.227 | attackspambots | 2019-11-30T06:29:33.783999hub.schaetter.us sshd\[3379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.227 user=root 2019-11-30T06:29:35.581264hub.schaetter.us sshd\[3379\]: Failed password for root from 112.85.42.227 port 64130 ssh2 2019-11-30T06:29:37.561598hub.schaetter.us sshd\[3379\]: Failed password for root from 112.85.42.227 port 64130 ssh2 2019-11-30T06:29:39.811909hub.schaetter.us sshd\[3379\]: Failed password for root from 112.85.42.227 port 64130 ssh2 2019-11-30T06:30:38.238356hub.schaetter.us sshd\[3392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.227 user=root ... |
2019-11-30 14:46:18 |
| 218.92.0.145 | attackbots | Nov 30 11:37:11 vibhu-HP-Z238-Microtower-Workstation sshd\[21774\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145 user=root Nov 30 11:37:13 vibhu-HP-Z238-Microtower-Workstation sshd\[21774\]: Failed password for root from 218.92.0.145 port 59211 ssh2 Nov 30 11:37:16 vibhu-HP-Z238-Microtower-Workstation sshd\[21774\]: Failed password for root from 218.92.0.145 port 59211 ssh2 Nov 30 11:37:21 vibhu-HP-Z238-Microtower-Workstation sshd\[21774\]: Failed password for root from 218.92.0.145 port 59211 ssh2 Nov 30 11:37:24 vibhu-HP-Z238-Microtower-Workstation sshd\[21774\]: Failed password for root from 218.92.0.145 port 59211 ssh2 ... |
2019-11-30 14:18:22 |