City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.92.71.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27585
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.92.71.161. IN A
;; AUTHORITY SECTION:
. 543 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020011800 1800 900 604800 86400
;; Query time: 80 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 19 06:44:34 CST 2020
;; MSG SIZE rcvd: 117Host 161.71.92.134.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 161.71.92.134.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 212.129.62.142 | attackbots | 212.129.62.142 - - \[04/Aug/2019:12:53:13 +0200\] "POST /wp-login.php HTTP/1.1" 200 2110 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 212.129.62.142 - - \[04/Aug/2019:12:53:13 +0200\] "POST /wp-login.php HTTP/1.1" 200 2113 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-08-04 19:04:22 |
| 178.128.201.224 | attack | Aug 4 11:22:57 Ubuntu-1404-trusty-64-minimal sshd\[1350\]: Invalid user nvivek from 178.128.201.224 Aug 4 11:22:57 Ubuntu-1404-trusty-64-minimal sshd\[1350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.201.224 Aug 4 11:22:59 Ubuntu-1404-trusty-64-minimal sshd\[1350\]: Failed password for invalid user nvivek from 178.128.201.224 port 35566 ssh2 Aug 4 11:35:22 Ubuntu-1404-trusty-64-minimal sshd\[7190\]: Invalid user guest from 178.128.201.224 Aug 4 11:35:22 Ubuntu-1404-trusty-64-minimal sshd\[7190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.201.224 |
2019-08-04 18:41:32 |
| 128.199.234.63 | attackbots | Feb 23 00:59:30 motanud sshd\[22737\]: Invalid user weblogic from 128.199.234.63 port 49268 Feb 23 00:59:30 motanud sshd\[22737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.234.63 Feb 23 00:59:31 motanud sshd\[22737\]: Failed password for invalid user weblogic from 128.199.234.63 port 49268 ssh2 |
2019-08-04 18:55:13 |
| 187.181.65.60 | attackbotsspam | Feb 23 16:38:25 motanud sshd\[7654\]: Invalid user ftpuser from 187.181.65.60 port 55966 Feb 23 16:38:25 motanud sshd\[7654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.181.65.60 Feb 23 16:38:27 motanud sshd\[7654\]: Failed password for invalid user ftpuser from 187.181.65.60 port 55966 ssh2 |
2019-08-04 19:06:01 |
| 138.197.213.233 | attackbotsspam | Aug 4 10:54:55 localhost sshd\[46174\]: Invalid user Access from 138.197.213.233 port 43386 Aug 4 10:54:55 localhost sshd\[46174\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.213.233 Aug 4 10:54:57 localhost sshd\[46174\]: Failed password for invalid user Access from 138.197.213.233 port 43386 ssh2 Aug 4 10:59:17 localhost sshd\[46325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.213.233 user=root Aug 4 10:59:19 localhost sshd\[46325\]: Failed password for root from 138.197.213.233 port 37874 ssh2 ... |
2019-08-04 19:06:56 |
| 94.29.72.33 | attackspam | 1,23-06/18 [bc01/m06] concatform PostRequest-Spammer scoring: essen |
2019-08-04 18:44:58 |
| 111.254.62.238 | attackbots | Aug 4 02:29:55 web1 sshd\[5684\]: Invalid user aos from 111.254.62.238 Aug 4 02:29:55 web1 sshd\[5684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.254.62.238 Aug 4 02:29:56 web1 sshd\[5684\]: Failed password for invalid user aos from 111.254.62.238 port 33018 ssh2 Aug 4 02:39:05 web1 sshd\[6157\]: Invalid user dmc from 111.254.62.238 Aug 4 02:39:05 web1 sshd\[6157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.254.62.238 |
2019-08-04 18:49:52 |
| 59.1.48.98 | attackbotsspam | Aug 4 10:08:24 MK-Soft-VM6 sshd\[5371\]: Invalid user utente from 59.1.48.98 port 12914 Aug 4 10:08:24 MK-Soft-VM6 sshd\[5371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.1.48.98 Aug 4 10:08:27 MK-Soft-VM6 sshd\[5371\]: Failed password for invalid user utente from 59.1.48.98 port 12914 ssh2 ... |
2019-08-04 18:57:00 |
| 140.143.72.21 | attackspambots | Automatic report - Banned IP Access |
2019-08-04 18:13:31 |
| 92.119.160.52 | attack | Sun 04 04:52:49 39698/tcp Sun 04 05:31:27 54083/tcp Sun 04 05:36:43 50760/tcp |
2019-08-04 18:16:11 |
| 138.68.101.199 | attackbotsspam | Aug 4 09:14:40 lcl-usvr-02 sshd[2920]: Invalid user mac from 138.68.101.199 port 57546 Aug 4 09:14:40 lcl-usvr-02 sshd[2920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.101.199 Aug 4 09:14:40 lcl-usvr-02 sshd[2920]: Invalid user mac from 138.68.101.199 port 57546 Aug 4 09:14:42 lcl-usvr-02 sshd[2920]: Failed password for invalid user mac from 138.68.101.199 port 57546 ssh2 Aug 4 09:18:50 lcl-usvr-02 sshd[3730]: Invalid user pavbras from 138.68.101.199 port 53764 ... |
2019-08-04 18:25:24 |
| 45.115.186.43 | attackbots | 2019-08-03 UTC: 1x - root |
2019-08-04 18:50:16 |
| 180.180.202.156 | attackbots | Aug 4 00:39:51 DDOS Attack: SRC=180.180.202.156 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=51 DF PROTO=TCP SPT=56339 DPT=80 WINDOW=0 RES=0x00 RST URGP=0 |
2019-08-04 18:27:48 |
| 193.148.68.197 | attackbotsspam | Aug 4 08:42:13 SilenceServices sshd[2000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.148.68.197 Aug 4 08:42:16 SilenceServices sshd[2000]: Failed password for invalid user psybnc123 from 193.148.68.197 port 60190 ssh2 Aug 4 08:46:59 SilenceServices sshd[5328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.148.68.197 |
2019-08-04 19:02:09 |
| 51.75.29.61 | attackspam | Automatic report - Banned IP Access |
2019-08-04 18:51:57 |