City: unknown
Region: unknown
Country: unknown
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 135.148.53.61
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18504
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;135.148.53.61. IN A
;; AUTHORITY SECTION:
. 597 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400
;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 06:56:36 CST 2022
;; MSG SIZE rcvd: 10661.53.148.135.in-addr.arpa domain name pointer ns1007326.ip-135-148-53.us.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
61.53.148.135.in-addr.arpa name = ns1007326.ip-135-148-53.us.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.197.73.177 | attack | firewall-block, port(s): 19326/tcp |
2020-07-14 03:48:29 |
| 192.241.234.241 | attackspam | Port scan denied |
2020-07-14 03:43:46 |
| 92.241.145.72 | attackbotsspam | Jul 13 16:28:32 abendstille sshd\[3410\]: Invalid user juan from 92.241.145.72 Jul 13 16:28:32 abendstille sshd\[3410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.241.145.72 Jul 13 16:28:34 abendstille sshd\[3410\]: Failed password for invalid user juan from 92.241.145.72 port 51482 ssh2 Jul 13 16:32:25 abendstille sshd\[6821\]: Invalid user a from 92.241.145.72 Jul 13 16:32:25 abendstille sshd\[6821\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.241.145.72 ... |
2020-07-14 04:00:53 |
| 185.39.11.48 | attackspambots | Jul 13 16:45:41 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=185.39.11.48 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=24082 PROTO=TCP SPT=43705 DPT=33889 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 13 16:48:58 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=185.39.11.48 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=62899 PROTO=TCP SPT=43705 DPT=1234 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 13 16:51:11 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=185.39.11.48 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=11957 PROTO=TCP SPT=43705 DPT=3324 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 13 16:53:24 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=185.39.11.48 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=48631 PROTO=TCP SPT=43705 DPT=3890 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 13 16:53:34 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c: |
2020-07-14 03:55:17 |
| 104.131.13.199 | attackbotsspam | Jul 13 21:19:12 vps sshd[308756]: Failed password for invalid user instinct from 104.131.13.199 port 59156 ssh2 Jul 13 21:23:08 vps sshd[328415]: Invalid user drop from 104.131.13.199 port 39130 Jul 13 21:23:08 vps sshd[328415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.13.199 Jul 13 21:23:10 vps sshd[328415]: Failed password for invalid user drop from 104.131.13.199 port 39130 ssh2 Jul 13 21:25:55 vps sshd[343338]: Invalid user mep from 104.131.13.199 port 35364 ... |
2020-07-14 03:35:50 |
| 216.218.206.84 | attack | Port scan denied |
2020-07-14 04:06:37 |
| 59.127.57.125 | attackbotsspam | Port scan denied |
2020-07-14 03:53:00 |
| 190.196.36.14 | attackbotsspam | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-07-14 04:08:42 |
| 167.99.66.193 | attackspambots | (sshd) Failed SSH login from 167.99.66.193 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 13 15:15:40 s1 sshd[2267]: Invalid user bugzilla from 167.99.66.193 port 60809 Jul 13 15:15:43 s1 sshd[2267]: Failed password for invalid user bugzilla from 167.99.66.193 port 60809 ssh2 Jul 13 15:18:39 s1 sshd[2382]: Invalid user darryl from 167.99.66.193 port 48079 Jul 13 15:18:41 s1 sshd[2382]: Failed password for invalid user darryl from 167.99.66.193 port 48079 ssh2 Jul 13 15:19:31 s1 sshd[2411]: Invalid user celery from 167.99.66.193 port 54106 |
2020-07-14 04:01:04 |
| 178.62.214.85 | attack | Jul 13 20:06:24 django-0 sshd[30964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.214.85 Jul 13 20:06:24 django-0 sshd[30964]: Invalid user test from 178.62.214.85 Jul 13 20:06:26 django-0 sshd[30964]: Failed password for invalid user test from 178.62.214.85 port 57824 ssh2 ... |
2020-07-14 04:00:26 |
| 165.227.182.136 | attack | Jul 13 21:22:44 nextcloud sshd\[6401\]: Invalid user gb from 165.227.182.136 Jul 13 21:22:44 nextcloud sshd\[6401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.182.136 Jul 13 21:22:46 nextcloud sshd\[6401\]: Failed password for invalid user gb from 165.227.182.136 port 33324 ssh2 |
2020-07-14 03:40:14 |
| 192.241.234.68 | attack | Port scan denied |
2020-07-14 03:54:14 |
| 191.234.161.50 | attackspambots | ... |
2020-07-14 04:05:09 |
| 89.223.92.32 | attackbots | 2020-07-12T17:59:42.888654hostname sshd[105602]: Failed password for invalid user senba from 89.223.92.32 port 41858 ssh2 ... |
2020-07-14 03:38:33 |
| 122.51.32.248 | attackspambots | Jul 13 21:48:43 vps647732 sshd[6064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.32.248 Jul 13 21:48:45 vps647732 sshd[6064]: Failed password for invalid user helpdesk from 122.51.32.248 port 52050 ssh2 ... |
2020-07-14 04:07:36 |