City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 136.139.57.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20505
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;136.139.57.68. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 20:20:16 CST 2025
;; MSG SIZE rcvd: 106Host 68.57.139.136.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 68.57.139.136.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.145.13.201 | attackspam | [2020-09-13 07:24:42] NOTICE[1239][C-00002e31] chan_sip.c: Call from '' (103.145.13.201:56376) to extension '011441904911054' rejected because extension not found in context 'public'. [2020-09-13 07:24:42] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-13T07:24:42.849-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441904911054",SessionID="0x7f4d480961a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.13.201/56376",ACLName="no_extension_match" [2020-09-13 07:24:58] NOTICE[1239][C-00002e33] chan_sip.c: Call from '' (103.145.13.201:61932) to extension '011442037694017' rejected because extension not found in context 'public'. [2020-09-13 07:24:58] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-13T07:24:58.584-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442037694017",SessionID="0x7f4d481972d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/U ... |
2020-09-13 19:37:54 |
| 50.201.12.90 | attack | Unauthorized connection attempt from IP address 50.201.12.90 on Port 445(SMB) |
2020-09-13 20:11:37 |
| 103.219.112.31 | attackbots | Port scan: Attack repeated for 24 hours |
2020-09-13 19:53:52 |
| 189.210.53.41 | attackspam | Automatic report - Port Scan Attack |
2020-09-13 19:46:16 |
| 185.51.201.115 | attackspambots | Time: Sun Sep 13 11:41:03 2020 +0000 IP: 185.51.201.115 (IR/Iran/185.51.201.115.shahrad.net) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 13 11:31:38 hosting sshd[20144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.51.201.115 user=root Sep 13 11:31:40 hosting sshd[20144]: Failed password for root from 185.51.201.115 port 44326 ssh2 Sep 13 11:37:10 hosting sshd[20615]: Invalid user abhie143 from 185.51.201.115 port 34850 Sep 13 11:37:13 hosting sshd[20615]: Failed password for invalid user abhie143 from 185.51.201.115 port 34850 ssh2 Sep 13 11:40:59 hosting sshd[20960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.51.201.115 user=root |
2020-09-13 20:12:37 |
| 47.56.234.187 | attackspam | 47.56.234.187 - - [12/Sep/2020:10:48:26 -0600] "GET /xmlrpc.php HTTP/1.1" 404 6161 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" ... |
2020-09-13 20:00:47 |
| 192.241.182.13 | attackbotsspam | Sep 13 12:02:49 sip sshd[1583257]: Failed password for invalid user ethos from 192.241.182.13 port 55506 ssh2 Sep 13 12:10:49 sip sshd[1583270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.182.13 user=root Sep 13 12:10:51 sip sshd[1583270]: Failed password for root from 192.241.182.13 port 34308 ssh2 ... |
2020-09-13 20:01:17 |
| 190.129.204.242 | attackspambots | 1599930013 - 09/12/2020 19:00:13 Host: 190.129.204.242/190.129.204.242 Port: 445 TCP Blocked |
2020-09-13 20:10:43 |
| 109.125.176.135 | attackbotsspam | IP 109.125.176.135 attacked honeypot on port: 8080 at 9/12/2020 9:48:46 AM |
2020-09-13 19:36:33 |
| 51.75.207.61 | attackbotsspam | detected by Fail2Ban |
2020-09-13 19:55:20 |
| 104.140.188.34 | attack | TCP port : 3389 |
2020-09-13 19:59:26 |
| 2402:1f00:8101:4:: | attackspam | Automatically reported by fail2ban report script (mx1) |
2020-09-13 19:38:38 |
| 115.99.102.4 | attackbotsspam | port scan and connect, tcp 23 (telnet) |
2020-09-13 19:43:54 |
| 106.13.190.84 | attackbotsspam | Sep 13 05:44:10 Tower sshd[27428]: Connection from 106.13.190.84 port 54320 on 192.168.10.220 port 22 rdomain "" Sep 13 05:44:19 Tower sshd[27428]: Failed password for root from 106.13.190.84 port 54320 ssh2 Sep 13 05:44:19 Tower sshd[27428]: Received disconnect from 106.13.190.84 port 54320:11: Bye Bye [preauth] Sep 13 05:44:19 Tower sshd[27428]: Disconnected from authenticating user root 106.13.190.84 port 54320 [preauth] |
2020-09-13 19:49:16 |
| 129.28.185.31 | attackbots | DATE:2020-09-13 13:25:46,IP:129.28.185.31,MATCHES:11,PORT:ssh |
2020-09-13 19:42:09 |