City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.61.33.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59956
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.61.33.34. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020400 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 16:38:30 CST 2025
;; MSG SIZE rcvd: 105Host 34.33.61.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 34.33.61.138.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.209.97.30 | attack | 2019-09-22 23:36:50,205 fail2ban.actions [818]: NOTICE [sshd] Ban 134.209.97.30 2019-09-23 02:42:41,521 fail2ban.actions [818]: NOTICE [sshd] Ban 134.209.97.30 2019-09-23 05:49:13,704 fail2ban.actions [818]: NOTICE [sshd] Ban 134.209.97.30 ... |
2019-10-03 18:29:17 |
| 208.187.167.74 | attack | Oct 1 00:18:51 srv1 postfix/smtpd[28530]: connect from five.onvacationnow.com[208.187.167.74] Oct 1 00:18:54 srv1 postfix/smtpd[29092]: connect from five.onvacationnow.com[208.187.167.74] Oct x@x Oct 1 00:18:57 srv1 postfix/smtpd[28530]: disconnect from five.onvacationnow.com[208.187.167.74] Oct x@x Oct 1 00:19:00 srv1 postfix/smtpd[29092]: disconnect from five.onvacationnow.com[208.187.167.74] Oct 1 00:19:18 srv1 postfix/smtpd[29092]: connect from five.onvacationnow.com[208.187.167.74] Oct x@x Oct 1 00:19:23 srv1 postfix/smtpd[29092]: disconnect from five.onvacationnow.com[208.187.167.74] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=208.187.167.74 |
2019-10-03 19:05:00 |
| 121.12.151.250 | attack | $f2bV_matches |
2019-10-03 19:06:12 |
| 128.199.95.60 | attack | Oct 3 00:15:55 auw2 sshd\[32117\]: Invalid user apl from 128.199.95.60 Oct 3 00:15:55 auw2 sshd\[32117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.95.60 Oct 3 00:15:56 auw2 sshd\[32117\]: Failed password for invalid user apl from 128.199.95.60 port 57184 ssh2 Oct 3 00:21:58 auw2 sshd\[32654\]: Invalid user h from 128.199.95.60 Oct 3 00:21:58 auw2 sshd\[32654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.95.60 |
2019-10-03 18:37:51 |
| 134.209.114.189 | attackspam | 2019-08-21 05:49:12,832 fail2ban.actions [878]: NOTICE [sshd] Ban 134.209.114.189 2019-08-21 08:56:38,481 fail2ban.actions [878]: NOTICE [sshd] Ban 134.209.114.189 2019-08-21 12:02:32,598 fail2ban.actions [878]: NOTICE [sshd] Ban 134.209.114.189 ... |
2019-10-03 19:05:47 |
| 139.59.17.118 | attack | Oct 3 06:52:46 MK-Soft-VM5 sshd[11427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.17.118 Oct 3 06:52:47 MK-Soft-VM5 sshd[11427]: Failed password for invalid user 123456 from 139.59.17.118 port 60456 ssh2 ... |
2019-10-03 18:51:50 |
| 197.96.136.91 | attack | Automatic report - Banned IP Access |
2019-10-03 18:52:43 |
| 79.137.72.121 | attackspambots | Oct 3 11:07:48 SilenceServices sshd[20822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.72.121 Oct 3 11:07:49 SilenceServices sshd[20822]: Failed password for invalid user system from 79.137.72.121 port 45774 ssh2 Oct 3 11:12:10 SilenceServices sshd[22043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.72.121 |
2019-10-03 18:50:47 |
| 178.62.237.38 | attackspambots | Oct 3 10:18:59 venus sshd\[13871\]: Invalid user pfmusr from 178.62.237.38 port 51280 Oct 3 10:18:59 venus sshd\[13871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.237.38 Oct 3 10:19:01 venus sshd\[13871\]: Failed password for invalid user pfmusr from 178.62.237.38 port 51280 ssh2 ... |
2019-10-03 18:40:13 |
| 118.89.247.74 | attackspambots | Oct 3 12:52:14 v22018076622670303 sshd\[20074\]: Invalid user nhlonipho from 118.89.247.74 port 55484 Oct 3 12:52:14 v22018076622670303 sshd\[20074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.247.74 Oct 3 12:52:17 v22018076622670303 sshd\[20074\]: Failed password for invalid user nhlonipho from 118.89.247.74 port 55484 ssh2 ... |
2019-10-03 18:57:23 |
| 101.173.33.134 | attackspam | Oct 1 10:48:45 keyhelp sshd[3612]: Invalid user ts3server from 101.173.33.134 Oct 1 10:48:45 keyhelp sshd[3612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.173.33.134 Oct 1 10:48:46 keyhelp sshd[3612]: Failed password for invalid user ts3server from 101.173.33.134 port 36718 ssh2 Oct 1 10:48:46 keyhelp sshd[3612]: Received disconnect from 101.173.33.134 port 36718:11: Bye Bye [preauth] Oct 1 10:48:46 keyhelp sshd[3612]: Disconnected from 101.173.33.134 port 36718 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=101.173.33.134 |
2019-10-03 18:39:50 |
| 106.12.27.130 | attack | Sep 30 16:55:43 xxx sshd[9328]: Invalid user adm from 106.12.27.130 port 46730 Sep 30 16:55:43 xxx sshd[9328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.27.130 Sep 30 16:55:44 xxx sshd[9328]: Failed password for invalid user adm from 106.12.27.130 port 46730 ssh2 Sep 30 16:55:45 xxx sshd[9328]: Received disconnect from 106.12.27.130 port 46730:11: Bye Bye [preauth] Sep 30 16:55:45 xxx sshd[9328]: Disconnected from 106.12.27.130 port 46730 [preauth] Sep 30 17:21:32 xxx sshd[11342]: Invalid user admin from 106.12.27.130 port 54412 Sep 30 17:21:32 xxx sshd[11342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.27.130 Sep 30 17:21:34 xxx sshd[11342]: Failed password for invalid user admin from 106.12.27.130 port 54412 ssh2 Sep 30 17:21:37 xxx sshd[11342]: Received disconnect from 106.12.27.130 port 54412:11: Bye Bye [preauth] Sep 30 17:21:37 xxx sshd[11342]: Disconnected fro........ ------------------------------- |
2019-10-03 18:45:05 |
| 177.19.181.10 | attackbotsspam | Oct 3 12:35:14 SilenceServices sshd[12711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.19.181.10 Oct 3 12:35:16 SilenceServices sshd[12711]: Failed password for invalid user aguinsky from 177.19.181.10 port 52608 ssh2 Oct 3 12:39:58 SilenceServices sshd[14053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.19.181.10 |
2019-10-03 18:58:37 |
| 138.197.162.28 | attack | *Port Scan* detected from 138.197.162.28 (CA/Canada/-). 4 hits in the last 95 seconds |
2019-10-03 18:42:44 |
| 95.31.13.106 | attackspam | postfix (unknown user, SPF fail or relay access denied) |
2019-10-03 18:26:46 |