City: Rosebery
Region: New South Wales
Country: Australia
Internet Service Provider: Telstra
Hostname: unknown
Organization: Telstra Corporation Ltd
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.130.42.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31457
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.130.42.145. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019051600 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu May 16 19:00:23 CST 2019
;; MSG SIZE rcvd: 118
145.42.130.139.in-addr.arpa domain name pointer Bundle-Ether1051-187.fli-edge901.adelaide.telstra.net.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
145.42.130.139.in-addr.arpa name = Bundle-Ether1051-187.fli-edge901.adelaide.telstra.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 157.230.242.76 | attackbots | Auto reported by IDS |
2020-03-25 09:08:25 |
| 217.182.67.242 | attackspambots | Invalid user xt from 217.182.67.242 port 35881 |
2020-03-25 09:13:15 |
| 188.170.53.162 | attackspam | $f2bV_matches | Triggered by Fail2Ban at Vostok web server |
2020-03-25 09:07:57 |
| 184.82.197.171 | attack | Mar 23 21:40:40 gutwein sshd[20085]: Address 184.82.197.171 maps to 184-82-197-0.24.public.sila1-bcr01.myaisfibre.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Mar 23 21:40:42 gutwein sshd[20085]: Failed password for invalid user guest1 from 184.82.197.171 port 56292 ssh2 Mar 23 21:40:42 gutwein sshd[20085]: Received disconnect from 184.82.197.171: 11: Bye Bye [preauth] Mar 23 21:45:03 gutwein sshd[20975]: Address 184.82.197.171 maps to 184-82-197-0.24.public.sila1-bcr01.myaisfibre.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Mar 23 21:45:06 gutwein sshd[20975]: Failed password for invalid user web from 184.82.197.171 port 63213 ssh2 Mar 23 21:45:06 gutwein sshd[20975]: Received disconnect from 184.82.197.171: 11: Bye Bye [preauth] Mar 23 21:49:28 gutwein sshd[21787]: Address 184.82.197.171 maps to 184-82-197-0.24.public.sila1-bcr01.myaisfibre.com, but this does not map back to the address - POSSIBLE BREAK-IN ........ ------------------------------- |
2020-03-25 09:34:59 |
| 62.210.205.197 | attackspambots | Invalid user lisabona from 62.210.205.197 port 33988 |
2020-03-25 09:19:59 |
| 49.72.210.234 | attackbotsspam | Mar 24 02:12:23 w sshd[29788]: Did not receive identification string from 49.72.210.234 Mar 24 02:15:03 w sshd[29917]: reveeclipse mapping checking getaddrinfo for 234.210.72.49.broad.sz.js.dynamic.163data.com.cn [49.72.210.234] failed - POSSIBLE BREAK-IN ATTEMPT! Mar 24 02:15:03 w sshd[29917]: Invalid user clinton from 49.72.210.234 Mar 24 02:15:03 w sshd[29917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.72.210.234 Mar 24 02:15:05 w sshd[29917]: Failed password for invalid user clinton from 49.72.210.234 port 59856 ssh2 Mar 24 02:15:05 w sshd[29917]: Received disconnect from 49.72.210.234: 11: Bye Bye [preauth] Mar 24 02:17:41 w sshd[29957]: reveeclipse mapping checking getaddrinfo for 234.210.72.49.broad.sz.js.dynamic.163data.com.cn [49.72.210.234] failed - POSSIBLE BREAK-IN ATTEMPT! Mar 24 02:17:41 w sshd[29957]: Invalid user tonya from 49.72.210.234 Mar 24 02:17:41 w sshd[29957]: pam_unix(sshd:auth): authentication f........ ------------------------------- |
2020-03-25 09:22:39 |
| 129.211.10.228 | attack | SSH Invalid Login |
2020-03-25 09:41:42 |
| 202.90.20.220 | attackspambots | Mar 25 01:48:23 vps sshd[796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.90.20.220 Mar 25 01:48:24 vps sshd[796]: Failed password for invalid user alaura from 202.90.20.220 port 52646 ssh2 Mar 25 01:51:52 vps sshd[1100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.90.20.220 ... |
2020-03-25 09:17:01 |
| 80.245.114.228 | attack | Mar 25 00:13:02 dev0-dcde-rnet sshd[4622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.245.114.228 Mar 25 00:13:03 dev0-dcde-rnet sshd[4622]: Failed password for invalid user default from 80.245.114.228 port 41664 ssh2 Mar 25 00:31:58 dev0-dcde-rnet sshd[5024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.245.114.228 |
2020-03-25 09:15:59 |
| 68.183.19.26 | attackspambots | SSH brute force attempt |
2020-03-25 09:08:57 |
| 106.13.70.63 | attackbotsspam | sshd jail - ssh hack attempt |
2020-03-25 09:34:34 |
| 144.217.136.227 | attack | Invalid user www from 144.217.136.227 port 53316 |
2020-03-25 09:34:10 |
| 211.20.26.61 | attackbotsspam | web-1 [ssh] SSH Attack |
2020-03-25 09:41:24 |
| 134.209.63.140 | attack | Mar 13 01:48:33 [snip] sshd[11453]: Invalid user qw from 134.209.63.140 port 46018 Mar 13 01:48:33 [snip] sshd[11453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.63.140 Mar 13 01:48:35 [snip] sshd[11453]: Failed password for invalid user qw from 134.209.63.140 port 46018 ssh2[...] |
2020-03-25 09:13:41 |
| 185.176.27.102 | attackbots | Mar 25 01:49:36 debian-2gb-nbg1-2 kernel: \[7356458.067893\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.102 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=55101 PROTO=TCP SPT=52788 DPT=7795 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-03-25 09:10:00 |