City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.148.52.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13238
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.148.52.9. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022700 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 27 18:04:15 CST 2025
;; MSG SIZE rcvd: 105Host 9.52.148.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 9.52.148.139.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.222.33.4 | attack | Oct 12 17:27:50 SilenceServices sshd[344]: Failed password for root from 92.222.33.4 port 51686 ssh2 Oct 12 17:32:17 SilenceServices sshd[1520]: Failed password for root from 92.222.33.4 port 34394 ssh2 |
2019-10-13 01:03:02 |
| 85.203.175.63 | attackspambots | Oct 12 17:13:40 server sshd\[21397\]: User root from 85.203.175.63 not allowed because listed in DenyUsers Oct 12 17:13:40 server sshd\[21397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.203.175.63 user=root Oct 12 17:13:41 server sshd\[21397\]: Failed password for invalid user root from 85.203.175.63 port 60741 ssh2 Oct 12 17:13:43 server sshd\[21397\]: Failed password for invalid user root from 85.203.175.63 port 60741 ssh2 Oct 12 17:13:45 server sshd\[21397\]: Failed password for invalid user root from 85.203.175.63 port 60741 ssh2 |
2019-10-13 01:29:26 |
| 207.55.248.16 | attackbotsspam | Automatic report - Banned IP Access |
2019-10-13 01:33:21 |
| 59.39.177.195 | attackbotsspam | Oct 12 13:07:41 web1 postfix/smtpd[31157]: warning: unknown[59.39.177.195]: SASL LOGIN authentication failed: authentication failure ... |
2019-10-13 01:13:28 |
| 109.194.54.126 | attackspam | Automatic report - Banned IP Access |
2019-10-13 01:15:34 |
| 204.17.56.42 | attackbots | Oct 12 16:14:37 vpn01 sshd[11727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.17.56.42 Oct 12 16:14:38 vpn01 sshd[11727]: Failed password for invalid user administrators from 204.17.56.42 port 56554 ssh2 ... |
2019-10-13 00:55:40 |
| 84.245.9.208 | attackbots | Automatic report - Port Scan Attack |
2019-10-13 00:56:28 |
| 165.22.228.10 | attack | Oct 12 18:26:44 bouncer sshd\[7572\]: Invalid user Vogue@2017 from 165.22.228.10 port 53136 Oct 12 18:26:44 bouncer sshd\[7572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.228.10 Oct 12 18:26:46 bouncer sshd\[7572\]: Failed password for invalid user Vogue@2017 from 165.22.228.10 port 53136 ssh2 ... |
2019-10-13 01:11:32 |
| 106.75.31.215 | attackbots | 2019-10-12T14:14:07.109528abusebot-5.cloudsearch.cf sshd\[24609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.31.215 user=root |
2019-10-13 01:18:28 |
| 51.255.39.143 | attack | Oct 12 19:10:16 SilenceServices sshd[28194]: Failed password for root from 51.255.39.143 port 58974 ssh2 Oct 12 19:14:04 SilenceServices sshd[29219]: Failed password for root from 51.255.39.143 port 42436 ssh2 |
2019-10-13 01:29:51 |
| 222.186.173.180 | attackspambots | Oct 12 17:19:00 *** sshd[2729]: User root from 222.186.173.180 not allowed because not listed in AllowUsers |
2019-10-13 01:26:09 |
| 37.82.9.79 | attack | Oct 12 15:41:19 durga sshd[710898]: Invalid user steven from 37.82.9.79 Oct 12 15:41:19 durga sshd[710898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.82.9.79 Oct 12 15:41:20 durga sshd[710898]: Failed password for invalid user steven from 37.82.9.79 port 25769 ssh2 Oct 12 15:41:21 durga sshd[710898]: Received disconnect from 37.82.9.79: 11: Bye Bye [preauth] Oct 12 15:44:02 durga sshd[711380]: Invalid user ftpuser from 37.82.9.79 Oct 12 15:44:02 durga sshd[711380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.82.9.79 Oct 12 15:44:04 durga sshd[711380]: Failed password for invalid user ftpuser from 37.82.9.79 port 22717 ssh2 Oct 12 15:44:04 durga sshd[711380]: Received disconnect from 37.82.9.79: 11: Bye Bye [preauth] Oct 12 15:44:15 durga sshd[711413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.82.9.79 user=r.r Oct 12 15:44:17........ ------------------------------- |
2019-10-13 01:06:45 |
| 222.186.180.223 | attack | Oct 12 19:13:13 SilenceServices sshd[28960]: Failed password for root from 222.186.180.223 port 28184 ssh2 Oct 12 19:13:17 SilenceServices sshd[28960]: Failed password for root from 222.186.180.223 port 28184 ssh2 Oct 12 19:13:22 SilenceServices sshd[28960]: Failed password for root from 222.186.180.223 port 28184 ssh2 Oct 12 19:13:30 SilenceServices sshd[28960]: error: maximum authentication attempts exceeded for root from 222.186.180.223 port 28184 ssh2 [preauth] |
2019-10-13 01:14:15 |
| 45.82.153.131 | attackspam | Tries to hack into email accounts |
2019-10-13 01:18:00 |
| 177.11.95.66 | attackbotsspam | Oct 7 07:59:00 our-server-hostname postfix/smtpd[15495]: connect from unknown[177.11.95.66] Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct 7 08:04:12 our-server-hostname postfix/smtpd[15495]: servereout after RCPT from unknown[177.11.95.66] Oct 7 08:04:12 our-server-hostname postfix/smtpd[15495]: disconnect from unknown[177.11.95.66] Oct 7 08:38:54 our-server-hostname postfix/smtpd[15882]: connect from unknown[177.11.95.66] Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct 7 08:39:06 our-server-hostname postfix/smtpd[15882]: lost connection after RCPT from unknown[177.11.95.66] Oct 7 08:39:06 our-server-hostname postfix/smtpd[15882]: disconnect from unknown[177.11.95.66] Oct 7 09:34:57 our-server-hostname postfix/smtpd[31196]: connect from unknown[177.11.95.66] Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@........ ------------------------------- |
2019-10-13 01:03:34 |