City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.155.58.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 755
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.155.58.158. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022703 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 11:02:25 CST 2025
;; MSG SIZE rcvd: 107Host 158.58.155.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 158.58.155.139.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 67.211.208.83 | attack | SSH auth scanning - multiple failed logins |
2020-09-16 20:19:39 |
| 62.234.193.119 | attackspambots | Sep 16 10:03:56 localhost sshd[936881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.193.119 Sep 16 10:03:56 localhost sshd[936881]: Invalid user oracle from 62.234.193.119 port 49198 Sep 16 10:03:58 localhost sshd[936881]: Failed password for invalid user oracle from 62.234.193.119 port 49198 ssh2 Sep 16 10:04:48 localhost sshd[938654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.193.119 user=root Sep 16 10:04:50 localhost sshd[938654]: Failed password for root from 62.234.193.119 port 59016 ssh2 ... |
2020-09-16 20:22:43 |
| 49.51.90.173 | attackspambots | 49.51.90.173 (CA/Canada/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 16 06:39:37 server4 sshd[9759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.183.151 user=root Sep 16 06:40:18 server4 sshd[10499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.185.246 user=root Sep 16 06:39:40 server4 sshd[9759]: Failed password for root from 152.136.183.151 port 59260 ssh2 Sep 16 06:40:20 server4 sshd[10499]: Failed password for root from 129.211.185.246 port 42676 ssh2 Sep 16 06:40:23 server4 sshd[10546]: Failed password for root from 51.77.140.36 port 34102 ssh2 Sep 16 06:41:39 server4 sshd[11623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.90.173 user=root IP Addresses Blocked: 152.136.183.151 (CN/China/-) 129.211.185.246 (CN/China/-) 51.77.140.36 (FR/France/-) |
2020-09-16 19:27:23 |
| 212.64.95.187 | attack | Sep 16 07:15:02 Tower sshd[6429]: Connection from 212.64.95.187 port 40004 on 192.168.10.220 port 22 rdomain "" Sep 16 07:15:03 Tower sshd[6429]: Failed password for root from 212.64.95.187 port 40004 ssh2 Sep 16 07:15:04 Tower sshd[6429]: Received disconnect from 212.64.95.187 port 40004:11: Bye Bye [preauth] Sep 16 07:15:04 Tower sshd[6429]: Disconnected from authenticating user root 212.64.95.187 port 40004 [preauth] |
2020-09-16 20:35:20 |
| 91.108.30.116 | attackspambots | Unauthorized admin access - /admin/ |
2020-09-16 20:38:13 |
| 49.233.79.78 | attackspam | Sep 16 08:06:38 prod4 sshd\[6890\]: Invalid user alice from 49.233.79.78 Sep 16 08:06:40 prod4 sshd\[6890\]: Failed password for invalid user alice from 49.233.79.78 port 48736 ssh2 Sep 16 08:12:03 prod4 sshd\[8976\]: Invalid user default from 49.233.79.78 ... |
2020-09-16 20:16:38 |
| 59.72.122.148 | attackspambots | $f2bV_matches |
2020-09-16 19:29:42 |
| 191.53.238.139 | attack | Sep 15 18:22:36 mail.srvfarm.net postfix/smtps/smtpd[2819940]: warning: unknown[191.53.238.139]: SASL PLAIN authentication failed: Sep 15 18:22:37 mail.srvfarm.net postfix/smtps/smtpd[2819940]: lost connection after AUTH from unknown[191.53.238.139] Sep 15 18:23:51 mail.srvfarm.net postfix/smtpd[2805906]: warning: unknown[191.53.238.139]: SASL PLAIN authentication failed: Sep 15 18:23:52 mail.srvfarm.net postfix/smtpd[2805906]: lost connection after AUTH from unknown[191.53.238.139] Sep 15 18:26:34 mail.srvfarm.net postfix/smtpd[2805902]: warning: unknown[191.53.238.139]: SASL PLAIN authentication failed: |
2020-09-16 19:36:24 |
| 164.90.217.12 | attack | Invalid user admin from 164.90.217.12 port 11394 |
2020-09-16 20:21:40 |
| 106.54.242.239 | attack | Sep 16 13:21:41 server sshd[27306]: Failed password for invalid user user02 from 106.54.242.239 port 48676 ssh2 Sep 16 13:26:57 server sshd[29326]: Failed password for invalid user med from 106.54.242.239 port 60556 ssh2 Sep 16 13:32:22 server sshd[31336]: Failed password for root from 106.54.242.239 port 44206 ssh2 |
2020-09-16 20:24:49 |
| 49.205.9.91 | attack | Unauthorized connection attempt from IP address 49.205.9.91 on Port 445(SMB) |
2020-09-16 20:26:03 |
| 191.53.196.62 | attackbotsspam | Sep 15 18:24:11 mail.srvfarm.net postfix/smtpd[2805914]: warning: unknown[191.53.196.62]: SASL PLAIN authentication failed: Sep 15 18:24:12 mail.srvfarm.net postfix/smtpd[2805914]: lost connection after AUTH from unknown[191.53.196.62] Sep 15 18:28:50 mail.srvfarm.net postfix/smtps/smtpd[2818213]: warning: unknown[191.53.196.62]: SASL PLAIN authentication failed: Sep 15 18:28:51 mail.srvfarm.net postfix/smtps/smtpd[2818213]: lost connection after AUTH from unknown[191.53.196.62] Sep 15 18:29:02 mail.srvfarm.net postfix/smtpd[2820536]: warning: unknown[191.53.196.62]: SASL PLAIN authentication failed: |
2020-09-16 19:37:40 |
| 193.169.253.48 | attackspam | Sep 16 11:55:07 mail postfix/smtpd\[23206\]: warning: unknown\[193.169.253.48\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 16 12:09:01 mail postfix/smtpd\[23570\]: warning: unknown\[193.169.253.48\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 16 12:22:33 mail postfix/smtpd\[24327\]: warning: unknown\[193.169.253.48\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 16 13:02:54 mail postfix/smtpd\[25974\]: warning: unknown\[193.169.253.48\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2020-09-16 19:35:49 |
| 45.129.122.155 | attackbots | Sep 15 19:01:11 vpn01 sshd[8409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.129.122.155 Sep 15 19:01:12 vpn01 sshd[8409]: Failed password for invalid user tit0nich from 45.129.122.155 port 55567 ssh2 ... |
2020-09-16 20:39:24 |
| 179.209.88.230 | attackspam | Sep 16 10:52:56 scw-focused-cartwright sshd[30832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.209.88.230 Sep 16 10:52:59 scw-focused-cartwright sshd[30832]: Failed password for invalid user postgres from 179.209.88.230 port 57803 ssh2 |
2020-09-16 20:20:05 |