City: Bekasi
Region: West Java
Country: Indonesia
Internet Service Provider: unknown
Hostname: unknown
Organization: Linknet-Fastnet ASN
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.193.16.205
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19577
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.193.16.205. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019051300 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue May 14 00:35:54 CST 2019
;; MSG SIZE rcvd: 118
205.16.193.139.in-addr.arpa domain name pointer fm-dyn-139-193-16-205.fast.net.id.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
205.16.193.139.in-addr.arpa name = fm-dyn-139-193-16-205.fast.net.id.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.140.192 | attack | [munged]::443 142.93.140.192 - - [17/Aug/2019:04:53:39 +0200] "POST /[munged]: HTTP/1.1" 200 6177 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:61.0.1) Gecko/20120101 Firefox/61.0.1" [munged]::443 142.93.140.192 - - [17/Aug/2019:04:53:41 +0200] "POST /[munged]: HTTP/1.1" 200 6183 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:61.0.1) Gecko/20120101 Firefox/61.0.1" |
2019-08-17 11:17:02 |
| 176.95.135.3 | attack | Aug 17 04:43:41 host sshd\[55286\]: Invalid user ubnt from 176.95.135.3 port 35960 Aug 17 04:43:43 host sshd\[55286\]: Failed password for invalid user ubnt from 176.95.135.3 port 35960 ssh2 ... |
2019-08-17 11:03:17 |
| 193.253.105.165 | attackbots | 2019-08-17T02:27:28.051542abusebot-5.cloudsearch.cf sshd\[19146\]: Invalid user tim from 193.253.105.165 port 20025 |
2019-08-17 10:51:30 |
| 185.104.28.127 | attack | WordPress brute force |
2019-08-17 11:04:57 |
| 201.208.9.197 | attack | Unauthorized connection attempt from IP address 201.208.9.197 on Port 445(SMB) |
2019-08-17 11:20:26 |
| 36.224.212.246 | attackbotsspam | : |
2019-08-17 10:53:13 |
| 173.237.189.21 | attackspam | WordPress brute force |
2019-08-17 11:06:51 |
| 198.245.49.191 | attack | WordPress brute force |
2019-08-17 10:50:42 |
| 134.209.40.67 | attackbots | Aug 17 00:14:45 [munged] sshd[693]: Invalid user kasch from 134.209.40.67 port 52662 Aug 17 00:14:45 [munged] sshd[693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.40.67 |
2019-08-17 11:09:07 |
| 5.234.219.61 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-16 18:49:42,868 INFO [amun_request_handler] PortScan Dete5.234.219.61) |
2019-08-17 10:48:00 |
| 222.186.42.163 | attackspambots | Aug 17 05:16:27 dcd-gentoo sshd[547]: User root from 222.186.42.163 not allowed because none of user's groups are listed in AllowGroups Aug 17 05:16:30 dcd-gentoo sshd[547]: error: PAM: Authentication failure for illegal user root from 222.186.42.163 Aug 17 05:16:27 dcd-gentoo sshd[547]: User root from 222.186.42.163 not allowed because none of user's groups are listed in AllowGroups Aug 17 05:16:30 dcd-gentoo sshd[547]: error: PAM: Authentication failure for illegal user root from 222.186.42.163 Aug 17 05:16:27 dcd-gentoo sshd[547]: User root from 222.186.42.163 not allowed because none of user's groups are listed in AllowGroups Aug 17 05:16:30 dcd-gentoo sshd[547]: error: PAM: Authentication failure for illegal user root from 222.186.42.163 Aug 17 05:16:30 dcd-gentoo sshd[547]: Failed keyboard-interactive/pam for invalid user root from 222.186.42.163 port 15142 ssh2 ... |
2019-08-17 11:17:45 |
| 195.154.223.226 | attackspam | Multiple SSH auth failures recorded by fail2ban |
2019-08-17 11:25:46 |
| 3.0.70.93 | attack | WordPress brute force |
2019-08-17 10:48:16 |
| 125.92.223.150 | attackspam | Aug 17 04:53:02 datentool sshd[24064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.92.223.150 user=r.r Aug 17 04:53:05 datentool sshd[24064]: Failed password for r.r from 125.92.223.150 port 56318 ssh2 Aug 17 04:53:07 datentool sshd[24064]: Failed password for r.r from 125.92.223.150 port 56318 ssh2 Aug 17 04:53:09 datentool sshd[24064]: Failed password for r.r from 125.92.223.150 port 56318 ssh2 Aug 17 04:53:10 datentool sshd[24064]: Failed password for r.r from 125.92.223.150 port 56318 ssh2 Aug 17 04:53:12 datentool sshd[24064]: Failed password for r.r from 125.92.223.150 port 56318 ssh2 Aug 17 04:53:15 datentool sshd[24064]: Failed password for r.r from 125.92.223.150 port 56318 ssh2 Aug 17 04:53:15 datentool sshd[24064]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.92.223.150 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.92.223.150 |
2019-08-17 11:07:07 |
| 125.105.81.196 | attackspambots | WordPress brute force |
2019-08-17 11:23:55 |