City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.235.6.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44582
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.235.6.12. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020400 1800 900 604800 86400
;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 15:40:56 CST 2025
;; MSG SIZE rcvd: 105Host 12.6.235.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 12.6.235.139.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 154.221.19.204 | attackspam | Invalid user user2 from 154.221.19.204 port 49019 |
2020-10-12 07:36:16 |
| 173.15.85.9 | attack | Oct 11 19:23:28 firewall sshd[28201]: Invalid user ito from 173.15.85.9 Oct 11 19:23:30 firewall sshd[28201]: Failed password for invalid user ito from 173.15.85.9 port 45537 ssh2 Oct 11 19:27:54 firewall sshd[28375]: Invalid user ftp_user from 173.15.85.9 ... |
2020-10-12 07:20:32 |
| 49.235.35.65 | attack | Oct 12 01:24:48 pve1 sshd[4353]: Failed password for root from 49.235.35.65 port 35190 ssh2 Oct 12 01:33:31 pve1 sshd[8047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.35.65 ... |
2020-10-12 07:48:12 |
| 221.229.218.40 | attackspam | Brute force SMTP login attempted. ... |
2020-10-12 07:52:39 |
| 220.123.241.30 | attackbotsspam | Oct 11 11:30:23 pixelmemory sshd[3962613]: Failed password for invalid user hubert from 220.123.241.30 port 12498 ssh2 Oct 11 11:33:39 pixelmemory sshd[3984893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.123.241.30 user=root Oct 11 11:33:41 pixelmemory sshd[3984893]: Failed password for root from 220.123.241.30 port 9967 ssh2 Oct 11 11:36:57 pixelmemory sshd[3995002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.123.241.30 user=root Oct 11 11:36:59 pixelmemory sshd[3995002]: Failed password for root from 220.123.241.30 port 63929 ssh2 ... |
2020-10-12 07:43:35 |
| 106.13.42.140 | attack | Oct 11 22:12:43 ip-172-31-16-56 sshd\[26755\]: Invalid user ion from 106.13.42.140\ Oct 11 22:12:45 ip-172-31-16-56 sshd\[26755\]: Failed password for invalid user ion from 106.13.42.140 port 59816 ssh2\ Oct 11 22:15:55 ip-172-31-16-56 sshd\[26810\]: Invalid user oracle from 106.13.42.140\ Oct 11 22:15:57 ip-172-31-16-56 sshd\[26810\]: Failed password for invalid user oracle from 106.13.42.140 port 57116 ssh2\ Oct 11 22:19:12 ip-172-31-16-56 sshd\[26875\]: Invalid user jjonglee from 106.13.42.140\ |
2020-10-12 07:26:45 |
| 153.101.167.242 | attackspambots | Oct 11 19:35:01 ws24vmsma01 sshd[62273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.101.167.242 Oct 11 19:35:03 ws24vmsma01 sshd[62273]: Failed password for invalid user dyndns from 153.101.167.242 port 36834 ssh2 ... |
2020-10-12 07:28:49 |
| 218.92.0.172 | attackspambots | Oct 12 01:06:11 prod4 sshd\[15285\]: Failed password for root from 218.92.0.172 port 52058 ssh2 Oct 12 01:06:14 prod4 sshd\[15285\]: Failed password for root from 218.92.0.172 port 52058 ssh2 Oct 12 01:06:17 prod4 sshd\[15285\]: Failed password for root from 218.92.0.172 port 52058 ssh2 ... |
2020-10-12 07:35:08 |
| 185.220.101.8 | attack | Oct 11 21:22:51 XXXXXX sshd[58096]: Invalid user test from 185.220.101.8 port 3074 |
2020-10-12 07:33:15 |
| 134.209.189.230 | attack | 134.209.189.230 - - [17/Sep/2020:21:16:16 +0200] "GET /muieblackcat HTTP/1.1" 404 390 "-" "-" 134.209.189.230 - - [17/Sep/2020:21:16:16 +0200] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 390 "-" "-" 134.209.189.230 - - [17/Sep/2020:21:16:16 +0200] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 390 "-" "-" 134.209.189.230 - - [17/Sep/2020:21:16:16 +0200] "GET //pma/scripts/setup.php HTTP/1.1" 404 390 "-" "-" 134.209.189.230 - - [17/Sep/2020:21:16:16 +0200] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 390 "-" "-" ... |
2020-10-12 07:14:23 |
| 139.99.134.195 | attackbotsspam | GET /configuration.php-bak GET /configuration.php_bak GET /configuration.php.bak GET /configuration.bak GET /configuration.php_new GET /configuration.php.old GET /configuration.php.new GET /configuration.php_Old GET /configuration.php_old |
2020-10-12 07:31:56 |
| 42.194.159.233 | attack | Oct 8 08:23:33 cumulus sshd[23455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.194.159.233 user=r.r Oct 8 08:23:36 cumulus sshd[23455]: Failed password for r.r from 42.194.159.233 port 51848 ssh2 Oct 8 08:23:36 cumulus sshd[23455]: Received disconnect from 42.194.159.233 port 51848:11: Bye Bye [preauth] Oct 8 08:23:36 cumulus sshd[23455]: Disconnected from 42.194.159.233 port 51848 [preauth] Oct 8 08:28:02 cumulus sshd[23786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.194.159.233 user=r.r Oct 8 08:28:04 cumulus sshd[23786]: Failed password for r.r from 42.194.159.233 port 36950 ssh2 Oct 8 08:28:04 cumulus sshd[23786]: Received disconnect from 42.194.159.233 port 36950:11: Bye Bye [preauth] Oct 8 08:28:04 cumulus sshd[23786]: Disconnected from 42.194.159.233 port 36950 [preauth] Oct 8 08:32:01 cumulus sshd[24130]: pam_unix(sshd:auth): authentication failure; lognam........ ------------------------------- |
2020-10-12 07:30:21 |
| 212.70.149.20 | attackbotsspam | Oct 12 01:11:07 galaxy event: galaxy/lswi: smtp: cv@uni-potsdam.de [212.70.149.20] authentication failure using internet password Oct 12 01:11:31 galaxy event: galaxy/lswi: smtp: socks@uni-potsdam.de [212.70.149.20] authentication failure using internet password Oct 12 01:11:55 galaxy event: galaxy/lswi: smtp: schedule@uni-potsdam.de [212.70.149.20] authentication failure using internet password Oct 12 01:12:20 galaxy event: galaxy/lswi: smtp: vodafone@uni-potsdam.de [212.70.149.20] authentication failure using internet password Oct 12 01:12:44 galaxy event: galaxy/lswi: smtp: gamma@uni-potsdam.de [212.70.149.20] authentication failure using internet password ... |
2020-10-12 07:15:19 |
| 195.123.246.16 | attackbots | [N3.H3.VM3] Port Scanner Detected Blocked by UFW |
2020-10-12 07:25:20 |
| 191.36.200.147 | attackbotsspam | polres 191.36.200.147 [11/Oct/2020:04:15:20 "-" "POST /xmlrpc.php 200 459 191.36.200.147 [11/Oct/2020:11:46:08 "-" "POST /xmlrpc.php 200 459 191.36.200.147 [11/Oct/2020:12:46:23 "-" "POST /xmlrpc.php 200 490 |
2020-10-12 07:35:46 |