City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.239.83.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14555
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.239.83.57. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025062800 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 28 20:56:46 CST 2025
;; MSG SIZE rcvd: 106Host 57.83.239.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 57.83.239.139.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 174.53.37.247 | attackspambots | Repeated brute force against a port |
2019-07-08 08:04:56 |
| 62.234.77.136 | attackbotsspam | Jul 1 20:37:32 l01 sshd[812209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.77.136 user=r.r Jul 1 20:37:34 l01 sshd[812209]: Failed password for r.r from 62.234.77.136 port 53121 ssh2 Jul 1 20:37:37 l01 sshd[812220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.77.136 user=r.r Jul 1 20:37:38 l01 sshd[812220]: Failed password for r.r from 62.234.77.136 port 55116 ssh2 Jul 1 20:37:40 l01 sshd[812223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.77.136 user=r.r Jul 1 20:37:42 l01 sshd[812223]: Failed password for r.r from 62.234.77.136 port 57439 ssh2 Jul 1 20:37:44 l01 sshd[812229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.77.136 user=r.r Jul 1 20:37:46 l01 sshd[812229]: Failed password for r.r from 62.234.77.136 port 59581 ssh2 Jul 1 20:37:48 l01 sshd[812........ ------------------------------- |
2019-07-08 08:32:46 |
| 206.189.38.181 | attack | Jun 30 20:04:13 vpxxxxxxx22308 sshd[15251]: Invalid user admin from 206.189.38.181 Jun 30 20:04:13 vpxxxxxxx22308 sshd[15253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.38.181 user=r.r Jun 30 20:04:13 vpxxxxxxx22308 sshd[15251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.38.181 Jun 30 20:04:13 vpxxxxxxx22308 sshd[15252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.38.181 user=r.r Jun 30 20:04:14 vpxxxxxxx22308 sshd[15253]: Failed password for r.r from 206.189.38.181 port 46600 ssh2 Jun 30 20:04:15 vpxxxxxxx22308 sshd[15251]: Failed password for invalid user admin from 206.189.38.181 port 46604 ssh2 Jun 30 20:04:15 vpxxxxxxx22308 sshd[15252]: Failed password for r.r from 206.189.38.181 port 46602 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=206.189.38.181 |
2019-07-08 07:49:23 |
| 49.66.133.191 | attack | Jul 3 13:38:13 riskplan-s sshd[2175]: Invalid user gentry from 49.66.133.191 Jul 3 13:38:13 riskplan-s sshd[2175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.66.133.191 Jul 3 13:38:14 riskplan-s sshd[2175]: Failed password for invalid user gentry from 49.66.133.191 port 25349 ssh2 Jul 3 13:38:15 riskplan-s sshd[2175]: Received disconnect from 49.66.133.191: 11: Bye Bye [preauth] Jul 3 13:41:18 riskplan-s sshd[2382]: Invalid user cloud from 49.66.133.191 Jul 3 13:41:18 riskplan-s sshd[2382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.66.133.191 Jul 3 13:41:19 riskplan-s sshd[2382]: Failed password for invalid user cloud from 49.66.133.191 port 24855 ssh2 Jul 3 13:41:20 riskplan-s sshd[2382]: Received disconnect from 49.66.133.191: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.66.133.191 |
2019-07-08 08:11:44 |
| 18.219.67.58 | attack | Jun 26 01:17:15 localhost postfix/smtpd[10308]: disconnect from em3-18-219-67-58.us-east-2.compute.amazonaws.com[18.219.67.58] ehlo=1 quhostname=1 commands=2 Jun 26 01:17:16 localhost postfix/smtpd[10308]: disconnect from em3-18-219-67-58.us-east-2.compute.amazonaws.com[18.219.67.58] ehlo=1 quhostname=1 commands=2 Jun 26 01:17:17 localhost postfix/smtpd[10308]: disconnect from em3-18-219-67-58.us-east-2.compute.amazonaws.com[18.219.67.58] ehlo=1 quhostname=1 commands=2 Jun 26 01:17:18 localhost postfix/smtpd[10308]: disconnect from em3-18-219-67-58.us-east-2.compute.amazonaws.com[18.219.67.58] ehlo=1 quhostname=1 commands=2 Jun 26 01:17:19 localhost postfix/smtpd[10308]: disconnect from em3-18-219-67-58.us-east-2.compute.amazonaws.com[18.219.67.58] ehlo=1 quhostname=1 commands=2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=18.219.67.58 |
2019-07-08 07:58:22 |
| 181.52.240.91 | attackspam | proto=tcp . spt=45955 . dpt=25 . (listed on Blocklist de Jul 07) (18) |
2019-07-08 07:56:08 |
| 35.247.216.228 | attack | Jun 25 15:46:31 localhost postfix/smtpd[13915]: disconnect from 228.216.247.35.bc.googleusercontent.com[35.247.216.228] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Jun 26 01:08:49 localhost postfix/smtpd[4311]: disconnect from 228.216.247.35.bc.googleusercontent.com[35.247.216.228] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Jun 26 01:35:32 localhost postfix/smtpd[25772]: disconnect from 228.216.247.35.bc.googleusercontent.com[35.247.216.228] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Jun 26 01:57:58 localhost postfix/smtpd[14259]: disconnect from 228.216.247.35.bc.googleusercontent.com[35.247.216.228] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Jun 26 02:21:23 localhost postfix/smtpd[3096]: disconnect from 228.216.247.35.bc.googleusercontent.com[35.247.216.228] ehlo=1 auth=0/1 quhostname=1 commands=2/3 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=35.247.216.228 |
2019-07-08 08:08:02 |
| 102.165.35.243 | attackspam | Jul 4 07:28:08 srv00 sshd[12045]: fatal: Unable to negotiate whostnameh 102.165.35.243 port 3842: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jul 4 07:28:11 srv00 sshd[12047]: fatal: Unable to negotiate whostnameh 102.165.35.243 port 4000: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jul 4 07:28:14 srv00 sshd[12049]: fatal: Unable to negotiate whostnameh 102.165.35.243 port 4167: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jul 4 07:28:17 srv00 sshd[12051]: fatal: Unable to negotiate whostnameh 102.165.35.243 port 4339: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-gro........ ------------------------------ |
2019-07-08 08:26:48 |
| 106.12.78.161 | attackbotsspam | Jul 7 23:14:01 unicornsoft sshd\[20648\]: Invalid user xl from 106.12.78.161 Jul 7 23:14:01 unicornsoft sshd\[20648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.78.161 Jul 7 23:14:03 unicornsoft sshd\[20648\]: Failed password for invalid user xl from 106.12.78.161 port 52006 ssh2 |
2019-07-08 07:47:16 |
| 167.99.251.18 | attackbotsspam | Jul 4 06:52:19 our-server-hostname postfix/smtpd[18623]: connect from unknown[167.99.251.18] Jul 4 06:52:20 our-server-hostname postfix/smtpd[18623]: NOQUEUE: reject: RCPT from unknown[167.99.251.18]: 504 5.5.2 |
2019-07-08 08:30:11 |
| 138.68.178.64 | attackspambots | $f2bV_matches |
2019-07-08 07:48:53 |
| 142.44.152.30 | attackbots | Lines containing failures of 142.44.152.30 Jul 2 11:20:43 srv02 sshd[366]: Invalid user admin from 142.44.152.30 port 51972 Jul 2 11:20:43 srv02 sshd[366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.152.30 Jul 2 11:20:45 srv02 sshd[366]: Failed password for invalid user admin from 142.44.152.30 port 51972 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=142.44.152.30 |
2019-07-08 08:12:03 |
| 104.248.211.180 | attackspam | Jul 8 02:15:00 srv206 sshd[18009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.211.180 user=root Jul 8 02:15:03 srv206 sshd[18009]: Failed password for root from 104.248.211.180 port 46954 ssh2 ... |
2019-07-08 08:30:45 |
| 95.177.143.54 | attack | Jul 5 09:33:02 our-server-hostname postfix/smtpd[13025]: connect from unknown[95.177.143.54] Jul 5 09:33:03 our-server-hostname postfix/smtpd[13025]: NOQUEUE: reject: RCPT from unknown[95.177.143.54]: 504 5.5.2 |
2019-07-08 08:14:23 |
| 51.77.242.176 | attackbotsspam | web exploits ... |
2019-07-08 08:27:57 |