City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.247.105.144
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55255
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.247.105.144. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022602 1800 900 604800 86400
;; Query time: 31 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 27 08:49:22 CST 2025
;; MSG SIZE rcvd: 108Host 144.105.247.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 144.105.247.139.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.13.100.50 | attack | SSH Login Bruteforce |
2020-07-15 14:11:55 |
| 14.236.19.138 | attack | Port Scan ... |
2020-07-15 14:19:46 |
| 52.172.195.6 | attackbots | Jul 15 05:54:18 marvibiene sshd[22749]: Invalid user admin from 52.172.195.6 port 48834 Jul 15 05:54:18 marvibiene sshd[22749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.195.6 Jul 15 05:54:18 marvibiene sshd[22749]: Invalid user admin from 52.172.195.6 port 48834 Jul 15 05:54:21 marvibiene sshd[22749]: Failed password for invalid user admin from 52.172.195.6 port 48834 ssh2 ... |
2020-07-15 14:18:41 |
| 52.151.240.27 | attack | Jul 15 07:47:06 zooi sshd[28867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.151.240.27 Jul 15 07:47:09 zooi sshd[28867]: Failed password for invalid user admin from 52.151.240.27 port 29726 ssh2 ... |
2020-07-15 13:47:40 |
| 182.16.110.190 | attackspambots | Jul 15 06:06:28 Ubuntu-1404-trusty-64-minimal sshd\[2775\]: Invalid user oracle from 182.16.110.190 Jul 15 06:06:28 Ubuntu-1404-trusty-64-minimal sshd\[2775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.110.190 Jul 15 06:06:30 Ubuntu-1404-trusty-64-minimal sshd\[2775\]: Failed password for invalid user oracle from 182.16.110.190 port 50450 ssh2 Jul 15 06:23:22 Ubuntu-1404-trusty-64-minimal sshd\[11684\]: Invalid user santosh from 182.16.110.190 Jul 15 06:23:22 Ubuntu-1404-trusty-64-minimal sshd\[11684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.110.190 |
2020-07-15 13:50:33 |
| 132.232.12.93 | attack | Jul 14 05:34:59 Tower sshd[3109]: refused connect from 139.215.217.181 (139.215.217.181) Jul 14 23:40:22 Tower sshd[3109]: Connection from 132.232.12.93 port 45738 on 192.168.10.220 port 22 rdomain "" Jul 14 23:40:33 Tower sshd[3109]: Invalid user yip from 132.232.12.93 port 45738 Jul 14 23:40:33 Tower sshd[3109]: error: Could not get shadow information for NOUSER Jul 14 23:40:33 Tower sshd[3109]: Failed password for invalid user yip from 132.232.12.93 port 45738 ssh2 Jul 14 23:40:34 Tower sshd[3109]: Received disconnect from 132.232.12.93 port 45738:11: Bye Bye [preauth] Jul 14 23:40:34 Tower sshd[3109]: Disconnected from invalid user yip 132.232.12.93 port 45738 [preauth] |
2020-07-15 14:26:16 |
| 52.191.248.156 | attackbotsspam | ssh brute force |
2020-07-15 14:02:33 |
| 103.225.20.194 | attackbots | Port Scan ... |
2020-07-15 14:09:01 |
| 13.68.255.9 | attackspam | Jul 14 13:28:12 dax sshd[25746]: Invalid user crevis.com from 13.68.255.9 Jul 14 13:28:12 dax sshd[25748]: Invalid user crevis.com from 13.68.255.9 Jul 14 13:28:12 dax sshd[25751]: Invalid user admin from 13.68.255.9 Jul 14 13:28:12 dax sshd[25752]: Invalid user admin from 13.68.255.9 Jul 14 13:28:12 dax sshd[25746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.255.9 Jul 14 13:28:12 dax sshd[25750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.255.9 user=r.r Jul 14 13:28:12 dax sshd[25745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.255.9 user=r.r Jul 14 13:28:12 dax sshd[25748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.255.9 Jul 14 13:28:12 dax sshd[25751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.255.9 Jul 14 13:........ ------------------------------- |
2020-07-15 14:01:23 |
| 186.90.60.118 | attackspam | Unauthorized connection attempt detected from IP address 186.90.60.118 to port 445 |
2020-07-15 14:22:54 |
| 113.176.35.165 | attack | Unauthorized connection attempt from IP address 113.176.35.165 on Port 445(SMB) |
2020-07-15 14:04:39 |
| 1.2.129.167 | attackspam | Unauthorized connection attempt from IP address 1.2.129.167 on Port 445(SMB) |
2020-07-15 14:03:45 |
| 52.147.202.247 | attackbots | Jul 15 02:52:12 ws22vmsma01 sshd[58252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.147.202.247 Jul 15 02:52:14 ws22vmsma01 sshd[58252]: Failed password for invalid user admin from 52.147.202.247 port 30437 ssh2 ... |
2020-07-15 14:06:49 |
| 84.54.12.243 | attack | IP: 84.54.12.243
Ports affected
Simple Mail Transfer (25)
Found in DNSBL('s)
ASN Details
AS202505 Onlinenet Bil. Turzm. Teks. San. Ve Tic. Ltd. Sti.
Turkey (TR)
CIDR 84.54.12.0/24
Log Date: 15/07/2020 2:29:37 AM UTC |
2020-07-15 14:06:23 |
| 178.208.254.201 | attackbots | Jul 15 15:55:39 localhost sshd[2585025]: Invalid user version from 178.208.254.201 port 46892 ... |
2020-07-15 14:00:25 |