City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.31.93.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56550
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.31.93.199. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022401 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 25 11:27:52 CST 2025
;; MSG SIZE rcvd: 106Host 199.93.31.139.in-addr.arpa not found: 2(SERVFAIL)
server can't find 139.31.93.199.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 42.117.184.89 | attackspam | (Sep 25) LEN=40 TTL=47 ID=10595 TCP DPT=8080 WINDOW=37779 SYN (Sep 25) LEN=40 TTL=47 ID=4555 TCP DPT=8080 WINDOW=19795 SYN (Sep 24) LEN=40 TTL=47 ID=17079 TCP DPT=8080 WINDOW=19795 SYN (Sep 24) LEN=40 TTL=44 ID=36527 TCP DPT=8080 WINDOW=9864 SYN (Sep 24) LEN=40 TTL=44 ID=24989 TCP DPT=8080 WINDOW=19795 SYN (Sep 24) LEN=40 TTL=47 ID=13715 TCP DPT=8080 WINDOW=19795 SYN (Sep 23) LEN=40 TTL=47 ID=48633 TCP DPT=8080 WINDOW=37779 SYN (Sep 23) LEN=40 TTL=47 ID=56510 TCP DPT=8080 WINDOW=19795 SYN (Sep 23) LEN=40 TTL=47 ID=22510 TCP DPT=8080 WINDOW=19795 SYN (Sep 22) LEN=40 TTL=47 ID=58639 TCP DPT=8080 WINDOW=9864 SYN |
2019-09-25 20:20:52 |
| 138.68.136.152 | attackspam | WordPress wp-login brute force :: 138.68.136.152 0.040 BYPASS [25/Sep/2019:22:23:43 1000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-09-25 20:39:50 |
| 140.143.236.227 | attackspambots | Sep 25 07:32:25 plex sshd[24414]: Invalid user laraht123 from 140.143.236.227 port 45076 |
2019-09-25 20:12:05 |
| 182.61.170.213 | attackspambots | Sep 25 02:27:49 php1 sshd\[1308\]: Invalid user a from 182.61.170.213 Sep 25 02:27:49 php1 sshd\[1308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.170.213 Sep 25 02:27:51 php1 sshd\[1308\]: Failed password for invalid user a from 182.61.170.213 port 33752 ssh2 Sep 25 02:32:38 php1 sshd\[1909\]: Invalid user alan123 from 182.61.170.213 Sep 25 02:32:38 php1 sshd\[1909\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.170.213 |
2019-09-25 20:42:54 |
| 45.137.80.118 | attackbots | B: Magento admin pass test (wrong country) |
2019-09-25 20:24:02 |
| 91.193.204.242 | attackbots | Lines containing failures of 91.193.204.242 Sep 25 14:03:25 shared07 postfix/smtpd[22002]: connect from mx1.orghim.ua[91.193.204.242] Sep 25 14:03:26 shared07 policyd-spf[30342]: prepend Received-SPF: Softfail (mailfrom) identhostnamey=mailfrom; client-ip=91.193.204.242; helo=mx1.orghim.ua; envelope-from=x@x Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=91.193.204.242 |
2019-09-25 20:38:33 |
| 101.94.224.26 | attackbotsspam | Sep 25 11:40:26 saschabauer sshd[7326]: Failed password for root from 101.94.224.26 port 50167 ssh2 Sep 25 11:40:28 saschabauer sshd[7326]: Failed password for root from 101.94.224.26 port 50167 ssh2 |
2019-09-25 20:03:55 |
| 139.199.183.185 | attack | Sep 24 21:15:43 tdfoods sshd\[9561\]: Invalid user intro1 from 139.199.183.185 Sep 24 21:15:43 tdfoods sshd\[9561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.183.185 Sep 24 21:15:45 tdfoods sshd\[9561\]: Failed password for invalid user intro1 from 139.199.183.185 port 40040 ssh2 Sep 24 21:19:30 tdfoods sshd\[9963\]: Invalid user vbox from 139.199.183.185 Sep 24 21:19:30 tdfoods sshd\[9963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.183.185 |
2019-09-25 20:00:50 |
| 118.189.171.202 | attackspambots | 2019-09-25T05:41:35.817090 sshd[25096]: Invalid user linda from 118.189.171.202 port 33116 2019-09-25T05:41:35.831405 sshd[25096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.189.171.202 2019-09-25T05:41:35.817090 sshd[25096]: Invalid user linda from 118.189.171.202 port 33116 2019-09-25T05:41:38.223662 sshd[25096]: Failed password for invalid user linda from 118.189.171.202 port 33116 ssh2 2019-09-25T05:45:57.021179 sshd[25193]: Invalid user jamie from 118.189.171.202 port 44336 ... |
2019-09-25 20:01:14 |
| 107.170.235.19 | attackbotsspam | 2019-09-25 08:23:42,469 fail2ban.actions [1806]: NOTICE [sshd] Ban 107.170.235.19 |
2019-09-25 20:40:21 |
| 190.144.45.108 | attack | 2019-09-25T00:42:54.0496281495-001 sshd\[23863\]: Invalid user phenil from 190.144.45.108 port 43922 2019-09-25T00:42:54.0588411495-001 sshd\[23863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.144.45.108 2019-09-25T00:42:56.1799321495-001 sshd\[23863\]: Failed password for invalid user phenil from 190.144.45.108 port 43922 ssh2 2019-09-25T00:48:29.2075401495-001 sshd\[24352\]: Invalid user Administrator from 190.144.45.108 port 44832 2019-09-25T00:48:29.2146661495-001 sshd\[24352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.144.45.108 2019-09-25T00:48:30.9895471495-001 sshd\[24352\]: Failed password for invalid user Administrator from 190.144.45.108 port 44832 ssh2 ... |
2019-09-25 20:23:15 |
| 46.101.224.184 | attackbots | (sshd) Failed SSH login from 46.101.224.184 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 25 06:17:43 host sshd[42046]: Invalid user testadmin from 46.101.224.184 port 54888 |
2019-09-25 20:09:16 |
| 218.92.0.135 | attackbotsspam | Sep 25 08:45:37 minden010 sshd[23055]: Failed password for root from 218.92.0.135 port 22585 ssh2 Sep 25 08:45:41 minden010 sshd[23055]: Failed password for root from 218.92.0.135 port 22585 ssh2 Sep 25 08:45:44 minden010 sshd[23055]: Failed password for root from 218.92.0.135 port 22585 ssh2 Sep 25 08:45:46 minden010 sshd[23055]: Failed password for root from 218.92.0.135 port 22585 ssh2 ... |
2019-09-25 20:05:25 |
| 58.47.177.160 | attackbotsspam | Sep 25 02:26:04 eddieflores sshd\[25435\]: Invalid user gorges from 58.47.177.160 Sep 25 02:26:04 eddieflores sshd\[25435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.47.177.160 Sep 25 02:26:07 eddieflores sshd\[25435\]: Failed password for invalid user gorges from 58.47.177.160 port 60716 ssh2 Sep 25 02:31:54 eddieflores sshd\[25910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.47.177.160 user=root Sep 25 02:31:55 eddieflores sshd\[25910\]: Failed password for root from 58.47.177.160 port 52509 ssh2 |
2019-09-25 20:34:37 |
| 116.196.94.108 | attack | $f2bV_matches |
2019-09-25 20:07:14 |