City: unknown
Region: unknown
Country: France
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.54.202.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19739
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.54.202.211. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024121200 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 12 20:02:01 CST 2024
;; MSG SIZE rcvd: 107Host 211.202.54.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 211.202.54.139.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 168.235.77.201 | attack | Aug 13 02:48:12 www1 sshd\[36617\]: Address 168.235.77.201 maps to tre.raylu.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug 13 02:48:12 www1 sshd\[36617\]: Invalid user avis from 168.235.77.201Aug 13 02:48:14 www1 sshd\[36617\]: Failed password for invalid user avis from 168.235.77.201 port 34522 ssh2Aug 13 02:53:47 www1 sshd\[37195\]: Address 168.235.77.201 maps to tre.raylu.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug 13 02:53:47 www1 sshd\[37195\]: Invalid user tasha from 168.235.77.201Aug 13 02:53:49 www1 sshd\[37195\]: Failed password for invalid user tasha from 168.235.77.201 port 59638 ssh2 ... |
2019-08-13 08:07:53 |
| 122.52.121.128 | attack | Aug 13 01:44:13 SilenceServices sshd[2041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.52.121.128 Aug 13 01:44:15 SilenceServices sshd[2041]: Failed password for invalid user simple from 122.52.121.128 port 59469 ssh2 Aug 13 01:50:25 SilenceServices sshd[6648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.52.121.128 |
2019-08-13 07:57:46 |
| 220.134.82.175 | attackspambots | firewall-block, port(s): 23/tcp |
2019-08-13 07:41:04 |
| 186.192.255.61 | attackbotsspam | 445/tcp 445/tcp 445/tcp... [2019-07-19/08-12]4pkt,1pt.(tcp) |
2019-08-13 07:37:29 |
| 182.254.228.114 | attackspam | 445/tcp 445/tcp 445/tcp... [2019-06-12/08-12]12pkt,1pt.(tcp) |
2019-08-13 08:10:48 |
| 118.70.190.101 | attack | 445/tcp 445/tcp 445/tcp... [2019-06-21/08-12]4pkt,1pt.(tcp) |
2019-08-13 07:27:47 |
| 124.65.140.42 | attackbotsspam | 2019-08-12T23:20:26.465852abusebot-2.cloudsearch.cf sshd\[6047\]: Invalid user kurtis from 124.65.140.42 port 48890 |
2019-08-13 07:32:48 |
| 168.196.150.41 | attackbotsspam | Aug 13 00:03:23 rigel postfix/smtpd[2886]: connect from unknown[168.196.150.41] Aug 13 00:03:27 rigel postfix/smtpd[2886]: warning: unknown[168.196.150.41]: SASL CRAM-MD5 authentication failed: authentication failure Aug 13 00:03:28 rigel postfix/smtpd[2886]: warning: unknown[168.196.150.41]: SASL PLAIN authentication failed: authentication failure Aug 13 00:03:30 rigel postfix/smtpd[2886]: warning: unknown[168.196.150.41]: SASL LOGIN authentication failed: authentication failure ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=168.196.150.41 |
2019-08-13 07:47:48 |
| 172.247.109.99 | attackspambots | scan r |
2019-08-13 07:45:04 |
| 94.177.214.200 | attack | Splunk® : Brute-Force login attempt on SSH: Aug 12 19:36:35 testbed sshd[3535]: Disconnected from 94.177.214.200 port 58552 [preauth] |
2019-08-13 07:39:17 |
| 186.206.255.253 | attack | Aug 13 00:10:01 lnxded64 sshd[15492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.206.255.253 |
2019-08-13 07:52:47 |
| 49.83.224.24 | attackbotsspam | Automatic report - Port Scan Attack |
2019-08-13 07:54:34 |
| 37.79.53.70 | attackspambots | Aug 12 17:52:08 penfold postfix/smtpd[18203]: connect from unknown[37.79.53.70] Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=37.79.53.70 |
2019-08-13 08:05:35 |
| 134.91.56.22 | attack | Aug 12 19:21:00 vps200512 sshd\[14253\]: Invalid user ginger from 134.91.56.22 Aug 12 19:21:00 vps200512 sshd\[14253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.91.56.22 Aug 12 19:21:01 vps200512 sshd\[14253\]: Failed password for invalid user ginger from 134.91.56.22 port 37426 ssh2 Aug 12 19:26:13 vps200512 sshd\[14374\]: Invalid user testing from 134.91.56.22 Aug 12 19:26:13 vps200512 sshd\[14374\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.91.56.22 |
2019-08-13 07:32:19 |
| 99.149.251.77 | attack | Aug 13 00:32:02 mail sshd\[20672\]: Failed password for invalid user password from 99.149.251.77 port 60610 ssh2 Aug 13 00:48:37 mail sshd\[21194\]: Invalid user gabytzu!@\#$%\* from 99.149.251.77 port 37098 ... |
2019-08-13 07:59:08 |