City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.60.100.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26396
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.60.100.56. IN A
;; AUTHORITY SECTION:
. 332 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 04:08:21 CST 2022
;; MSG SIZE rcvd: 10656.100.60.139.in-addr.arpa domain name pointer 56.weycogroup.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
56.100.60.139.in-addr.arpa name = 56.weycogroup.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.234.11.240 | attackspambots | SSH brutforce |
2020-04-01 09:38:00 |
| 46.38.145.4 | attack | Apr 1 05:28:07 mail postfix/smtpd\[18812\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 1 05:58:17 mail postfix/smtpd\[19097\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 1 05:58:44 mail postfix/smtpd\[18812\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 1 05:59:14 mail postfix/smtpd\[18812\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2020-04-01 12:09:41 |
| 35.241.81.250 | attackspambots | [PY] (sshd) Failed SSH login from 35.241.81.250 (250.81.241.35.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 31 23:27:42 svr sshd[537101]: Invalid user ik from 35.241.81.250 port 50194 Mar 31 23:27:44 svr sshd[537101]: Failed password for invalid user ik from 35.241.81.250 port 50194 ssh2 Mar 31 23:45:28 svr sshd[543665]: Invalid user user from 35.241.81.250 port 46642 Mar 31 23:45:30 svr sshd[543665]: Failed password for invalid user user from 35.241.81.250 port 46642 ssh2 Mar 31 23:56:35 svr sshd[547675]: Invalid user home from 35.241.81.250 port 51610 |
2020-04-01 12:12:59 |
| 195.9.190.142 | attackbots | DATE:2020-03-31 23:28:47, IP:195.9.190.142, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2020-04-01 09:11:24 |
| 122.53.157.26 | attackbots | Apr 1 06:52:20 www sshd\[8707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.53.157.26 user=root Apr 1 06:52:22 www sshd\[8707\]: Failed password for root from 122.53.157.26 port 43538 ssh2 Apr 1 06:56:37 www sshd\[8735\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.53.157.26 user=root ... |
2020-04-01 12:13:50 |
| 198.245.53.242 | attack | Apr 1 05:56:47 ourumov-web sshd\[14494\]: Invalid user oracle from 198.245.53.242 port 41142 Apr 1 05:56:47 ourumov-web sshd\[14494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.245.53.242 Apr 1 05:56:50 ourumov-web sshd\[14494\]: Failed password for invalid user oracle from 198.245.53.242 port 41142 ssh2 ... |
2020-04-01 12:04:05 |
| 221.148.45.168 | attackspambots | Apr 1 01:18:33 markkoudstaal sshd[11196]: Failed password for root from 221.148.45.168 port 49628 ssh2 Apr 1 01:23:06 markkoudstaal sshd[11856]: Failed password for root from 221.148.45.168 port 56364 ssh2 |
2020-04-01 09:39:26 |
| 142.93.42.177 | attack | detected by Fail2Ban |
2020-04-01 09:34:29 |
| 110.138.204.195 | attack | Brute force SMTP login attempted. ... |
2020-04-01 09:24:21 |
| 110.138.148.241 | attackspambots | Brute force SMTP login attempted. ... |
2020-04-01 09:29:16 |
| 110.144.66.156 | attackbots | Apr 1 03:18:10 nextcloud sshd\[16706\]: Invalid user ywang from 110.144.66.156 Apr 1 03:18:10 nextcloud sshd\[16706\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.144.66.156 Apr 1 03:18:13 nextcloud sshd\[16706\]: Failed password for invalid user ywang from 110.144.66.156 port 51220 ssh2 |
2020-04-01 09:22:16 |
| 79.99.49.242 | attackspambots | 0,33-02/21 [bc01/m10] PostRequest-Spammer scoring: Lusaka01 |
2020-04-01 12:01:07 |
| 185.234.217.184 | attackspambots | Apr 1 05:56:42 debian-2gb-nbg1-2 kernel: \[7972452.129937\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.234.217.184 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=42952 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-04-01 12:12:26 |
| 182.150.22.233 | attackspam | Mar 31 20:13:53 mail sshd\[31417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.150.22.233 user=root ... |
2020-04-01 09:16:10 |
| 110.164.205.133 | attack | Brute force SMTP login attempted. ... |
2020-04-01 09:14:27 |