City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.72.157.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47855
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.72.157.9. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 46 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 06:17:14 CST 2025
;; MSG SIZE rcvd: 105
Host 9.157.72.139.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 9.157.72.139.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 93.174.93.195 | attackbots | 08/02/2020-11:05:04.582673 93.174.93.195 Protocol: 17 ET DROP Dshield Block Listed Source group 1 |
2020-08-02 23:09:51 |
| 123.207.10.199 | attack | prod6 ... |
2020-08-02 22:54:19 |
| 110.82.58.72 | attackbots | Port probing on unauthorized port 23 |
2020-08-02 23:01:22 |
| 192.35.168.197 | attackbotsspam | Hit honeypot r. |
2020-08-02 22:34:02 |
| 51.75.206.42 | attackspam | Aug 2 20:10:24 webhost01 sshd[32327]: Failed password for root from 51.75.206.42 port 44566 ssh2 ... |
2020-08-02 23:08:08 |
| 180.249.165.253 | attack | Jul 31 22:33:34 mailserver sshd[25410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.249.165.253 user=r.r Jul 31 22:33:36 mailserver sshd[25410]: Failed password for r.r from 180.249.165.253 port 25209 ssh2 Jul 31 22:33:36 mailserver sshd[25410]: Received disconnect from 180.249.165.253 port 25209:11: Bye Bye [preauth] Jul 31 22:33:36 mailserver sshd[25410]: Disconnected from 180.249.165.253 port 25209 [preauth] Jul 31 22:38:11 mailserver sshd[25746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.249.165.253 user=r.r Jul 31 22:38:13 mailserver sshd[25746]: Failed password for r.r from 180.249.165.253 port 16088 ssh2 Jul 31 22:38:13 mailserver sshd[25746]: Received disconnect from 180.249.165.253 port 16088:11: Bye Bye [preauth] Jul 31 22:38:13 mailserver sshd[25746]: Disconnected from 180.249.165.253 port 16088 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html |
2020-08-02 22:48:06 |
| 45.144.67.98 | attackbots | Aug 2 13:41:31 vm1 sshd[10277]: Failed password for root from 45.144.67.98 port 51662 ssh2 ... |
2020-08-02 22:43:31 |
| 139.170.150.254 | attack | Aug 2 16:01:57 sso sshd[7753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.170.150.254 Aug 2 16:01:59 sso sshd[7753]: Failed password for invalid user P@sswOrd from 139.170.150.254 port 55476 ssh2 ... |
2020-08-02 23:00:51 |
| 37.120.179.189 | attackbotsspam | BURG,WP GET /wp-login.php |
2020-08-02 22:34:51 |
| 129.204.28.114 | attackbots | Aug 2 02:46:45 web9 sshd\[22251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.28.114 user=root Aug 2 02:46:47 web9 sshd\[22251\]: Failed password for root from 129.204.28.114 port 32976 ssh2 Aug 2 02:51:09 web9 sshd\[22853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.28.114 user=root Aug 2 02:51:11 web9 sshd\[22853\]: Failed password for root from 129.204.28.114 port 50874 ssh2 Aug 2 02:55:30 web9 sshd\[23346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.28.114 user=root |
2020-08-02 22:30:58 |
| 125.254.33.119 | attack | DATE:2020-08-02 15:42:27,IP:125.254.33.119,MATCHES:10,PORT:ssh |
2020-08-02 22:43:11 |
| 138.197.223.125 | attack | Lines containing failures of 138.197.223.125 Jul 29 17:50:22 newdogma sshd[3905]: Did not receive identification string from 138.197.223.125 port 39092 Jul 29 17:50:31 newdogma sshd[3910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.223.125 user=r.r Jul 29 17:50:34 newdogma sshd[3910]: Failed password for r.r from 138.197.223.125 port 60978 ssh2 Jul 29 17:50:35 newdogma sshd[3910]: Received disconnect from 138.197.223.125 port 60978:11: Normal Shutdown, Thank you for playing [preauth] Jul 29 17:50:35 newdogma sshd[3910]: Disconnected from authenticating user r.r 138.197.223.125 port 60978 [preauth] Jul 29 17:50:42 newdogma sshd[3914]: Invalid user oracle from 138.197.223.125 port 51076 Jul 29 17:50:42 newdogma sshd[3914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.223.125 Jul 29 17:50:44 newdogma sshd[3914]: Failed password for invalid user oracle from 138.197.223.1........ ------------------------------ |
2020-08-02 22:58:47 |
| 139.59.3.114 | attackspam | 2020-08-02T15:14:07.424152vps751288.ovh.net sshd\[25180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.114 user=root 2020-08-02T15:14:09.554445vps751288.ovh.net sshd\[25180\]: Failed password for root from 139.59.3.114 port 33777 ssh2 2020-08-02T15:18:47.799779vps751288.ovh.net sshd\[25202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.114 user=root 2020-08-02T15:18:49.704061vps751288.ovh.net sshd\[25202\]: Failed password for root from 139.59.3.114 port 38989 ssh2 2020-08-02T15:23:21.248097vps751288.ovh.net sshd\[25214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.114 user=root |
2020-08-02 22:28:06 |
| 142.93.121.47 | attackbotsspam | trying to access non-authorized port |
2020-08-02 23:01:48 |
| 180.76.105.165 | attack | Aug 2 14:55:13 vps sshd[107287]: Failed password for root from 180.76.105.165 port 34180 ssh2 Aug 2 14:56:19 vps sshd[111235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.105.165 user=root Aug 2 14:56:21 vps sshd[111235]: Failed password for root from 180.76.105.165 port 40080 ssh2 Aug 2 14:57:34 vps sshd[115494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.105.165 user=root Aug 2 14:57:36 vps sshd[115494]: Failed password for root from 180.76.105.165 port 48252 ssh2 ... |
2020-08-02 22:56:32 |