City: unknown
Region: unknown
Country: unknown
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.50.153
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57993
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.99.50.153. IN A
;; AUTHORITY SECTION:
. 468 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:43:02 CST 2022
;; MSG SIZE rcvd: 106
153.50.99.139.in-addr.arpa domain name pointer ip153.ip-139-99-50.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
153.50.99.139.in-addr.arpa name = ip153.ip-139-99-50.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.163.224.147 | attack | Sep 15 17:01:07 ssh2 sshd[61834]: User root from 104.163.224.147 not allowed because not listed in AllowUsers Sep 15 17:01:07 ssh2 sshd[61834]: Failed password for invalid user root from 104.163.224.147 port 60964 ssh2 Sep 15 17:01:07 ssh2 sshd[61834]: Connection closed by invalid user root 104.163.224.147 port 60964 [preauth] ... |
2020-09-16 13:15:53 |
| 39.104.138.246 | attack | 39.104.138.246 - - [16/Sep/2020:06:38:28 +0200] "POST /wp-login.php HTTP/1.0" 200 4794 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-16 13:38:25 |
| 23.248.158.138 | attack | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-09-16 13:28:15 |
| 178.207.242.216 | attack | Unauthorized connection attempt from IP address 178.207.242.216 on Port 445(SMB) |
2020-09-16 13:16:49 |
| 103.90.202.230 | attackspambots | Unauthorized connection attempt from IP address 103.90.202.230 on Port 445(SMB) |
2020-09-16 13:41:32 |
| 106.54.220.54 | attackspam | Sep 16 11:35:33 itv-usvr-01 sshd[2895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.220.54 user=root Sep 16 11:35:35 itv-usvr-01 sshd[2895]: Failed password for root from 106.54.220.54 port 41266 ssh2 Sep 16 11:39:54 itv-usvr-01 sshd[3184]: Invalid user ftpuser from 106.54.220.54 Sep 16 11:39:54 itv-usvr-01 sshd[3184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.220.54 Sep 16 11:39:54 itv-usvr-01 sshd[3184]: Invalid user ftpuser from 106.54.220.54 Sep 16 11:39:56 itv-usvr-01 sshd[3184]: Failed password for invalid user ftpuser from 106.54.220.54 port 54176 ssh2 |
2020-09-16 13:22:35 |
| 192.144.185.74 | attack | Sep 16 06:41:01 mail sshd[7977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.185.74 Sep 16 06:41:03 mail sshd[7977]: Failed password for invalid user services from 192.144.185.74 port 37074 ssh2 ... |
2020-09-16 13:37:24 |
| 24.143.242.14 | attack | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-09-16 13:18:24 |
| 162.243.50.8 | attackspam | Sep 16 06:49:46 marvibiene sshd[8613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.50.8 Sep 16 06:49:48 marvibiene sshd[8613]: Failed password for invalid user nagios from 162.243.50.8 port 43698 ssh2 |
2020-09-16 13:34:28 |
| 37.105.228.207 | attackspambots | Unauthorized connection attempt from IP address 37.105.228.207 on Port 445(SMB) |
2020-09-16 13:14:56 |
| 112.85.42.67 | attackbots | Sep 16 00:49:15 ny01 sshd[29947]: Failed password for root from 112.85.42.67 port 12122 ssh2 Sep 16 00:53:08 ny01 sshd[30423]: Failed password for root from 112.85.42.67 port 60585 ssh2 |
2020-09-16 13:20:47 |
| 164.90.229.36 | attackbotsspam | 164.90.229.36 - - [16/Sep/2020:02:15:03 +0100] "POST /wp-login.php HTTP/1.1" 200 2225 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 164.90.229.36 - - [16/Sep/2020:02:15:07 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 164.90.229.36 - - [16/Sep/2020:02:33:25 +0100] "POST /wp-login.php HTTP/1.1" 200 2371 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-16 13:20:00 |
| 202.166.161.10 | attack | Unauthorized connection attempt from IP address 202.166.161.10 on Port 445(SMB) |
2020-09-16 13:06:43 |
| 212.70.149.52 | attack | Sep 16 07:18:47 cho postfix/smtpd[3030644]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 16 07:19:15 cho postfix/smtpd[3032257]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 16 07:19:39 cho postfix/smtpd[3030644]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 16 07:20:05 cho postfix/smtpd[3032257]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 16 07:20:29 cho postfix/smtpd[3030644]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-09-16 13:23:21 |
| 191.13.114.90 | attackbotsspam | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-09-16 13:16:17 |