City: unknown
Region: unknown
Country: Portugal
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 185.180.140.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2499
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;185.180.140.139. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025092403 1800 900 604800 86400
;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 25 11:00:23 CST 2025
;; MSG SIZE rcvd: 108139.140.180.185.in-addr.arpa domain name pointer ca-san-us-gd22-wk101d.internet-census.org.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
139.140.180.185.in-addr.arpa name = ca-san-us-gd22-wk101d.internet-census.org.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 143.255.8.2 | attack | leo_www |
2020-09-09 17:00:48 |
| 54.37.71.204 | attackspam | *Port Scan* detected from 54.37.71.204 (FR/France/Grand Est/Strasbourg/204.ip-54-37-71.eu). 4 hits in the last 290 seconds |
2020-09-09 17:20:54 |
| 138.68.226.175 | attackbotsspam | ... |
2020-09-09 17:29:17 |
| 118.96.227.200 | attackspam | 1599583942 - 09/08/2020 18:52:22 Host: 118.96.227.200/118.96.227.200 Port: 445 TCP Blocked |
2020-09-09 16:54:23 |
| 91.229.112.18 | attackspambots | ET CINS Active Threat Intelligence Poor Reputation IP group 80 - port: 18526 proto: tcp cat: Misc Attackbytes: 60 |
2020-09-09 17:21:38 |
| 92.223.105.154 | attackbots | Sep 9 10:41:14 root sshd[12803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.223.105.154 ... |
2020-09-09 17:17:50 |
| 222.186.42.7 | attackbotsspam | Sep 9 11:17:07 markkoudstaal sshd[12805]: Failed password for root from 222.186.42.7 port 24598 ssh2 Sep 9 11:17:10 markkoudstaal sshd[12805]: Failed password for root from 222.186.42.7 port 24598 ssh2 Sep 9 11:17:12 markkoudstaal sshd[12805]: Failed password for root from 222.186.42.7 port 24598 ssh2 ... |
2020-09-09 17:21:21 |
| 159.65.119.25 | attack | 159.65.119.25 (DE/Germany/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 9 03:35:47 server5 sshd[3667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.119.25 user=root Sep 9 03:35:49 server5 sshd[3667]: Failed password for root from 159.65.119.25 port 40244 ssh2 Sep 9 03:36:10 server5 sshd[3714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.185.129.216 user=root Sep 9 03:35:15 server5 sshd[3313]: Failed password for root from 51.89.68.141 port 58506 ssh2 Sep 9 03:33:24 server5 sshd[2438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.132.211 user=root Sep 9 03:33:26 server5 sshd[2438]: Failed password for root from 119.28.132.211 port 59304 ssh2 IP Addresses Blocked: |
2020-09-09 17:08:32 |
| 95.46.140.49 | attackbotsspam | CMS (WordPress or Joomla) login attempt. |
2020-09-09 17:17:27 |
| 182.61.167.24 | attackspambots | Sep 8 22:24:23 HOST sshd[29188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.167.24 user=r.r Sep 8 22:24:25 HOST sshd[29188]: Failed password for r.r from 182.61.167.24 port 48228 ssh2 Sep 8 22:24:25 HOST sshd[29188]: Received disconnect from 182.61.167.24: 11: Bye Bye [preauth] Sep 8 22:28:46 HOST sshd[29276]: Failed password for invalid user user from 182.61.167.24 port 46664 ssh2 Sep 8 22:28:46 HOST sshd[29276]: Received disconnect from 182.61.167.24: 11: Bye Bye [preauth] Sep 8 22:30:50 HOST sshd[29326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.167.24 user=r.r Sep 8 22:30:52 HOST sshd[29326]: Failed password for r.r from 182.61.167.24 port 51096 ssh2 Sep 8 22:30:52 HOST sshd[29326]: Received disconnect from 182.61.167.24: 11: Bye Bye [preauth] Sep 8 22:32:58 HOST sshd[29370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ru........ ------------------------------- |
2020-09-09 16:52:32 |
| 77.103.207.152 | attackspambots | Sep 8 19:41:35 rancher-0 sshd[1500194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.103.207.152 user=root Sep 8 19:41:37 rancher-0 sshd[1500194]: Failed password for root from 77.103.207.152 port 42094 ssh2 ... |
2020-09-09 17:24:21 |
| 156.199.2.86 | attackspambots | Port probing on unauthorized port 23 |
2020-09-09 17:24:08 |
| 138.197.222.141 | attack | SIP/5060 Probe, BF, Hack - |
2020-09-09 17:00:06 |
| 192.237.244.12 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root |
2020-09-09 16:53:46 |
| 93.62.72.87 | attackbots | 93.62.72.87 (IT/Italy/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 8 12:51:07 server4 sshd[31509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.0.155.15 user=root Sep 8 12:52:18 server4 sshd[32402]: Failed password for root from 93.62.72.87 port 52728 ssh2 Sep 8 12:48:36 server4 sshd[30296]: Failed password for root from 79.13.27.192 port 58687 ssh2 Sep 8 12:51:09 server4 sshd[31509]: Failed password for root from 168.0.155.15 port 50218 ssh2 Sep 8 12:50:24 server4 sshd[31306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.255.8.2 user=root Sep 8 12:50:26 server4 sshd[31306]: Failed password for root from 143.255.8.2 port 49984 ssh2 IP Addresses Blocked: 168.0.155.15 (BR/Brazil/-) |
2020-09-09 17:03:30 |