City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.149.93.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44753
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;213.149.93.136. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 21:13:55 CST 2025
;; MSG SIZE rcvd: 107Host 136.93.149.213.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 136.93.149.213.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.222.75.80 | attack | Oct 26 11:36:57 mail sshd[13146]: Invalid user ks from 92.222.75.80 Oct 26 11:36:57 mail sshd[13146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.75.80 Oct 26 11:36:57 mail sshd[13146]: Invalid user ks from 92.222.75.80 Oct 26 11:37:00 mail sshd[13146]: Failed password for invalid user ks from 92.222.75.80 port 45128 ssh2 Oct 26 11:48:28 mail sshd[30563]: Invalid user login from 92.222.75.80 ... |
2019-10-28 18:41:22 |
| 5.62.20.40 | attackbotsspam | Automatic report - Web App Attack |
2019-10-28 18:32:21 |
| 51.75.22.154 | attack | Sep 23 13:33:25 vtv3 sshd\[28722\]: Invalid user magnolia from 51.75.22.154 port 46972 Sep 23 13:33:25 vtv3 sshd\[28722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.22.154 Sep 23 13:33:27 vtv3 sshd\[28722\]: Failed password for invalid user magnolia from 51.75.22.154 port 46972 ssh2 Sep 23 13:36:59 vtv3 sshd\[30601\]: Invalid user teampspeak from 51.75.22.154 port 60284 Sep 23 13:36:59 vtv3 sshd\[30601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.22.154 Sep 23 13:51:56 vtv3 sshd\[6062\]: Invalid user vopalensky from 51.75.22.154 port 57192 Sep 23 13:51:56 vtv3 sshd\[6062\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.22.154 Sep 23 13:51:58 vtv3 sshd\[6062\]: Failed password for invalid user vopalensky from 51.75.22.154 port 57192 ssh2 Sep 23 13:55:38 vtv3 sshd\[8318\]: Invalid user at from 51.75.22.154 port 42278 Sep 23 13:55:38 vtv3 sshd\[8318\]: p |
2019-10-28 18:12:19 |
| 107.175.218.145 | attackbotsspam | Oct 28 09:32:27 server sshd\[15463\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.218.145 user=root Oct 28 09:32:28 server sshd\[15463\]: Failed password for root from 107.175.218.145 port 54796 ssh2 Oct 28 09:38:49 server sshd\[16719\]: Invalid user elastic from 107.175.218.145 Oct 28 09:38:49 server sshd\[16719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.218.145 Oct 28 09:38:51 server sshd\[16719\]: Failed password for invalid user elastic from 107.175.218.145 port 54426 ssh2 ... |
2019-10-28 18:40:35 |
| 3.17.16.7 | attackbotsspam | fail2ban |
2019-10-28 18:31:15 |
| 94.177.214.200 | attackspambots | Oct 28 10:19:15 vps647732 sshd[24381]: Failed password for root from 94.177.214.200 port 60206 ssh2 ... |
2019-10-28 18:10:03 |
| 45.136.110.47 | attack | firewall-block, port(s): 6839/tcp, 6886/tcp, 6918/tcp, 6934/tcp, 7005/tcp, 7175/tcp, 7229/tcp, 7271/tcp, 7310/tcp, 7436/tcp, 7526/tcp, 7712/tcp, 7728/tcp, 7741/tcp, 7778/tcp, 7782/tcp, 7800/tcp, 7826/tcp, 8035/tcp, 8154/tcp |
2019-10-28 18:21:20 |
| 45.141.84.28 | attackspambots | Oct 28 10:43:37 h2177944 kernel: \[5131594.626449\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.141.84.28 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=35355 PROTO=TCP SPT=58513 DPT=8010 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 28 10:43:51 h2177944 kernel: \[5131608.794300\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.141.84.28 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=795 PROTO=TCP SPT=58513 DPT=3124 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 28 10:45:39 h2177944 kernel: \[5131716.903648\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.141.84.28 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=57823 PROTO=TCP SPT=58513 DPT=4856 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 28 10:47:22 h2177944 kernel: \[5131819.165834\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.141.84.28 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=39536 PROTO=TCP SPT=58513 DPT=9188 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 28 10:54:04 h2177944 kernel: \[5132220.919555\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.141.84.28 DST=85.214.117.9 LEN=40 |
2019-10-28 18:38:13 |
| 112.197.0.125 | attack | Oct 28 10:33:59 game-panel sshd[4793]: Failed password for root from 112.197.0.125 port 3254 ssh2 Oct 28 10:38:28 game-panel sshd[4962]: Failed password for root from 112.197.0.125 port 12987 ssh2 |
2019-10-28 18:46:17 |
| 82.11.109.234 | attackbotsspam | 2019-10-28T03:42:29.740258Z 9b16b3dbce8d New connection: 82.11.109.234:33030 (172.17.0.3:2222) [session: 9b16b3dbce8d] 2019-10-28T03:46:48.699740Z d06cccf74af7 New connection: 82.11.109.234:34326 (172.17.0.3:2222) [session: d06cccf74af7] |
2019-10-28 18:40:13 |
| 62.219.3.48 | attackbots | detected by Fail2Ban |
2019-10-28 18:09:37 |
| 129.146.201.116 | attackspambots | Oct 28 10:47:51 webhost01 sshd[19749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.201.116 Oct 28 10:47:53 webhost01 sshd[19749]: Failed password for invalid user admin from 129.146.201.116 port 52796 ssh2 ... |
2019-10-28 18:14:22 |
| 112.85.42.87 | attack | Oct 27 23:59:01 sachi sshd\[25142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.87 user=root Oct 27 23:59:03 sachi sshd\[25142\]: Failed password for root from 112.85.42.87 port 23320 ssh2 Oct 27 23:59:37 sachi sshd\[25200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.87 user=root Oct 27 23:59:39 sachi sshd\[25200\]: Failed password for root from 112.85.42.87 port 21528 ssh2 Oct 28 00:00:14 sachi sshd\[25280\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.87 user=root |
2019-10-28 18:07:26 |
| 79.49.97.56 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/79.49.97.56/ IT - 1H : (139) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IT NAME ASN : ASN3269 IP : 79.49.97.56 CIDR : 79.49.0.0/16 PREFIX COUNT : 550 UNIQUE IP COUNT : 19507712 ATTACKS DETECTED ASN3269 : 1H - 3 3H - 7 6H - 16 12H - 37 24H - 85 DateTime : 2019-10-28 04:46:42 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-28 18:43:33 |
| 122.152.203.83 | attackbotsspam | Oct 28 00:34:59 giraffe sshd[5193]: Invalid user guest from 122.152.203.83 Oct 28 00:35:00 giraffe sshd[5193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.152.203.83 Oct 28 00:35:02 giraffe sshd[5193]: Failed password for invalid user guest from 122.152.203.83 port 33926 ssh2 Oct 28 00:35:02 giraffe sshd[5193]: Received disconnect from 122.152.203.83 port 33926:11: Bye Bye [preauth] Oct 28 00:35:02 giraffe sshd[5193]: Disconnected from 122.152.203.83 port 33926 [preauth] Oct 28 01:03:36 giraffe sshd[6061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.152.203.83 user=r.r Oct 28 01:03:39 giraffe sshd[6061]: Failed password for r.r from 122.152.203.83 port 57334 ssh2 Oct 28 01:03:39 giraffe sshd[6061]: Received disconnect from 122.152.203.83 port 57334:11: Bye Bye [preauth] Oct 28 01:03:39 giraffe sshd[6061]: Disconnected from 122.152.203.83 port 57334 [preauth] Oct 28 01:07:43 ........ ------------------------------- |
2019-10-28 18:24:46 |