City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 248.144.39.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41862
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;248.144.39.134. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 07:19:21 CST 2025
;; MSG SIZE rcvd: 107
Host 134.39.144.248.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 134.39.144.248.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.13.236.63 | attackspam | 2020-08-24T07:49:55.545886mail.standpoint.com.ua sshd[14804]: Invalid user oracle from 106.13.236.63 port 51930 2020-08-24T07:49:55.549480mail.standpoint.com.ua sshd[14804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.236.63 2020-08-24T07:49:55.545886mail.standpoint.com.ua sshd[14804]: Invalid user oracle from 106.13.236.63 port 51930 2020-08-24T07:49:57.008747mail.standpoint.com.ua sshd[14804]: Failed password for invalid user oracle from 106.13.236.63 port 51930 ssh2 2020-08-24T07:52:51.866814mail.standpoint.com.ua sshd[15201]: Invalid user com from 106.13.236.63 port 41732 ... |
2020-08-24 13:08:51 |
| 222.186.190.2 | attackspam | 2020-08-24T07:01:15.199606vps751288.ovh.net sshd\[12357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.2 user=root 2020-08-24T07:01:17.346040vps751288.ovh.net sshd\[12357\]: Failed password for root from 222.186.190.2 port 31586 ssh2 2020-08-24T07:01:34.969284vps751288.ovh.net sshd\[12361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.2 user=root 2020-08-24T07:01:37.391729vps751288.ovh.net sshd\[12361\]: Failed password for root from 222.186.190.2 port 37914 ssh2 2020-08-24T07:01:42.535233vps751288.ovh.net sshd\[12361\]: Failed password for root from 222.186.190.2 port 37914 ssh2 |
2020-08-24 13:13:27 |
| 51.4.147.32 | attack | *Port Scan* detected from 51.4.147.32 (DE/Germany/Hesse/Frankfurt am Main/-). 4 hits in the last 86 seconds |
2020-08-24 13:26:47 |
| 87.110.181.30 | attack | *Port Scan* detected from 87.110.181.30 (LV/Latvia/Riga/Riga (Centra rajons)/-). 4 hits in the last 205 seconds |
2020-08-24 13:23:03 |
| 118.97.189.60 | attack | Unauthorised access (Aug 24) SRC=118.97.189.60 LEN=52 TOS=0x10 PREC=0x40 TTL=118 ID=10775 DF TCP DPT=445 WINDOW=8192 SYN |
2020-08-24 13:40:09 |
| 223.197.151.55 | attackbots | 2020-08-24T10:46:40.324286hostname sshd[93732]: Invalid user nginx from 223.197.151.55 port 53611 2020-08-24T10:46:42.805131hostname sshd[93732]: Failed password for invalid user nginx from 223.197.151.55 port 53611 ssh2 2020-08-24T10:53:47.610988hostname sshd[94612]: Invalid user acc from 223.197.151.55 port 46607 ... |
2020-08-24 13:36:20 |
| 182.253.82.165 | attackspambots | SMB Server BruteForce Attack |
2020-08-24 13:37:49 |
| 138.197.222.141 | attack | $f2bV_matches |
2020-08-24 13:18:19 |
| 62.215.6.11 | attack | Aug 24 06:53:00 OPSO sshd\[11649\]: Invalid user qq from 62.215.6.11 port 35005 Aug 24 06:53:00 OPSO sshd\[11649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.215.6.11 Aug 24 06:53:02 OPSO sshd\[11649\]: Failed password for invalid user qq from 62.215.6.11 port 35005 ssh2 Aug 24 06:56:55 OPSO sshd\[12582\]: Invalid user wangjie from 62.215.6.11 port 35549 Aug 24 06:56:55 OPSO sshd\[12582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.215.6.11 |
2020-08-24 13:03:44 |
| 157.230.132.100 | attackspambots | Time: Mon Aug 24 04:59:45 2020 +0000 IP: 157.230.132.100 (-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Aug 24 04:39:47 ca-16-ede1 sshd[26257]: Invalid user trm from 157.230.132.100 port 58414 Aug 24 04:39:50 ca-16-ede1 sshd[26257]: Failed password for invalid user trm from 157.230.132.100 port 58414 ssh2 Aug 24 04:55:58 ca-16-ede1 sshd[28313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.132.100 user=root Aug 24 04:56:00 ca-16-ede1 sshd[28313]: Failed password for root from 157.230.132.100 port 59352 ssh2 Aug 24 04:59:41 ca-16-ede1 sshd[28784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.132.100 user=root |
2020-08-24 13:17:51 |
| 149.56.129.68 | attackspambots | Invalid user developer from 149.56.129.68 port 50360 |
2020-08-24 13:34:18 |
| 118.27.43.116 | attack | Spam detected 2020.08.24 05:55:48 blocked until 2020.10.12 22:57:48 |
2020-08-24 13:05:49 |
| 218.56.160.82 | attackspambots | Aug 24 05:42:57 ns382633 sshd\[8595\]: Invalid user postgres from 218.56.160.82 port 23217 Aug 24 05:42:57 ns382633 sshd\[8595\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.56.160.82 Aug 24 05:42:59 ns382633 sshd\[8595\]: Failed password for invalid user postgres from 218.56.160.82 port 23217 ssh2 Aug 24 05:55:53 ns382633 sshd\[11199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.56.160.82 user=root Aug 24 05:55:56 ns382633 sshd\[11199\]: Failed password for root from 218.56.160.82 port 40978 ssh2 |
2020-08-24 12:57:38 |
| 185.53.168.96 | attackbots | Aug 24 05:55:22 [host] sshd[374]: Invalid user pos Aug 24 05:55:22 [host] sshd[374]: pam_unix(sshd:au Aug 24 05:55:24 [host] sshd[374]: Failed password |
2020-08-24 13:14:34 |
| 192.99.4.59 | attackbots | 192.99.4.59 - - [24/Aug/2020:06:22:02 +0100] "POST /wp-login.php HTTP/1.1" 200 5985 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.99.4.59 - - [24/Aug/2020:06:24:38 +0100] "POST /wp-login.php HTTP/1.1" 200 5985 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.99.4.59 - - [24/Aug/2020:06:27:30 +0100] "POST /wp-login.php HTTP/1.1" 200 5985 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" ... |
2020-08-24 13:27:47 |