City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.49.94.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1833
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;48.49.94.139. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023030300 1800 900 604800 86400
;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 03 14:30:08 CST 2023
;; MSG SIZE rcvd: 105Host 139.94.49.48.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 139.94.49.48.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 165.227.15.223 | attack | 165.227.15.223 - - [14/Aug/2020:13:25:43 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.227.15.223 - - [14/Aug/2020:13:25:45 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.227.15.223 - - [14/Aug/2020:13:25:47 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-14 23:06:40 |
| 218.92.0.133 | attackspambots | Aug 14 12:05:49 firewall sshd[21058]: Failed password for root from 218.92.0.133 port 30823 ssh2 Aug 14 12:05:54 firewall sshd[21058]: Failed password for root from 218.92.0.133 port 30823 ssh2 Aug 14 12:05:58 firewall sshd[21058]: Failed password for root from 218.92.0.133 port 30823 ssh2 ... |
2020-08-14 23:15:46 |
| 51.68.65.174 | attackspambots | (sshd) Failed SSH login from 51.68.65.174 (FR/France/ip174.ip-51-68-65.eu): 5 in the last 300 secs |
2020-08-14 23:35:25 |
| 109.213.253.196 | attackbotsspam | 2020-08-14 22:53:31 | |
| 167.71.209.2 | attackbots | Aug 14 16:38:05 mail sshd[28189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.209.2 user=root Aug 14 16:38:08 mail sshd[28189]: Failed password for root from 167.71.209.2 port 43964 ssh2 ... |
2020-08-14 23:37:45 |
| 138.128.246.126 | attackspambots | Spam |
2020-08-14 23:21:40 |
| 199.19.73.23 | attackspambots | Spam |
2020-08-14 23:18:24 |
| 104.46.55.57 | attackspam | 2020-08-14 22:55:24 | |
| 66.98.45.242 | attackspambots | Aug 14 11:56:42 firewall sshd[20798]: Failed password for root from 66.98.45.242 port 55224 ssh2 Aug 14 12:00:17 firewall sshd[20898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.98.45.242 user=root Aug 14 12:00:19 firewall sshd[20898]: Failed password for root from 66.98.45.242 port 54360 ssh2 ... |
2020-08-14 23:03:29 |
| 42.118.253.132 | attack | Spam |
2020-08-14 23:15:23 |
| 174.219.135.161 | attack | Brute forcing email accounts |
2020-08-14 23:34:43 |
| 187.228.161.165 | attackbots | Aug 10 04:59:27 uapps sshd[24697]: User r.r from 187.228.161.165 not allowed because not listed in AllowUsers Aug 10 04:59:27 uapps sshd[24697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.228.161.165 user=r.r Aug 10 04:59:30 uapps sshd[24697]: Failed password for invalid user r.r from 187.228.161.165 port 36742 ssh2 Aug 10 04:59:30 uapps sshd[24697]: Received disconnect from 187.228.161.165 port 36742:11: Bye Bye [preauth] Aug 10 04:59:30 uapps sshd[24697]: Disconnected from invalid user r.r 187.228.161.165 port 36742 [preauth] Aug 10 05:12:14 uapps sshd[24910]: User r.r from 187.228.161.165 not allowed because not listed in AllowUsers Aug 10 05:12:14 uapps sshd[24910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.228.161.165 user=r.r Aug 10 05:12:17 uapps sshd[24910]: Failed password for invalid user r.r from 187.228.161.165 port 52338 ssh2 Aug 10 05:12:17 uapps sshd[24910........ ------------------------------- |
2020-08-14 22:51:31 |
| 91.218.19.106 | attackspam | Automatic report - Banned IP Access |
2020-08-14 23:24:58 |
| 138.128.245.53 | attackspam | Spam |
2020-08-14 23:22:15 |
| 103.195.5.192 | attackbots | Spam |
2020-08-14 23:26:16 |