City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 50.114.105.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4755
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;50.114.105.119. IN A
;; AUTHORITY SECTION:
. 436 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024042101 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 22 08:08:10 CST 2024
;; MSG SIZE rcvd: 107Host 119.105.114.50.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 119.105.114.50.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.175.216 | attack | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216 user=root Failed password for root from 222.186.175.216 port 10854 ssh2 Failed password for root from 222.186.175.216 port 10854 ssh2 Failed password for root from 222.186.175.216 port 10854 ssh2 Failed password for root from 222.186.175.216 port 10854 ssh2 |
2019-11-03 16:40:26 |
| 51.158.167.187 | attack | 51.158.167.187 - - [03/Nov/2019:06:52:44 +0100] "POST /wp-login.php HTTP/1.1" 200 2112 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.158.167.187 - - [03/Nov/2019:06:52:44 +0100] "POST /wp-login.php HTTP/1.1" 200 2093 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-11-03 16:34:28 |
| 171.235.119.0 | attack | 23/tcp 23/tcp 23/tcp... [2019-11-01]5pkt,1pt.(tcp) |
2019-11-03 16:48:37 |
| 159.224.158.39 | attack | 445/tcp 445/tcp [2019-10-29/11-03]2pkt |
2019-11-03 16:31:07 |
| 219.92.166.80 | attackspambots | 60001/tcp 60001/tcp [2019-11-01/03]2pkt |
2019-11-03 16:35:40 |
| 187.130.104.9 | attack | 1433/tcp 445/tcp... [2019-10-18/11-03]6pkt,2pt.(tcp) |
2019-11-03 16:23:53 |
| 122.114.206.25 | attackspam | Nov 3 09:38:52 meumeu sshd[9211]: Failed password for root from 122.114.206.25 port 56846 ssh2 Nov 3 09:45:27 meumeu sshd[9952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.206.25 Nov 3 09:45:29 meumeu sshd[9952]: Failed password for invalid user ubuntu from 122.114.206.25 port 35932 ssh2 ... |
2019-11-03 16:47:48 |
| 222.186.175.151 | attackspam | Nov 3 03:29:24 debian sshd[29869]: Unable to negotiate with 222.186.175.151 port 4636: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Nov 3 03:38:16 debian sshd[30213]: Unable to negotiate with 222.186.175.151 port 65270: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... |
2019-11-03 16:45:08 |
| 159.203.26.191 | attackspam | 5985/tcp 523/tcp [2019-11-01/02]2pkt |
2019-11-03 16:42:52 |
| 171.247.190.28 | attack | 445/tcp 445/tcp [2019-11-01]2pkt |
2019-11-03 16:49:33 |
| 78.36.139.160 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/78.36.139.160/ RU - 1H : (170) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : RU NAME ASN : ASN12389 IP : 78.36.139.160 CIDR : 78.36.128.0/19 PREFIX COUNT : 2741 UNIQUE IP COUNT : 8699648 ATTACKS DETECTED ASN12389 : 1H - 3 3H - 8 6H - 17 12H - 34 24H - 82 DateTime : 2019-11-03 06:52:45 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-03 16:31:35 |
| 52.15.212.3 | attack | WordPress login Brute force / Web App Attack on client site. |
2019-11-03 16:27:47 |
| 124.89.86.236 | attackbots | 1433/tcp 1433/tcp 1433/tcp... [2019-10-21/11-03]4pkt,1pt.(tcp) |
2019-11-03 16:38:11 |
| 202.182.97.158 | attack | Nov 2 15:52:45 nandi sshd[1174]: reveeclipse mapping checking getaddrinfo for 202.182.97.158.vultr.com [202.182.97.158] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 2 15:52:45 nandi sshd[1174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.182.97.158 user=r.r Nov 2 15:52:47 nandi sshd[1174]: Failed password for r.r from 202.182.97.158 port 56082 ssh2 Nov 2 15:52:47 nandi sshd[1174]: Received disconnect from 202.182.97.158: 11: Bye Bye [preauth] Nov 2 15:59:29 nandi sshd[6828]: reveeclipse mapping checking getaddrinfo for 202.182.97.158.vultr.com [202.182.97.158] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 2 15:59:29 nandi sshd[6828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.182.97.158 user=r.r Nov 2 15:59:31 nandi sshd[6828]: Failed password for r.r from 202.182.97.158 port 48356 ssh2 Nov 2 15:59:31 nandi sshd[6828]: Received disconnect from 202.182.97.158: 11: Bye Bye [pre........ ------------------------------- |
2019-11-03 16:38:50 |
| 51.254.49.98 | attack | [portscan] tcp/143 [IMAP] *(RWIN=5840)(11031035) |
2019-11-03 16:39:48 |