City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 55.139.133.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23565
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;55.139.133.20. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022602 1800 900 604800 86400
;; Query time: 202 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 27 13:40:15 CST 2025
;; MSG SIZE rcvd: 106b'Host 20.133.139.55.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 55.139.133.20.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.112.249.152 | attackbotsspam | Oct 21 04:51:55 lvps87-230-18-107 sshd[11169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.112.249.152 user=r.r Oct 21 04:51:57 lvps87-230-18-107 sshd[11169]: Failed password for r.r from 185.112.249.152 port 42406 ssh2 Oct 21 04:51:57 lvps87-230-18-107 sshd[11169]: Received disconnect from 185.112.249.152: 11: Bye Bye [preauth] Oct 21 04:51:57 lvps87-230-18-107 sshd[11171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.112.249.152 user=r.r Oct 21 04:51:59 lvps87-230-18-107 sshd[11171]: Failed password for r.r from 185.112.249.152 port 44260 ssh2 Oct 21 04:51:59 lvps87-230-18-107 sshd[11171]: Received disconnect from 185.112.249.152: 11: Bye Bye [preauth] Oct 21 04:52:00 lvps87-230-18-107 sshd[11173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.112.249.152 user=r.r Oct 21 04:52:02 lvps87-230-18-107 sshd[11173]: Failed password ........ ------------------------------- |
2019-10-21 19:28:02 |
| 69.171.74.150 | attack | Lines containing failures of 69.171.74.150 Oct 21 04:59:50 zabbix sshd[79640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.171.74.150 user=r.r Oct 21 04:59:52 zabbix sshd[79640]: Failed password for r.r from 69.171.74.150 port 53940 ssh2 Oct 21 04:59:52 zabbix sshd[79640]: Received disconnect from 69.171.74.150 port 53940:11: Bye Bye [preauth] Oct 21 04:59:52 zabbix sshd[79640]: Disconnected from authenticating user r.r 69.171.74.150 port 53940 [preauth] Oct 21 05:20:26 zabbix sshd[80692]: Invalid user com from 69.171.74.150 port 46970 Oct 21 05:20:26 zabbix sshd[80692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.171.74.150 Oct 21 05:20:29 zabbix sshd[80692]: Failed password for invalid user com from 69.171.74.150 port 46970 ssh2 Oct 21 05:20:29 zabbix sshd[80692]: Received disconnect from 69.171.74.150 port 46970:11: Bye Bye [preauth] Oct 21 05:20:29 zabbix sshd[80692]: Disco........ ------------------------------ |
2019-10-21 19:46:13 |
| 125.74.47.230 | attackspambots | Oct 21 06:56:08 ws22vmsma01 sshd[132125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.74.47.230 Oct 21 06:56:10 ws22vmsma01 sshd[132125]: Failed password for invalid user simo from 125.74.47.230 port 43062 ssh2 ... |
2019-10-21 19:45:22 |
| 187.73.214.94 | attackbotsspam | Automatic report - Port Scan Attack |
2019-10-21 19:22:20 |
| 218.78.15.235 | attackbots | Oct 21 02:10:04 shadeyouvpn sshd[7537]: Address 218.78.15.235 maps to 235.15.78.218.dial.xw.sh.dynamic.163data.com.cn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 21 02:10:04 shadeyouvpn sshd[7537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.15.235 user=r.r Oct 21 02:10:06 shadeyouvpn sshd[7537]: Failed password for r.r from 218.78.15.235 port 43486 ssh2 Oct 21 02:10:06 shadeyouvpn sshd[7537]: Received disconnect from 218.78.15.235: 11: Bye Bye [preauth] Oct 21 02:19:50 shadeyouvpn sshd[12805]: Address 218.78.15.235 maps to 235.15.78.218.dial.xw.sh.dynamic.163data.com.cn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 21 02:19:50 shadeyouvpn sshd[12805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.15.235 user=r.r Oct 21 02:19:52 shadeyouvpn sshd[12805]: Failed password for r.r from 218.78.15.235 port 47026 ss........ ------------------------------- |
2019-10-21 19:30:54 |
| 184.71.160.218 | attackspambots | Unauthorised access (Oct 21) SRC=184.71.160.218 LEN=40 TTL=241 ID=11614 TCP DPT=445 WINDOW=1024 SYN |
2019-10-21 19:35:55 |
| 165.22.182.168 | attackspam | Oct 21 13:43:10 lnxded64 sshd[3727]: Failed password for root from 165.22.182.168 port 35120 ssh2 Oct 21 13:46:26 lnxded64 sshd[4507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.182.168 Oct 21 13:46:28 lnxded64 sshd[4507]: Failed password for invalid user qiong from 165.22.182.168 port 46870 ssh2 |
2019-10-21 19:49:00 |
| 27.48.138.8 | attack | Portscan or hack attempt detected by psad/fwsnort |
2019-10-21 19:50:13 |
| 123.207.99.21 | attackbots | Oct 20 18:56:22 hpm sshd\[30214\]: Invalid user 123456 from 123.207.99.21 Oct 20 18:56:22 hpm sshd\[30214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.99.21 Oct 20 18:56:24 hpm sshd\[30214\]: Failed password for invalid user 123456 from 123.207.99.21 port 60454 ssh2 Oct 20 19:01:57 hpm sshd\[30634\]: Invalid user emo from 123.207.99.21 Oct 20 19:01:57 hpm sshd\[30634\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.99.21 |
2019-10-21 19:23:55 |
| 188.166.247.82 | attack | SSH Brute-Force reported by Fail2Ban |
2019-10-21 19:21:52 |
| 62.98.42.239 | attackspambots | 2019-10-21 x@x 2019-10-21 13:22:03 unexpected disconnection while reading SMTP command from (ppp-239-42.98-62.wind.hostname) [62.98.42.239]:28180 I=[10.100.18.20]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=62.98.42.239 |
2019-10-21 19:56:04 |
| 101.2.166.138 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/101.2.166.138/ BD - 1H : (13) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BD NAME ASN : ASN38592 IP : 101.2.166.138 CIDR : 101.2.166.0/24 PREFIX COUNT : 34 UNIQUE IP COUNT : 8960 ATTACKS DETECTED ASN38592 : 1H - 1 3H - 1 6H - 1 12H - 2 24H - 2 DateTime : 2019-10-21 05:42:00 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery |
2019-10-21 19:36:45 |
| 149.3.91.158 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/149.3.91.158/ DE - 1H : (60) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : DE NAME ASN : ASN35805 IP : 149.3.91.158 CIDR : 149.3.0.0/17 PREFIX COUNT : 35 UNIQUE IP COUNT : 445440 ATTACKS DETECTED ASN35805 : 1H - 1 3H - 1 6H - 2 12H - 2 24H - 4 DateTime : 2019-10-21 05:42:00 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-21 19:36:25 |
| 106.13.58.170 | attackbots | fail2ban |
2019-10-21 19:39:50 |
| 81.22.45.150 | attackbots | 10/21/2019-06:55:54.172357 81.22.45.150 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 83 |
2019-10-21 19:42:47 |