City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 65.140.148.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63714
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;65.140.148.249. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 21:51:13 CST 2025
;; MSG SIZE rcvd: 107249.148.140.65.in-addr.arpa domain name pointer tpa-edge-16.inet.qwest.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
249.148.140.65.in-addr.arpa name = tpa-edge-16.inet.qwest.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 93.186.254.242 | attack | Nov 5 09:35:37 MK-Soft-VM4 sshd[14799]: Failed password for root from 93.186.254.242 port 35970 ssh2 Nov 5 09:39:38 MK-Soft-VM4 sshd[16980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.186.254.242 ... |
2019-11-05 17:15:31 |
| 37.150.28.178 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/37.150.28.178/ KZ - 1H : (6) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : KZ NAME ASN : ASN9198 IP : 37.150.28.178 CIDR : 37.150.16.0/20 PREFIX COUNT : 1223 UNIQUE IP COUNT : 1472256 ATTACKS DETECTED ASN9198 : 1H - 2 3H - 2 6H - 4 12H - 4 24H - 5 DateTime : 2019-11-05 07:26:20 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-05 17:37:10 |
| 188.127.126.58 | attackbotsspam | TCP Port Scanning |
2019-11-05 17:28:23 |
| 106.13.198.162 | attack | Nov 5 09:52:42 tux-35-217 sshd\[22248\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.198.162 user=root Nov 5 09:52:44 tux-35-217 sshd\[22248\]: Failed password for root from 106.13.198.162 port 36180 ssh2 Nov 5 09:58:06 tux-35-217 sshd\[22285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.198.162 user=root Nov 5 09:58:08 tux-35-217 sshd\[22285\]: Failed password for root from 106.13.198.162 port 44332 ssh2 ... |
2019-11-05 17:01:55 |
| 122.192.33.102 | attackspam | Nov 5 09:51:12 legacy sshd[12399]: Failed password for root from 122.192.33.102 port 43792 ssh2 Nov 5 09:56:27 legacy sshd[12511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.192.33.102 Nov 5 09:56:28 legacy sshd[12511]: Failed password for invalid user ftpuser from 122.192.33.102 port 51726 ssh2 ... |
2019-11-05 17:09:32 |
| 211.239.121.27 | attackspambots | Nov 5 08:30:02 jane sshd[23558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.239.121.27 Nov 5 08:30:04 jane sshd[23558]: Failed password for invalid user lukasz from 211.239.121.27 port 39124 ssh2 ... |
2019-11-05 17:28:03 |
| 37.187.0.20 | attackspambots | Nov 5 03:56:38 plusreed sshd[7652]: Invalid user ameen from 37.187.0.20 ... |
2019-11-05 17:31:21 |
| 103.122.247.154 | attackspam | Nov 5 08:34:37 MainVPS sshd[26535]: Invalid user Lobby from 103.122.247.154 port 55582 Nov 5 08:34:37 MainVPS sshd[26535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.122.247.154 Nov 5 08:34:37 MainVPS sshd[26535]: Invalid user Lobby from 103.122.247.154 port 55582 Nov 5 08:34:39 MainVPS sshd[26535]: Failed password for invalid user Lobby from 103.122.247.154 port 55582 ssh2 Nov 5 08:43:27 MainVPS sshd[27252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.122.247.154 user=root Nov 5 08:43:30 MainVPS sshd[27252]: Failed password for root from 103.122.247.154 port 37410 ssh2 ... |
2019-11-05 17:33:05 |
| 206.189.41.167 | attackbotsspam | Nov 5 09:09:27 srv206 sshd[6976]: Invalid user 0OO00OO00OO0OO00 from 206.189.41.167 ... |
2019-11-05 17:26:26 |
| 128.199.142.138 | attackbots | 2019-11-05T06:39:45.966120shield sshd\[32703\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138 user=root 2019-11-05T06:39:48.399242shield sshd\[32703\]: Failed password for root from 128.199.142.138 port 46554 ssh2 2019-11-05T06:44:03.815613shield sshd\[828\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138 user=root 2019-11-05T06:44:05.666751shield sshd\[828\]: Failed password for root from 128.199.142.138 port 56026 ssh2 2019-11-05T06:48:29.421721shield sshd\[1454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138 user=root |
2019-11-05 17:21:05 |
| 36.56.153.39 | attackbotsspam | Nov 4 10:23:22 josie sshd[4521]: Invalid user student from 36.56.153.39 Nov 4 10:23:22 josie sshd[4521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.56.153.39 Nov 4 10:23:25 josie sshd[4521]: Failed password for invalid user student from 36.56.153.39 port 25990 ssh2 Nov 4 10:23:25 josie sshd[4528]: Received disconnect from 36.56.153.39: 11: Bye Bye Nov 4 10:51:45 josie sshd[30356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.56.153.39 user=r.r Nov 4 10:51:48 josie sshd[30356]: Failed password for r.r from 36.56.153.39 port 21304 ssh2 Nov 4 10:51:48 josie sshd[30359]: Received disconnect from 36.56.153.39: 11: Bye Bye Nov 4 11:06:18 josie sshd[11403]: Invalid user XXX from 36.56.153.39 Nov 4 11:06:18 josie sshd[11403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.56.153.39 Nov 4 11:06:19 josie sshd[11403]: Failed passwor........ ------------------------------- |
2019-11-05 17:37:38 |
| 5.9.77.62 | attack | 2019-11-05T09:59:40.362047mail01 postfix/smtpd[6616]: warning: static.62.77.9.5.clients.your-server.de[5.9.77.62]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-05T10:04:19.180851mail01 postfix/smtpd[2976]: warning: static.62.77.9.5.clients.your-server.de[5.9.77.62]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-05T10:04:19.181216mail01 postfix/smtpd[14137]: warning: static.62.77.9.5.clients.your-server.de[5.9.77.62]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-05 17:08:11 |
| 167.71.99.77 | attackbotsspam | Fail2Ban Ban Triggered HTTP SQL Injection Attempt |
2019-11-05 17:35:05 |
| 94.23.147.35 | attack | Nov 5 07:13:44 TCP Attack: SRC=94.23.147.35 DST=[Masked] LEN=40 TOS=0x18 PREC=0x00 TTL=245 PROTO=TCP SPT=61000 DPT=80 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-11-05 17:31:08 |
| 84.243.12.99 | attackspam | TCP Port Scanning |
2019-11-05 17:14:07 |