City: Elk City
Region: Oklahoma
Country: United States
Internet Service Provider: AT&T
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.142.201.168
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47325
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;66.142.201.168. IN A
;; AUTHORITY SECTION:
. 451 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020070801 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 09 07:42:40 CST 2020
;; MSG SIZE rcvd: 118Host 168.201.142.66.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 168.201.142.66.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 199.195.249.6 | attackbotsspam | Nov 9 17:54:18 cp sshd[5119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.195.249.6 Nov 9 17:54:18 cp sshd[5119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.195.249.6 |
2019-11-10 02:52:10 |
| 139.59.228.226 | attackspambots | 139.59.228.226 - - [09/Nov/2019:17:09:11 +0100] "POST /wp-login.php HTTP/1.1" 200 2112 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.228.226 - - [09/Nov/2019:17:09:14 +0100] "POST /wp-login.php HTTP/1.1" 200 2093 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-11-10 02:20:42 |
| 106.208.90.150 | attackspam | php WP PHPmyadamin ABUSE blocked for 12h |
2019-11-10 02:31:19 |
| 195.29.105.125 | attackspam | Nov 9 18:20:24 MK-Soft-VM7 sshd[27027]: Failed password for root from 195.29.105.125 port 57732 ssh2 ... |
2019-11-10 02:40:41 |
| 103.105.65.85 | attackbotsspam | Nov 9 17:18:35 vmd17057 sshd\[11549\]: Invalid user sniffer from 103.105.65.85 port 51035 Nov 9 17:18:39 vmd17057 sshd\[11549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.105.65.85 Nov 9 17:18:41 vmd17057 sshd\[11549\]: Failed password for invalid user sniffer from 103.105.65.85 port 51035 ssh2 ... |
2019-11-10 02:42:02 |
| 112.85.42.227 | attackbotsspam | Nov 9 12:59:50 TORMINT sshd\[5359\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.227 user=root Nov 9 12:59:52 TORMINT sshd\[5359\]: Failed password for root from 112.85.42.227 port 11550 ssh2 Nov 9 13:04:09 TORMINT sshd\[5734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.227 user=root ... |
2019-11-10 02:19:46 |
| 123.206.30.83 | attack | Nov 9 17:23:48 serwer sshd\[18674\]: Invalid user temp123 from 123.206.30.83 port 56708 Nov 9 17:23:48 serwer sshd\[18674\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.30.83 Nov 9 17:23:50 serwer sshd\[18674\]: Failed password for invalid user temp123 from 123.206.30.83 port 56708 ssh2 ... |
2019-11-10 02:46:42 |
| 73.189.112.132 | attackspambots | Nov 9 18:15:09 OneL sshd\[23266\]: Invalid user phillips from 73.189.112.132 port 53864 Nov 9 18:15:09 OneL sshd\[23266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.189.112.132 Nov 9 18:15:10 OneL sshd\[23266\]: Failed password for invalid user phillips from 73.189.112.132 port 53864 ssh2 Nov 9 18:18:58 OneL sshd\[23342\]: Invalid user lolilol from 73.189.112.132 port 33958 Nov 9 18:18:58 OneL sshd\[23342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.189.112.132 ... |
2019-11-10 02:21:40 |
| 87.5.20.16 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/87.5.20.16/ IT - 1H : (115) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IT NAME ASN : ASN3269 IP : 87.5.20.16 CIDR : 87.4.0.0/15 PREFIX COUNT : 550 UNIQUE IP COUNT : 19507712 ATTACKS DETECTED ASN3269 : 1H - 3 3H - 10 6H - 18 12H - 31 24H - 63 DateTime : 2019-11-09 17:19:12 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-11-10 02:19:12 |
| 203.95.193.192 | attackspam | Trying ports that it shouldn't be. |
2019-11-10 02:43:24 |
| 35.192.117.31 | attack | Nov 9 18:02:38 lnxmail61 sshd[17921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.192.117.31 |
2019-11-10 02:17:44 |
| 141.255.9.3 | attack | Hits on port : 2323 |
2019-11-10 02:29:50 |
| 220.94.205.234 | attackbots | 2019-11-09T16:48:45.357737abusebot-5.cloudsearch.cf sshd\[14879\]: Invalid user hp from 220.94.205.234 port 47390 |
2019-11-10 02:53:18 |
| 218.92.0.147 | attackspam | error: maximum authentication attempts exceeded for root from 218.92.0.147 port 6180 ssh2 \[preauth\] pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.147 user=root Failed password for root from 218.92.0.147 port 29432 ssh2 Failed password for root from 218.92.0.147 port 29432 ssh2 Failed password for root from 218.92.0.147 port 29432 ssh2 |
2019-11-10 02:56:19 |
| 165.22.191.129 | attackspam | xmlrpc attack |
2019-11-10 02:34:48 |