City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 68.137.156.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42703
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;68.137.156.92. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020601 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 05:15:51 CST 2025
;; MSG SIZE rcvd: 106Host 92.156.137.68.in-addr.arpa not found: 2(SERVFAIL)
server can't find 68.137.156.92.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.136.109.50 | attack | Sep 19 17:49:51 mc1 kernel: \[194653.709007\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.50 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=37591 PROTO=TCP SPT=48372 DPT=9696 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 19 17:56:00 mc1 kernel: \[195022.090116\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.50 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=34475 PROTO=TCP SPT=48372 DPT=9536 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 19 17:56:02 mc1 kernel: \[195024.079515\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.50 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=46547 PROTO=TCP SPT=48372 DPT=9158 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-20 01:02:03 |
| 14.226.232.79 | attackbots | 2019-09-19T11:49:56.403379+01:00 suse sshd[19147]: Invalid user admin from 14.226.232.79 port 59467 2019-09-19T11:49:59.907209+01:00 suse sshd[19147]: error: PAM: User not known to the underlying authentication module for illegal user admin from 14.226.232.79 2019-09-19T11:49:56.403379+01:00 suse sshd[19147]: Invalid user admin from 14.226.232.79 port 59467 2019-09-19T11:49:59.907209+01:00 suse sshd[19147]: error: PAM: User not known to the underlying authentication module for illegal user admin from 14.226.232.79 2019-09-19T11:49:56.403379+01:00 suse sshd[19147]: Invalid user admin from 14.226.232.79 port 59467 2019-09-19T11:49:59.907209+01:00 suse sshd[19147]: error: PAM: User not known to the underlying authentication module for illegal user admin from 14.226.232.79 2019-09-19T11:49:59.908599+01:00 suse sshd[19147]: Failed keyboard-interactive/pam for invalid user admin from 14.226.232.79 port 59467 ssh2 ... |
2019-09-20 01:05:01 |
| 218.60.41.227 | attackspambots | Sep 19 06:17:29 auw2 sshd\[2273\]: Invalid user ashok from 218.60.41.227 Sep 19 06:17:29 auw2 sshd\[2273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.60.41.227 Sep 19 06:17:31 auw2 sshd\[2273\]: Failed password for invalid user ashok from 218.60.41.227 port 44849 ssh2 Sep 19 06:22:32 auw2 sshd\[2851\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.60.41.227 user=root Sep 19 06:22:34 auw2 sshd\[2851\]: Failed password for root from 218.60.41.227 port 37037 ssh2 |
2019-09-20 01:28:18 |
| 76.21.34.25 | attack | Triggered by Fail2Ban at Vostok web server |
2019-09-20 01:01:07 |
| 115.186.146.80 | attackspam | Unauthorised access (Sep 19) SRC=115.186.146.80 LEN=40 TOS=0x10 PREC=0x40 TTL=241 ID=9219 TCP DPT=445 WINDOW=1024 SYN |
2019-09-20 01:09:36 |
| 92.119.160.247 | attackspam | Port scan attempt detected by AWS-CCS, CTS, India |
2019-09-20 01:33:26 |
| 153.36.242.143 | attackspam | Sep 19 12:57:39 ny01 sshd[17623]: Failed password for root from 153.36.242.143 port 64241 ssh2 Sep 19 12:57:42 ny01 sshd[17623]: Failed password for root from 153.36.242.143 port 64241 ssh2 Sep 19 12:57:44 ny01 sshd[17623]: Failed password for root from 153.36.242.143 port 64241 ssh2 |
2019-09-20 00:59:12 |
| 181.211.129.98 | attackspambots | 2019-09-19T11:49:25.719410+01:00 suse sshd[19128]: Invalid user admin from 181.211.129.98 port 60913 2019-09-19T11:49:32.418169+01:00 suse sshd[19128]: error: PAM: User not known to the underlying authentication module for illegal user admin from 181.211.129.98 2019-09-19T11:49:25.719410+01:00 suse sshd[19128]: Invalid user admin from 181.211.129.98 port 60913 2019-09-19T11:49:32.418169+01:00 suse sshd[19128]: error: PAM: User not known to the underlying authentication module for illegal user admin from 181.211.129.98 2019-09-19T11:49:25.719410+01:00 suse sshd[19128]: Invalid user admin from 181.211.129.98 port 60913 2019-09-19T11:49:32.418169+01:00 suse sshd[19128]: error: PAM: User not known to the underlying authentication module for illegal user admin from 181.211.129.98 2019-09-19T11:49:32.419643+01:00 suse sshd[19128]: Failed keyboard-interactive/pam for invalid user admin from 181.211.129.98 port 60913 ssh2 ... |
2019-09-20 01:25:18 |
| 118.89.35.251 | attack | Sep 19 13:02:51 localhost sshd\[109828\]: Invalid user dale from 118.89.35.251 port 42122 Sep 19 13:02:51 localhost sshd\[109828\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.35.251 Sep 19 13:02:53 localhost sshd\[109828\]: Failed password for invalid user dale from 118.89.35.251 port 42122 ssh2 Sep 19 13:06:58 localhost sshd\[109987\]: Invalid user elvis from 118.89.35.251 port 44816 Sep 19 13:06:58 localhost sshd\[109987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.35.251 ... |
2019-09-20 01:11:50 |
| 222.124.16.227 | attackspam | Sep 19 17:24:05 localhost sshd\[31211\]: Invalid user srinivas from 222.124.16.227 port 52786 Sep 19 17:24:05 localhost sshd\[31211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.124.16.227 Sep 19 17:24:07 localhost sshd\[31211\]: Failed password for invalid user srinivas from 222.124.16.227 port 52786 ssh2 |
2019-09-20 01:34:14 |
| 59.92.68.23 | attack | 2019-09-19T11:49:36.086447+01:00 suse sshd[19132]: Invalid user Admin from 59.92.68.23 port 41863 2019-09-19T11:49:39.585317+01:00 suse sshd[19132]: error: PAM: User not known to the underlying authentication module for illegal user Admin from 59.92.68.23 2019-09-19T11:49:36.086447+01:00 suse sshd[19132]: Invalid user Admin from 59.92.68.23 port 41863 2019-09-19T11:49:39.585317+01:00 suse sshd[19132]: error: PAM: User not known to the underlying authentication module for illegal user Admin from 59.92.68.23 2019-09-19T11:49:36.086447+01:00 suse sshd[19132]: Invalid user Admin from 59.92.68.23 port 41863 2019-09-19T11:49:39.585317+01:00 suse sshd[19132]: error: PAM: User not known to the underlying authentication module for illegal user Admin from 59.92.68.23 2019-09-19T11:49:39.585901+01:00 suse sshd[19132]: Failed keyboard-interactive/pam for invalid user Admin from 59.92.68.23 port 41863 ssh2 ... |
2019-09-20 01:14:23 |
| 5.135.135.116 | attackbotsspam | Sep 19 06:56:35 lcprod sshd\[27339\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=garage.neezzmail.com user=root Sep 19 06:56:37 lcprod sshd\[27339\]: Failed password for root from 5.135.135.116 port 49240 ssh2 Sep 19 07:00:44 lcprod sshd\[27745\]: Invalid user daniel from 5.135.135.116 Sep 19 07:00:44 lcprod sshd\[27745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=garage.neezzmail.com Sep 19 07:00:46 lcprod sshd\[27745\]: Failed password for invalid user daniel from 5.135.135.116 port 42029 ssh2 |
2019-09-20 01:02:39 |
| 221.218.66.225 | attackspam | Sep 19 17:03:54 ArkNodeAT sshd\[2700\]: Invalid user demo from 221.218.66.225 Sep 19 17:03:54 ArkNodeAT sshd\[2700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.218.66.225 Sep 19 17:03:56 ArkNodeAT sshd\[2700\]: Failed password for invalid user demo from 221.218.66.225 port 39062 ssh2 |
2019-09-20 01:36:47 |
| 122.116.174.239 | attack | Automatic report - Banned IP Access |
2019-09-20 01:33:03 |
| 81.22.45.165 | attackbots | Sep 19 19:20:05 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.165 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=28211 PROTO=TCP SPT=46887 DPT=5899 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-20 01:27:29 |