City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 68.71.130.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31087
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;68.71.130.0. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020302 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 08:30:44 CST 2025
;; MSG SIZE rcvd: 104Host 0.130.71.68.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 0.130.71.68.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.59.92.57 | attackspam | 139.59.92.57 - - [28/Jul/2019:13:31:05 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.92.57 - - [28/Jul/2019:13:31:06 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.92.57 - - [28/Jul/2019:13:31:08 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.92.57 - - [28/Jul/2019:13:31:11 +0200] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.92.57 - - [28/Jul/2019:13:31:11 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.92.57 - - [28/Jul/2019:13:31:23 +0200] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-07-28 19:40:29 |
| 143.0.191.246 | attackspam | Automatic report - Port Scan Attack |
2019-07-28 19:24:57 |
| 50.116.116.244 | attackspam | fail2ban honeypot |
2019-07-28 19:38:10 |
| 68.183.191.99 | attackspam | 2019-07-28 07:46:18,963 fail2ban.actions [1802]: NOTICE [sshd] Ban 68.183.191.99 |
2019-07-28 19:57:26 |
| 77.247.109.35 | attackspam | \[2019-07-28 07:28:40\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-28T07:28:40.207-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441519470519",SessionID="0x7ff4d004fe18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.35/50815",ACLName="no_extension_match" \[2019-07-28 07:30:01\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-28T07:30:01.596-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441519470519",SessionID="0x7ff4d004fe18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.35/63901",ACLName="no_extension_match" \[2019-07-28 07:31:21\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-28T07:31:21.552-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="001441519470519",SessionID="0x7ff4d051f0b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.35/59029",ACLName="no_ex |
2019-07-28 19:41:15 |
| 219.84.203.57 | attack | Jul 28 13:52:23 mintao sshd\[30301\]: Address 219.84.203.57 maps to zhan-yang.com.tw, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!\ Jul 28 13:52:23 mintao sshd\[30301\]: Invalid user kor from 219.84.203.57\ |
2019-07-28 19:53:33 |
| 198.23.189.18 | attack | Jul 28 07:27:01 plusreed sshd[24969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.23.189.18 user=root Jul 28 07:27:03 plusreed sshd[24969]: Failed password for root from 198.23.189.18 port 50431 ssh2 Jul 28 07:31:11 plusreed sshd[26925]: Invalid user from 198.23.189.18 ... |
2019-07-28 19:46:10 |
| 218.92.0.193 | attack | SSH Brute-Force attacks |
2019-07-28 19:39:32 |
| 167.71.60.104 | attackspam | *Port Scan* detected from 167.71.60.104 (DE/Germany/-). 4 hits in the last 85 seconds |
2019-07-28 19:14:37 |
| 199.243.155.99 | attackbots | Jul 28 04:14:24 localhost sshd\[91046\]: Invalid user werner from 199.243.155.99 port 45354 Jul 28 04:14:24 localhost sshd\[91046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.243.155.99 Jul 28 04:14:26 localhost sshd\[91046\]: Failed password for invalid user werner from 199.243.155.99 port 45354 ssh2 Jul 28 04:18:57 localhost sshd\[91180\]: Invalid user !Z@X3c4v from 199.243.155.99 port 43744 Jul 28 04:18:57 localhost sshd\[91180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.243.155.99 ... |
2019-07-28 19:30:23 |
| 113.123.119.202 | attackbots | port scan and connect, tcp 23 (telnet) |
2019-07-28 19:11:18 |
| 167.114.192.162 | attack | Automatic report - Banned IP Access |
2019-07-28 19:32:19 |
| 45.227.253.214 | attack | Jul 28 13:38:22 mail postfix/smtpd\[30231\]: warning: unknown\[45.227.253.214\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 28 13:38:40 mail postfix/smtpd\[30459\]: warning: unknown\[45.227.253.214\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 28 13:38:45 mail postfix/smtpd\[24958\]: warning: unknown\[45.227.253.214\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-07-28 19:48:04 |
| 103.129.221.62 | attack | Jul 28 14:41:15 yabzik sshd[32366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.129.221.62 Jul 28 14:41:17 yabzik sshd[32366]: Failed password for invalid user sadly from 103.129.221.62 port 47122 ssh2 Jul 28 14:46:30 yabzik sshd[1537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.129.221.62 |
2019-07-28 19:52:08 |
| 177.124.216.10 | attackspambots | Jul 28 11:31:19 unicornsoft sshd\[30666\]: User root from 177.124.216.10 not allowed because not listed in AllowUsers Jul 28 11:31:19 unicornsoft sshd\[30666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.124.216.10 user=root Jul 28 11:31:22 unicornsoft sshd\[30666\]: Failed password for invalid user root from 177.124.216.10 port 54834 ssh2 |
2019-07-28 19:42:13 |