City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 72.168.134.150
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38265
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;72.168.134.150. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022702 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 05:15:20 CST 2025
;; MSG SIZE rcvd: 107Host 150.134.168.72.in-addr.arpa not found: 2(SERVFAIL)
server can't find 72.168.134.150.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 148.70.242.55 | attack | Nov 14 01:27:05 lanister sshd[25493]: Failed password for root from 148.70.242.55 port 38398 ssh2 Nov 14 01:27:03 lanister sshd[25493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.242.55 user=root Nov 14 01:27:05 lanister sshd[25493]: Failed password for root from 148.70.242.55 port 38398 ssh2 Nov 14 01:27:06 lanister sshd[25493]: error: Received disconnect from 148.70.242.55 port 38398:3: com.jcraft.jsch.JSchException: Auth fail [preauth] ... |
2019-11-14 17:23:51 |
| 188.213.49.210 | attack | Wordpress scan and BF atack |
2019-11-14 17:27:21 |
| 150.109.170.68 | attackspambots | Automatic report - Banned IP Access |
2019-11-14 17:07:51 |
| 118.42.125.170 | attackspam | Nov 14 10:04:56 dedicated sshd[12340]: Invalid user odoo from 118.42.125.170 port 39692 |
2019-11-14 17:24:06 |
| 185.32.63.21 | attack | Autoban 185.32.63.21 AUTH/CONNECT |
2019-11-14 17:21:49 |
| 112.44.238.93 | attackbots | Fail2Ban Ban Triggered |
2019-11-14 17:17:00 |
| 217.17.117.26 | attack | Fail2Ban Ban Triggered |
2019-11-14 17:29:05 |
| 195.154.157.16 | attackspambots | 195.154.157.16 - - \[14/Nov/2019:07:27:32 +0100\] "POST /wp-login.php HTTP/1.0" 200 4474 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 195.154.157.16 - - \[14/Nov/2019:07:27:33 +0100\] "POST /wp-login.php HTTP/1.0" 200 4287 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 195.154.157.16 - - \[14/Nov/2019:07:27:33 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-14 17:01:07 |
| 14.235.92.29 | attack | " " |
2019-11-14 17:03:21 |
| 222.186.180.17 | attackspam | 2019-11-14T09:18:10.913804shield sshd\[20844\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root 2019-11-14T09:18:13.486518shield sshd\[20844\]: Failed password for root from 222.186.180.17 port 26608 ssh2 2019-11-14T09:18:16.534753shield sshd\[20844\]: Failed password for root from 222.186.180.17 port 26608 ssh2 2019-11-14T09:18:19.995172shield sshd\[20844\]: Failed password for root from 222.186.180.17 port 26608 ssh2 2019-11-14T09:18:24.185823shield sshd\[20844\]: Failed password for root from 222.186.180.17 port 26608 ssh2 |
2019-11-14 17:19:55 |
| 180.76.120.86 | attackbotsspam | Nov 12 22:10:52 dax sshd[31199]: Invalid user kpaalberta from 180.76.120.86 Nov 12 22:10:52 dax sshd[31199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.86 Nov 12 22:10:54 dax sshd[31199]: Failed password for invalid user kpaalberta from 180.76.120.86 port 57306 ssh2 Nov 12 22:10:54 dax sshd[31199]: Received disconnect from 180.76.120.86: 11: Bye Bye [preauth] Nov 12 22:23:40 dax sshd[541]: Invalid user flattard from 180.76.120.86 Nov 12 22:23:40 dax sshd[541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.86 Nov 12 22:23:42 dax sshd[541]: Failed password for invalid user flattard from 180.76.120.86 port 51754 ssh2 Nov 12 22:23:42 dax sshd[541]: Received disconnect from 180.76.120.86: 11: Bye Bye [preauth] Nov 12 22:27:56 dax sshd[1141]: Invalid user test from 180.76.120.86 Nov 12 22:27:56 dax sshd[1141]: pam_unix(sshd:auth): authentication failure; logname= uid........ ------------------------------- |
2019-11-14 17:03:41 |
| 191.17.52.175 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/191.17.52.175/ BR - 1H : (340) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN27699 IP : 191.17.52.175 CIDR : 191.17.0.0/16 PREFIX COUNT : 267 UNIQUE IP COUNT : 6569728 ATTACKS DETECTED ASN27699 : 1H - 8 3H - 19 6H - 37 12H - 71 24H - 95 DateTime : 2019-11-14 07:27:17 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-14 17:16:00 |
| 132.145.170.174 | attackspambots | Nov 14 09:21:28 dedicated sshd[5368]: Invalid user ina from 132.145.170.174 port 57270 |
2019-11-14 17:25:34 |
| 107.172.54.62 | attack | 14.11.2019 06:27:30 Recursive DNS scan |
2019-11-14 17:06:38 |
| 109.166.164.218 | attack | IMAP |
2019-11-14 17:22:37 |