City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 76.96.129.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3969
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;76.96.129.145. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012301 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 03:38:20 CST 2025
;; MSG SIZE rcvd: 106Host 145.129.96.76.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 145.129.96.76.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 122.14.217.58 | attack | Unauthorized SSH login attempts |
2019-12-03 17:45:32 |
| 77.247.108.77 | attackbots | 12/03/2019-04:34:46.543772 77.247.108.77 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 75 |
2019-12-03 17:39:43 |
| 80.22.196.101 | attackspambots | fail2ban |
2019-12-03 17:36:36 |
| 139.199.80.67 | attackbots | Dec 3 09:59:12 microserver sshd[13968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.80.67 user=root Dec 3 09:59:13 microserver sshd[13968]: Failed password for root from 139.199.80.67 port 39416 ssh2 Dec 3 10:06:16 microserver sshd[15227]: Invalid user admin0 from 139.199.80.67 port 45856 Dec 3 10:06:16 microserver sshd[15227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.80.67 Dec 3 10:06:18 microserver sshd[15227]: Failed password for invalid user admin0 from 139.199.80.67 port 45856 ssh2 Dec 3 10:20:11 microserver sshd[17353]: Invalid user przybycien from 139.199.80.67 port 58734 Dec 3 10:20:11 microserver sshd[17353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.80.67 Dec 3 10:20:13 microserver sshd[17353]: Failed password for invalid user przybycien from 139.199.80.67 port 58734 ssh2 Dec 3 10:26:35 microserver sshd[18233]: Invalid user host fr |
2019-12-03 17:38:13 |
| 51.91.136.174 | attackbots | Dec 3 10:08:21 nextcloud sshd\[27404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.136.174 user=root Dec 3 10:08:23 nextcloud sshd\[27404\]: Failed password for root from 51.91.136.174 port 50242 ssh2 Dec 3 10:12:29 nextcloud sshd\[2888\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.136.174 user=root ... |
2019-12-03 17:31:55 |
| 51.83.42.244 | attackspam | SSH brutforce |
2019-12-03 17:43:26 |
| 187.232.37.192 | attackspambots | Dec 3 07:27:19 vps sshd[11252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.232.37.192 Dec 3 07:27:19 vps sshd[11253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.232.37.192 Dec 3 07:27:21 vps sshd[11252]: Failed password for invalid user pi from 187.232.37.192 port 46826 ssh2 ... |
2019-12-03 17:19:14 |
| 92.157.31.172 | attackspam | Port 22 Scan, PTR: None |
2019-12-03 17:17:16 |
| 142.93.209.221 | attackbotsspam | 142.93.209.221 - - \[03/Dec/2019:07:26:57 +0100\] "POST /wp-login.php HTTP/1.0" 200 7538 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 142.93.209.221 - - \[03/Dec/2019:07:27:05 +0100\] "POST /wp-login.php HTTP/1.0" 200 7363 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 142.93.209.221 - - \[03/Dec/2019:07:27:08 +0100\] "POST /wp-login.php HTTP/1.0" 200 7358 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-12-03 17:39:10 |
| 123.21.104.64 | attackspam | Lines containing failures of 123.21.104.64 Dec 3 06:21:01 keyhelp sshd[22028]: Invalid user admin from 123.21.104.64 port 41213 Dec 3 06:21:01 keyhelp sshd[22028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.21.104.64 Dec 3 06:21:02 keyhelp sshd[22028]: Failed password for invalid user admin from 123.21.104.64 port 41213 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=123.21.104.64 |
2019-12-03 17:38:45 |
| 209.141.44.192 | attackspambots | Dec 3 09:50:10 server sshd\[3431\]: Invalid user claire from 209.141.44.192 Dec 3 09:50:10 server sshd\[3431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.44.192 Dec 3 09:50:12 server sshd\[3431\]: Failed password for invalid user claire from 209.141.44.192 port 60176 ssh2 Dec 3 10:04:30 server sshd\[6850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.44.192 user=root Dec 3 10:04:32 server sshd\[6850\]: Failed password for root from 209.141.44.192 port 57872 ssh2 ... |
2019-12-03 17:30:31 |
| 34.94.143.250 | attack | Port 22 Scan, PTR: None |
2019-12-03 17:41:36 |
| 216.10.249.73 | attackbotsspam | Dec 3 09:34:48 lnxweb62 sshd[30606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.10.249.73 |
2019-12-03 17:23:25 |
| 5.178.87.219 | attackbots | Dec 3 04:16:19 plusreed sshd[16631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.178.87.219 user=root Dec 3 04:16:20 plusreed sshd[16631]: Failed password for root from 5.178.87.219 port 42646 ssh2 ... |
2019-12-03 17:22:35 |
| 185.143.223.183 | attackbots | 2019-12-03T10:06:54.224863+01:00 lumpi kernel: [653971.501518] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=185.143.223.183 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=20302 PROTO=TCP SPT=59345 DPT=12843 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-12-03 17:37:41 |