City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 96.204.134.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53544
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;96.204.134.1. IN A
;; AUTHORITY SECTION:
. 535 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023041100 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 11 23:57:33 CST 2023
;; MSG SIZE rcvd: 105Host 1.134.204.96.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 1.134.204.96.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 54.37.151.239 | attackspambots | Nov 8 12:48:55 h2177944 sshd\[26543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.151.239 user=root Nov 8 12:48:57 h2177944 sshd\[26543\]: Failed password for root from 54.37.151.239 port 47764 ssh2 Nov 8 12:52:50 h2177944 sshd\[26722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.151.239 user=root Nov 8 12:52:52 h2177944 sshd\[26722\]: Failed password for root from 54.37.151.239 port 53969 ssh2 ... |
2019-11-08 20:43:08 |
| 117.73.2.103 | attack | SSH-bruteforce attempts |
2019-11-08 21:07:04 |
| 80.211.67.90 | attackbots | Nov 8 02:27:04 plusreed sshd[5903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.67.90 user=root Nov 8 02:27:06 plusreed sshd[5903]: Failed password for root from 80.211.67.90 port 43586 ssh2 ... |
2019-11-08 20:30:51 |
| 104.131.3.165 | attack | fail2ban honeypot |
2019-11-08 20:37:29 |
| 188.254.0.113 | attackspam | 2019-11-08T07:04:56.888611shield sshd\[3108\]: Invalid user mo123 from 188.254.0.113 port 58800 2019-11-08T07:04:56.892961shield sshd\[3108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.113 2019-11-08T07:04:58.737351shield sshd\[3108\]: Failed password for invalid user mo123 from 188.254.0.113 port 58800 ssh2 2019-11-08T07:08:44.929196shield sshd\[3610\]: Invalid user vpnguardbot123 from 188.254.0.113 port 36374 2019-11-08T07:08:44.933794shield sshd\[3610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.113 |
2019-11-08 20:59:52 |
| 83.103.98.211 | attack | 2019-11-08T12:37:12.560050abusebot.cloudsearch.cf sshd\[3553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83-103-98-211.ip.fastwebnet.it user=root |
2019-11-08 20:38:41 |
| 81.22.45.116 | attack | Nov 8 13:13:35 h2177944 kernel: \[6090818.892054\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=43016 PROTO=TCP SPT=49986 DPT=54869 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 8 13:16:10 h2177944 kernel: \[6090973.395295\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=62607 PROTO=TCP SPT=49986 DPT=54894 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 8 13:20:59 h2177944 kernel: \[6091262.122555\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=30885 PROTO=TCP SPT=49986 DPT=55136 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 8 13:24:23 h2177944 kernel: \[6091466.416371\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=12119 PROTO=TCP SPT=49986 DPT=54585 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 8 13:29:36 h2177944 kernel: \[6091779.043442\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.116 DST=85.214.117.9 |
2019-11-08 20:35:45 |
| 181.57.192.246 | attackspam | $f2bV_matches |
2019-11-08 21:10:31 |
| 218.246.5.112 | attackspambots | $f2bV_matches |
2019-11-08 21:13:34 |
| 185.162.235.84 | attackbotsspam | SASL Brute Force |
2019-11-08 20:41:54 |
| 68.183.54.160 | attackspambots | wp bruteforce |
2019-11-08 21:00:14 |
| 142.4.206.18 | attackbots | Nov 8 06:09:29 REDACTED sshd\[27204\]: Invalid user 159.89.7.18 from 142.4.206.18 Nov 8 06:12:35 REDACTED sshd\[27229\]: Invalid user 159.65.107.239 from 142.4.206.18 Nov 8 06:15:38 REDACTED sshd\[27255\]: Invalid user 159.203.21.22 from 142.4.206.18 Nov 8 06:18:38 REDACTED sshd\[27281\]: Invalid user 159.65.227.66 from 142.4.206.18 Nov 8 06:21:39 REDACTED sshd\[27376\]: Invalid user 159.65.44.50 from 142.4.206.18 ... |
2019-11-08 21:03:33 |
| 139.199.29.114 | attackspambots | Nov 8 10:28:40 tux-35-217 sshd\[12002\]: Invalid user wet from 139.199.29.114 port 36180 Nov 8 10:28:40 tux-35-217 sshd\[12002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.29.114 Nov 8 10:28:41 tux-35-217 sshd\[12002\]: Failed password for invalid user wet from 139.199.29.114 port 36180 ssh2 Nov 8 10:33:13 tux-35-217 sshd\[12019\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.29.114 user=root ... |
2019-11-08 20:50:00 |
| 101.99.80.99 | attackspam | Automatic report - Banned IP Access |
2019-11-08 21:06:41 |
| 198.211.96.12 | attackspambots | US from [198.211.96.12] port=50804 helo=TEST.localdomain |
2019-11-08 20:52:38 |