City: Central
Region: Central and Western Hong Kong Island
Country: Hong Kong
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.208.75.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8855
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.208.75.21. IN A
;; AUTHORITY SECTION:
. 332 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023060900 1800 900 604800 86400
;; Query time: 28 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 10 00:45:10 CST 2023
;; MSG SIZE rcvd: 106Host 21.75.208.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 21.75.208.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 119.18.157.10 | attack | Nov 24 22:36:01 MK-Soft-VM4 sshd[16632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.18.157.10 Nov 24 22:36:03 MK-Soft-VM4 sshd[16632]: Failed password for invalid user num from 119.18.157.10 port 12902 ssh2 ... |
2019-11-25 06:25:18 |
| 218.92.0.211 | attackspambots | Nov 24 23:07:44 eventyay sshd[4376]: Failed password for root from 218.92.0.211 port 54153 ssh2 Nov 24 23:08:31 eventyay sshd[4390]: Failed password for root from 218.92.0.211 port 60922 ssh2 ... |
2019-11-25 06:18:45 |
| 92.119.160.15 | attackbots | Nov 24 16:45:43 h2177944 kernel: \[7485695.745920\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.15 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=30983 PROTO=TCP SPT=43852 DPT=3337 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 24 16:46:38 h2177944 kernel: \[7485750.495109\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.15 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=52118 PROTO=TCP SPT=43852 DPT=7000 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 24 16:47:06 h2177944 kernel: \[7485779.116096\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.15 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=45889 PROTO=TCP SPT=43852 DPT=1002 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 24 16:49:12 h2177944 kernel: \[7485904.262583\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.15 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=50607 PROTO=TCP SPT=43852 DPT=3308 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 24 16:49:14 h2177944 kernel: \[7485906.393151\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.15 DST=85.214.117.9 |
2019-11-25 06:07:46 |
| 185.143.223.185 | attackspambots | Fail2Ban Ban Triggered |
2019-11-25 06:43:39 |
| 51.89.164.224 | attackspambots | Triggered by Fail2Ban at Ares web server |
2019-11-25 06:38:46 |
| 185.26.168.25 | attack | Automatic report - SSH Brute-Force Attack |
2019-11-25 06:33:22 |
| 202.146.235.79 | attack | Nov 24 19:12:27 server sshd\[17058\]: Invalid user admin from 202.146.235.79 Nov 24 19:12:27 server sshd\[17058\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.146.235.79 Nov 24 19:12:29 server sshd\[17058\]: Failed password for invalid user admin from 202.146.235.79 port 52588 ssh2 Nov 24 19:34:50 server sshd\[22803\]: Invalid user yuklung from 202.146.235.79 Nov 24 19:34:50 server sshd\[22803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.146.235.79 ... |
2019-11-25 06:09:55 |
| 37.146.144.141 | attackbots | Unauthorised access (Nov 24) SRC=37.146.144.141 LEN=52 TTL=115 ID=17135 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Nov 24) SRC=37.146.144.141 LEN=52 TTL=115 ID=17192 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-25 06:32:47 |
| 68.183.160.63 | attackspam | 2019-11-24T22:36:13.602729abusebot-6.cloudsearch.cf sshd\[20232\]: Invalid user fverma from 68.183.160.63 port 47194 |
2019-11-25 06:42:00 |
| 200.69.250.253 | attackspambots | Nov 24 23:02:23 andromeda sshd\[9574\]: Invalid user postgres from 200.69.250.253 port 43288 Nov 24 23:02:23 andromeda sshd\[9574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.69.250.253 Nov 24 23:02:25 andromeda sshd\[9574\]: Failed password for invalid user postgres from 200.69.250.253 port 43288 ssh2 |
2019-11-25 06:17:35 |
| 41.86.34.52 | attack | Nov 24 22:15:00 MK-Soft-VM7 sshd[19195]: Failed password for root from 41.86.34.52 port 36125 ssh2 ... |
2019-11-25 06:04:35 |
| 117.244.42.243 | attackbotsspam | Lines containing failures of 117.244.42.243 Nov 24 15:40:43 shared06 sshd[6950]: Invalid user admin from 117.244.42.243 port 33531 Nov 24 15:40:43 shared06 sshd[6950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.244.42.243 Nov 24 15:40:45 shared06 sshd[6950]: Failed password for invalid user admin from 117.244.42.243 port 33531 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.244.42.243 |
2019-11-25 06:04:08 |
| 45.162.189.144 | attackspam | Caught in portsentry honeypot |
2019-11-25 06:26:43 |
| 79.26.190.126 | attackspam | Nov 24 15:37:30 mxgate1 postfix/postscreen[32548]: CONNECT from [79.26.190.126]:64385 to [176.31.12.44]:25 Nov 24 15:37:30 mxgate1 postfix/dnsblog[32552]: addr 79.26.190.126 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 24 15:37:30 mxgate1 postfix/dnsblog[32549]: addr 79.26.190.126 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 24 15:37:30 mxgate1 postfix/dnsblog[32549]: addr 79.26.190.126 listed by domain zen.spamhaus.org as 127.0.0.10 Nov 24 15:37:30 mxgate1 postfix/dnsblog[32551]: addr 79.26.190.126 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Nov 24 15:37:30 mxgate1 postfix/dnsblog[32573]: addr 79.26.190.126 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 24 15:37:36 mxgate1 postfix/postscreen[32548]: DNSBL rank 5 for [79.26.190.126]:64385 Nov x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=79.26.190.126 |
2019-11-25 06:06:11 |
| 36.85.130.126 | attackbotsspam | Nov 24 23:22:36 vmd26974 sshd[24214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.85.130.126 Nov 24 23:22:38 vmd26974 sshd[24214]: Failed password for invalid user riegger from 36.85.130.126 port 44310 ssh2 ... |
2019-11-25 06:41:27 |