City: Beijing
Region: Beijing
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.54.152.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36903
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.54.152.21. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019081800 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 19 00:35:52 CST 2019
;; MSG SIZE rcvd: 117Host 21.152.54.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 21.152.54.106.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 194.36.191.134 | attackbots | Unauthorized connection attempt detected from IP address 194.36.191.134 to port 6379 |
2020-03-31 14:31:16 |
| 165.22.61.82 | attackspam | Brute-force attempt banned |
2020-03-31 14:05:20 |
| 121.146.30.65 | attack | port |
2020-03-31 14:08:57 |
| 2601:589:4480:a5a0:84b2:5a83:9c77:56fe | attackspambots | IP address logged by my Netflix account after the individual hacked into and locked me out of my account. Individual also changed my account settings to the most expensive plan, which allows multiple people (profiles) to watch, and several profiles were added. The name on my account was changed to "Juan". I contacted Netflix to have my account restored, so I was able to see the various IP addresses used. I will report all of them as well. |
2020-03-31 14:21:55 |
| 65.182.2.241 | attackbots | Invalid user sin from 65.182.2.241 port 56760 |
2020-03-31 14:05:04 |
| 51.161.51.147 | attackbotsspam | Invalid user jug from 51.161.51.147 port 37752 |
2020-03-31 14:11:31 |
| 114.67.100.234 | attack | Mar 31 03:53:21 *** sshd[14396]: User root from 114.67.100.234 not allowed because not listed in AllowUsers |
2020-03-31 14:09:30 |
| 51.178.53.238 | attackbots | Lines containing failures of 51.178.53.238 Mar 31 00:04:09 shared02 sshd[5558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.53.238 user=r.r Mar 31 00:04:11 shared02 sshd[5558]: Failed password for r.r from 51.178.53.238 port 34846 ssh2 Mar 31 00:04:11 shared02 sshd[5558]: Received disconnect from 51.178.53.238 port 34846:11: Bye Bye [preauth] Mar 31 00:04:11 shared02 sshd[5558]: Disconnected from authenticating user r.r 51.178.53.238 port 34846 [preauth] Mar 31 00:15:32 shared02 sshd[13430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.53.238 user=r.r Mar 31 00:15:34 shared02 sshd[13430]: Failed password for r.r from 51.178.53.238 port 35126 ssh2 Mar 31 00:15:34 shared02 sshd[13430]: Received disconnect from 51.178.53.238 port 35126:11: Bye Bye [preauth] Mar 31 00:15:34 shared02 sshd[13430]: Disconnected from authenticating user r.r 51.178.53.238 port 35126 [preauth] Ma........ ------------------------------ |
2020-03-31 14:21:21 |
| 189.69.116.172 | attackbots | Mar 30 18:39:06 hanapaa sshd\[1285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189-69-116-172.dsl.telesp.net.br user=root Mar 30 18:39:08 hanapaa sshd\[1285\]: Failed password for root from 189.69.116.172 port 39874 ssh2 Mar 30 18:45:24 hanapaa sshd\[1766\]: Invalid user student from 189.69.116.172 Mar 30 18:45:24 hanapaa sshd\[1766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189-69-116-172.dsl.telesp.net.br Mar 30 18:45:26 hanapaa sshd\[1766\]: Failed password for invalid user student from 189.69.116.172 port 47558 ssh2 |
2020-03-31 14:10:40 |
| 114.67.80.209 | attack | Mar 31 00:06:34 ny01 sshd[11027]: Failed password for root from 114.67.80.209 port 37972 ssh2 Mar 31 00:10:52 ny01 sshd[12098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.80.209 Mar 31 00:10:54 ny01 sshd[12098]: Failed password for invalid user apex from 114.67.80.209 port 37722 ssh2 |
2020-03-31 14:12:10 |
| 104.131.46.166 | attack | Invalid user willetta from 104.131.46.166 port 56974 |
2020-03-31 14:19:28 |
| 77.55.210.188 | attackspam | $f2bV_matches |
2020-03-31 14:20:02 |
| 49.231.159.205 | attack | SSH Bruteforce attack |
2020-03-31 14:17:29 |
| 58.218.150.170 | attackspambots | 2020-03-31T05:46:44.118108 sshd[12240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.218.150.170 user=root 2020-03-31T05:46:46.055021 sshd[12240]: Failed password for root from 58.218.150.170 port 40652 ssh2 2020-03-31T05:53:03.889669 sshd[12279]: Invalid user www from 58.218.150.170 port 50228 ... |
2020-03-31 14:22:57 |
| 160.16.93.86 | attack | Mar 30 20:08:41 sachi sshd\[19893\]: Invalid user wx from 160.16.93.86 Mar 30 20:08:41 sachi sshd\[19893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=tk2-222-20832.vs.sakura.ne.jp Mar 30 20:08:43 sachi sshd\[19893\]: Failed password for invalid user wx from 160.16.93.86 port 33372 ssh2 Mar 30 20:13:33 sachi sshd\[20361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=tk2-222-20832.vs.sakura.ne.jp user=root Mar 30 20:13:35 sachi sshd\[20361\]: Failed password for root from 160.16.93.86 port 40736 ssh2 |
2020-03-31 14:23:36 |