City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.8.120.202
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33920
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;106.8.120.202. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012301 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 09:00:10 CST 2025
;; MSG SIZE rcvd: 106Host 202.120.8.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 202.120.8.106.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 145.239.77.64 | attack | Sep 10 21:44:46 mercury sshd[15471]: Invalid user devuser from 145.239.77.64 port 41676 Sep 10 21:45:53 mercury sshd[15502]: Invalid user devuser from 145.239.77.64 port 47960 Sep 10 21:46:56 mercury sshd[15512]: Invalid user devuser from 145.239.77.64 port 54352 Sep 10 21:48:03 mercury sshd[15514]: Invalid user download from 145.239.77.64 port 60656 Sep 10 21:49:12 mercury sshd[15528]: Invalid user download from 145.239.77.64 port 38682 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=145.239.77.64 |
2019-09-11 11:15:40 |
| 138.0.7.157 | attack | Sep 10 23:47:15 keyhelp sshd[15136]: Invalid user admin from 138.0.7.157 Sep 10 23:47:15 keyhelp sshd[15136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.157 Sep 10 23:47:17 keyhelp sshd[15136]: Failed password for invalid user admin from 138.0.7.157 port 50294 ssh2 Sep 10 23:47:17 keyhelp sshd[15136]: Connection closed by 138.0.7.157 port 50294 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.0.7.157 |
2019-09-11 11:12:18 |
| 86.104.220.20 | attackspam | Sep 11 02:21:11 MK-Soft-VM4 sshd\[13746\]: Invalid user teamspeak from 86.104.220.20 port 54249 Sep 11 02:21:11 MK-Soft-VM4 sshd\[13746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.104.220.20 Sep 11 02:21:13 MK-Soft-VM4 sshd\[13746\]: Failed password for invalid user teamspeak from 86.104.220.20 port 54249 ssh2 ... |
2019-09-11 11:07:37 |
| 218.98.26.180 | attack | Sep 11 02:49:26 *** sshd[17610]: User root from 218.98.26.180 not allowed because not listed in AllowUsers |
2019-09-11 11:16:01 |
| 218.98.40.142 | attack | Sep 10 16:59:35 hiderm sshd\[3325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.142 user=root Sep 10 16:59:37 hiderm sshd\[3325\]: Failed password for root from 218.98.40.142 port 52081 ssh2 Sep 10 16:59:47 hiderm sshd\[3340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.142 user=root Sep 10 16:59:49 hiderm sshd\[3340\]: Failed password for root from 218.98.40.142 port 24802 ssh2 Sep 10 17:00:00 hiderm sshd\[3356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.142 user=root |
2019-09-11 11:11:57 |
| 221.204.144.140 | attackbots | firewall-block, port(s): 23/tcp |
2019-09-11 11:18:19 |
| 101.205.76.26 | attack | Sep 10 21:46:26 euve59663 sshd[12697]: Invalid user user from 101.205.7= 6.26 Sep 10 21:46:26 euve59663 sshd[12697]: pam_unix(sshd:auth): authenticat= ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D101= .205.76.26=20 Sep 10 21:46:28 euve59663 sshd[12697]: Failed password for invalid user= user from 101.205.76.26 port 39445 ssh2 Sep 10 21:46:29 euve59663 sshd[12697]: Failed password for invalid user= user from 101.205.76.26 port 39445 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=101.205.76.26 |
2019-09-11 10:56:25 |
| 188.20.52.25 | attackspam | Sep 11 01:57:23 ip-172-31-1-72 sshd\[7342\]: Invalid user 106 from 188.20.52.25 Sep 11 01:57:23 ip-172-31-1-72 sshd\[7342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.20.52.25 Sep 11 01:57:25 ip-172-31-1-72 sshd\[7342\]: Failed password for invalid user 106 from 188.20.52.25 port 60374 ssh2 Sep 11 02:04:45 ip-172-31-1-72 sshd\[7431\]: Invalid user 123 from 188.20.52.25 Sep 11 02:04:45 ip-172-31-1-72 sshd\[7431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.20.52.25 |
2019-09-11 11:06:49 |
| 104.248.185.25 | attackbots | Port scan attempt detected by AWS-CCS, CTS, India |
2019-09-11 11:26:41 |
| 5.39.79.48 | attack | Sep 11 04:49:40 markkoudstaal sshd[6308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.79.48 Sep 11 04:49:42 markkoudstaal sshd[6308]: Failed password for invalid user user22 from 5.39.79.48 port 58062 ssh2 Sep 11 04:56:05 markkoudstaal sshd[6884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.79.48 |
2019-09-11 11:09:23 |
| 189.187.214.162 | attackbotsspam | firewall-block, port(s): 23/tcp |
2019-09-11 11:24:07 |
| 129.204.139.206 | attack | Sep 10 17:10:49 eddieflores sshd\[7354\]: Invalid user usuario from 129.204.139.206 Sep 10 17:10:49 eddieflores sshd\[7354\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.139.206 Sep 10 17:10:50 eddieflores sshd\[7354\]: Failed password for invalid user usuario from 129.204.139.206 port 51792 ssh2 Sep 10 17:17:51 eddieflores sshd\[7971\]: Invalid user tommy from 129.204.139.206 Sep 10 17:17:51 eddieflores sshd\[7971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.139.206 |
2019-09-11 11:26:05 |
| 195.154.169.244 | attack | Sep 10 22:22:17 hcbbdb sshd\[7251\]: Invalid user admin from 195.154.169.244 Sep 10 22:22:17 hcbbdb sshd\[7251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195-154-169-244.rev.poneytelecom.eu Sep 10 22:22:19 hcbbdb sshd\[7251\]: Failed password for invalid user admin from 195.154.169.244 port 37924 ssh2 Sep 10 22:28:11 hcbbdb sshd\[7931\]: Invalid user admin from 195.154.169.244 Sep 10 22:28:11 hcbbdb sshd\[7931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195-154-169-244.rev.poneytelecom.eu |
2019-09-11 11:41:56 |
| 218.98.26.183 | attack | SSH Brute Force, server-1 sshd[5105]: Failed password for root from 218.98.26.183 port 56341 ssh2 |
2019-09-11 11:03:56 |
| 58.254.132.239 | attackbotsspam | Sep 10 23:27:16 ny01 sshd[4410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.239 Sep 10 23:27:18 ny01 sshd[4410]: Failed password for invalid user 1234567 from 58.254.132.239 port 21486 ssh2 Sep 10 23:30:09 ny01 sshd[5195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.239 |
2019-09-11 11:37:46 |