City: unknown
Region: Fujian
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.111.159.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8187
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;112.111.159.212. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026090901 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 10 05:01:58 CST 2026
;; MSG SIZE rcvd: 108
Host 212.159.111.112.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 212.159.111.112.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 110.138.203.181 | attackspam | 1592568850 - 06/19/2020 14:14:10 Host: 110.138.203.181/110.138.203.181 Port: 445 TCP Blocked |
2020-06-20 01:23:29 |
| 112.85.42.104 | attack | Jun 19 17:16:22 rush sshd[2190]: Failed password for root from 112.85.42.104 port 54235 ssh2 Jun 19 17:16:33 rush sshd[2197]: Failed password for root from 112.85.42.104 port 46687 ssh2 ... |
2020-06-20 01:17:58 |
| 68.183.137.173 | attackspambots | Jun 19 19:46:52 ift sshd\[50182\]: Invalid user dice from 68.183.137.173Jun 19 19:46:55 ift sshd\[50182\]: Failed password for invalid user dice from 68.183.137.173 port 45740 ssh2Jun 19 19:51:29 ift sshd\[51043\]: Invalid user gsm from 68.183.137.173Jun 19 19:51:30 ift sshd\[51043\]: Failed password for invalid user gsm from 68.183.137.173 port 45726 ssh2Jun 19 19:55:54 ift sshd\[51758\]: Invalid user jb from 68.183.137.173 ... |
2020-06-20 01:42:57 |
| 45.178.0.165 | attackbotsspam | Jun 19 19:07:39 ns37 sshd[2543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.178.0.165 Jun 19 19:07:39 ns37 sshd[2543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.178.0.165 |
2020-06-20 01:16:58 |
| 45.55.72.69 | attackspam | Jun 19 14:57:55 v22019038103785759 sshd\[24261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.72.69 user=root Jun 19 14:57:56 v22019038103785759 sshd\[24261\]: Failed password for root from 45.55.72.69 port 58552 ssh2 Jun 19 15:01:08 v22019038103785759 sshd\[24534\]: Invalid user server from 45.55.72.69 port 57834 Jun 19 15:01:08 v22019038103785759 sshd\[24534\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.72.69 Jun 19 15:01:11 v22019038103785759 sshd\[24534\]: Failed password for invalid user server from 45.55.72.69 port 57834 ssh2 ... |
2020-06-20 01:14:07 |
| 49.234.23.248 | attackbots | "fail2ban match" |
2020-06-20 01:45:40 |
| 139.59.116.115 | attackspambots | Scanned 333 unique addresses for 3 unique TCP ports in 24 hours (ports 1047,14491,28492) |
2020-06-20 01:11:34 |
| 196.218.156.140 | attackspambots | 20/6/19@08:14:12: FAIL: Alarm-Network address from=196.218.156.140 20/6/19@08:14:12: FAIL: Alarm-Network address from=196.218.156.140 ... |
2020-06-20 01:18:57 |
| 80.82.77.86 | attack | firewall-block, port(s): 5632/udp, 10000/udp |
2020-06-20 01:21:04 |
| 119.207.126.21 | attackbots | Jun 19 09:35:25 Tower sshd[6827]: Connection from 119.207.126.21 port 47996 on 192.168.10.220 port 22 rdomain "" Jun 19 09:35:27 Tower sshd[6827]: Failed password for root from 119.207.126.21 port 47996 ssh2 Jun 19 09:35:27 Tower sshd[6827]: Received disconnect from 119.207.126.21 port 47996:11: Bye Bye [preauth] Jun 19 09:35:27 Tower sshd[6827]: Disconnected from authenticating user root 119.207.126.21 port 47996 [preauth] |
2020-06-20 01:42:32 |
| 13.250.44.251 | attack | Lines containing failures of 13.250.44.251 Jun 17 15:46:30 smtp-out sshd[6983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.250.44.251 user=r.r Jun 17 15:46:32 smtp-out sshd[6983]: Failed password for r.r from 13.250.44.251 port 43922 ssh2 Jun 17 15:46:34 smtp-out sshd[6983]: Received disconnect from 13.250.44.251 port 43922:11: Bye Bye [preauth] Jun 17 15:46:34 smtp-out sshd[6983]: Disconnected from authenticating user r.r 13.250.44.251 port 43922 [preauth] Jun 17 16:01:16 smtp-out sshd[7522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.250.44.251 user=r.r Jun 17 16:01:18 smtp-out sshd[7522]: Failed password for r.r from 13.250.44.251 port 43340 ssh2 Jun 17 16:01:18 smtp-out sshd[7522]: Received disconnect from 13.250.44.251 port 43340:11: Bye Bye [preauth] Jun 17 16:01:18 smtp-out sshd[7522]: Disconnected from authenticating user r.r 13.250.44.251 port 43340 [preauth] Jun 17........ ------------------------------ |
2020-06-20 01:38:43 |
| 148.235.57.183 | attackspambots | Unauthorized SSH login attempts |
2020-06-20 01:05:36 |
| 170.210.121.208 | attackspambots | Jun 19 16:25:00 vps687878 sshd\[26722\]: Failed password for invalid user alvaro from 170.210.121.208 port 36101 ssh2 Jun 19 16:25:58 vps687878 sshd\[26806\]: Invalid user sjt from 170.210.121.208 port 41632 Jun 19 16:25:58 vps687878 sshd\[26806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.210.121.208 Jun 19 16:25:59 vps687878 sshd\[26806\]: Failed password for invalid user sjt from 170.210.121.208 port 41632 ssh2 Jun 19 16:26:54 vps687878 sshd\[27014\]: Invalid user security from 170.210.121.208 port 47160 Jun 19 16:26:54 vps687878 sshd\[27014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.210.121.208 ... |
2020-06-20 01:40:31 |
| 185.189.121.194 | attack | Port probing on unauthorized port 445 |
2020-06-20 01:22:12 |
| 37.49.226.208 | attackbots | Unauthorized connection attempt detected from IP address 37.49.226.208 to port 23 |
2020-06-20 01:19:31 |