City: Beijing
Region: Beijing
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.253.100.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62379
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;114.253.100.1. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021300 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 21:12:26 CST 2025
;; MSG SIZE rcvd: 106Host 1.100.253.114.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 1.100.253.114.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 42.243.140.90 | attack | Aug 7 17:39:39 DDOS Attack: SRC=42.243.140.90 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=51 DF PROTO=TCP SPT=45281 DPT=80 WINDOW=0 RES=0x00 RST URGP=0 |
2019-08-08 05:20:19 |
| 45.67.14.151 | attackbots | firewall-block, port(s): 3005/tcp |
2019-08-08 05:18:35 |
| 14.225.3.37 | attackspam | firewall-block, port(s): 23/tcp |
2019-08-08 04:37:10 |
| 68.183.46.73 | attackbots | SSH Brute-Force reported by Fail2Ban |
2019-08-08 05:18:18 |
| 123.207.8.86 | attackbots | Aug 7 17:40:39 MK-Soft-VM7 sshd\[8160\]: Invalid user iq from 123.207.8.86 port 50602 Aug 7 17:40:39 MK-Soft-VM7 sshd\[8160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.8.86 Aug 7 17:40:41 MK-Soft-VM7 sshd\[8160\]: Failed password for invalid user iq from 123.207.8.86 port 50602 ssh2 ... |
2019-08-08 04:47:14 |
| 213.202.211.200 | attackspam | Aug 7 19:42:46 srv1 sshd[21376]: Address 213.202.211.200 maps to hosname9046.dus2.servdiscount-customer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 7 19:42:46 srv1 sshd[21376]: Invalid user taiga from 213.202.211.200 Aug 7 19:42:46 srv1 sshd[21376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.211.200 Aug 7 19:42:48 srv1 sshd[21376]: Failed password for invalid user taiga from 213.202.211.200 port 57212 ssh2 Aug 7 19:42:48 srv1 sshd[21376]: Received disconnect from 213.202.211.200: 11: Bye Bye [preauth] Aug 7 19:51:03 srv1 sshd[22082]: Address 213.202.211.200 maps to hosname9046.dus2.servdiscount-customer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 7 19:51:03 srv1 sshd[22082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.211.200 user=r.r Aug 7 19:51:05 srv1 sshd[22082]: Failed password for........ ------------------------------- |
2019-08-08 04:53:36 |
| 170.130.187.30 | attack | Automatic report - Port Scan Attack |
2019-08-08 04:46:50 |
| 187.87.104.62 | attack | Automatic report - Banned IP Access |
2019-08-08 04:45:15 |
| 103.121.195.4 | attackbotsspam | Aug 7 21:48:22 * sshd[32105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.121.195.4 Aug 7 21:48:25 * sshd[32105]: Failed password for invalid user matt from 103.121.195.4 port 44118 ssh2 |
2019-08-08 04:48:12 |
| 110.43.33.62 | attack | MYH,DEF GET /phpmyadmin/ |
2019-08-08 04:45:58 |
| 211.43.196.98 | attack | 211.43.196.98:61242 - - [02/Aug/2019:18:25:21 +0200] "HEAD /uc_server/admin.php?m=user&a=login&iframe=&sid= HTTP/1.1" 404 - 211.43.196.98:61242 - - [02/Aug/2019:18:25:21 +0200] "HEAD / HTTP/1.1" 200 - 211.43.196.98:57567 - - [02/Aug/2019:16:57:15 +0200] "HEAD /admin/left.asp HTTP/1.1" 404 - 211.43.196.98:57567 - - [02/Aug/2019:16:57:15 +0200] "HEAD /admin/review.asp?id=1%20union%20select%201,2,3,4,5,admin,7,8,9,password,11%20%20from%20cnhww HTTP/1.1" 404 - 211.43.196.98:57567 - - [02/Aug/2019:16:57:15 +0200] "HEAD /Data21293/NYIKUGY5434231.mdb HTTP/1.1" 404 - 211.43.196.98:57567 - - [02/Aug/2019:16:57:14 +0200] "HEAD /install/index.php?_m=frontpage&_a=setting&default_tpl=jixie-110118-a16 HTTP/1.1" 404 - 211.43.196.98:57567 - - [02/Aug/2019:16:57:13 +0200] "POST /index.php?_m=mod_email&_a=do_mail HTTP/1.1" 200 7424 211.43.196.98:57567 - - [02/Aug/2019:16:57:13 +0200] "HEAD /index.php?_m=mod_email&_a=do_mail HTTP/1.1" 200 - |
2019-08-08 04:49:08 |
| 131.100.77.18 | attackbotsspam | Brute force attack to crack SMTP password (port 25 / 587) |
2019-08-08 05:12:28 |
| 171.208.22.61 | attack | 19/8/7@13:40:49: FAIL: IoT-Telnet address from=171.208.22.61 ... |
2019-08-08 04:40:15 |
| 58.219.248.72 | attackbotsspam | Honeypot attack, port: 23, PTR: PTR record not found |
2019-08-08 05:09:06 |
| 37.49.227.109 | attack | : |
2019-08-08 05:13:59 |