City: unknown
Region: unknown
Country: Taiwan, China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.106.193.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31754
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;120.106.193.3. IN A
;; AUTHORITY SECTION:
. 439 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023051400 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 14 14:51:31 CST 2023
;; MSG SIZE rcvd: 1063.193.106.120.in-addr.arpa domain name pointer dns2.ypu.edu.tw.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
3.193.106.120.in-addr.arpa name = dns2.ypu.edu.tw.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.31.83 | attack | Sep 28 22:58:30 dignus sshd[24984]: Failed password for root from 222.186.31.83 port 29784 ssh2 Sep 28 22:58:32 dignus sshd[24984]: Failed password for root from 222.186.31.83 port 29784 ssh2 Sep 28 22:58:35 dignus sshd[25006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.83 user=root Sep 28 22:58:37 dignus sshd[25006]: Failed password for root from 222.186.31.83 port 14914 ssh2 Sep 28 22:58:39 dignus sshd[25006]: Failed password for root from 222.186.31.83 port 14914 ssh2 ... |
2020-09-29 04:03:17 |
| 125.76.212.10 | attack | Sep 28 02:34:17 santamaria sshd\[2478\]: Invalid user teamspeak from 125.76.212.10 Sep 28 02:34:17 santamaria sshd\[2478\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.76.212.10 Sep 28 02:34:19 santamaria sshd\[2478\]: Failed password for invalid user teamspeak from 125.76.212.10 port 3463 ssh2 ... |
2020-09-29 03:36:30 |
| 80.252.22.111 | attackspam | (sshd) Failed SSH login from 80.252.22.111 (RU/Russia/Samara Oblast/Samara/-/[AS39042 LLC Global Telecom Co]): 10 in the last 3600 secs |
2020-09-29 03:35:03 |
| 122.51.41.36 | attackbots | (sshd) Failed SSH login from 122.51.41.36 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 28 13:07:53 server2 sshd[8090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.41.36 user=root Sep 28 13:07:55 server2 sshd[8090]: Failed password for root from 122.51.41.36 port 40848 ssh2 Sep 28 13:56:18 server2 sshd[1425]: Invalid user 9 from 122.51.41.36 Sep 28 13:56:18 server2 sshd[1425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.41.36 Sep 28 13:56:20 server2 sshd[1425]: Failed password for invalid user 9 from 122.51.41.36 port 57984 ssh2 |
2020-09-29 04:02:18 |
| 198.50.177.42 | attack | Sep 29 00:59:12 web1 sshd[17044]: Invalid user pt from 198.50.177.42 port 58926 Sep 29 00:59:12 web1 sshd[17044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.50.177.42 Sep 29 00:59:12 web1 sshd[17044]: Invalid user pt from 198.50.177.42 port 58926 Sep 29 00:59:14 web1 sshd[17044]: Failed password for invalid user pt from 198.50.177.42 port 58926 ssh2 Sep 29 01:16:23 web1 sshd[23032]: Invalid user misha from 198.50.177.42 port 46026 Sep 29 01:16:23 web1 sshd[23032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.50.177.42 Sep 29 01:16:23 web1 sshd[23032]: Invalid user misha from 198.50.177.42 port 46026 Sep 29 01:16:25 web1 sshd[23032]: Failed password for invalid user misha from 198.50.177.42 port 46026 ssh2 Sep 29 01:23:43 web1 sshd[25460]: Invalid user train1 from 198.50.177.42 port 53396 ... |
2020-09-29 03:33:38 |
| 112.85.42.69 | attackbotsspam | Sep 28 08:25:37 serwer sshd\[32583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.69 user=root Sep 28 08:25:39 serwer sshd\[32583\]: Failed password for root from 112.85.42.69 port 56322 ssh2 Sep 28 08:25:42 serwer sshd\[32583\]: Failed password for root from 112.85.42.69 port 56322 ssh2 Sep 28 08:25:45 serwer sshd\[32583\]: Failed password for root from 112.85.42.69 port 56322 ssh2 Sep 28 08:25:48 serwer sshd\[32583\]: Failed password for root from 112.85.42.69 port 56322 ssh2 Sep 28 08:25:51 serwer sshd\[32583\]: Failed password for root from 112.85.42.69 port 56322 ssh2 Sep 28 08:25:51 serwer sshd\[32583\]: error: maximum authentication attempts exceeded for root from 112.85.42.69 port 56322 ssh2 \[preauth\] Sep 28 08:25:54 serwer sshd\[32616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.69 user=root Sep 28 08:25:56 serwer sshd\[32616\]: Failed password for root from ... |
2020-09-29 03:52:34 |
| 106.54.166.187 | attackspambots | Sep 28 15:11:23 markkoudstaal sshd[15766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.166.187 Sep 28 15:11:26 markkoudstaal sshd[15766]: Failed password for invalid user csgoserver from 106.54.166.187 port 37798 ssh2 Sep 28 15:15:19 markkoudstaal sshd[16829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.166.187 ... |
2020-09-29 03:53:11 |
| 120.31.138.70 | attackbots | Sep 28 12:15:07 Tower sshd[27278]: Connection from 120.31.138.70 port 52092 on 192.168.10.220 port 22 rdomain "" Sep 28 12:15:10 Tower sshd[27278]: Invalid user pradeep from 120.31.138.70 port 52092 Sep 28 12:15:10 Tower sshd[27278]: error: Could not get shadow information for NOUSER Sep 28 12:15:10 Tower sshd[27278]: Failed password for invalid user pradeep from 120.31.138.70 port 52092 ssh2 Sep 28 12:15:13 Tower sshd[27278]: Received disconnect from 120.31.138.70 port 52092:11: Bye Bye [preauth] Sep 28 12:15:13 Tower sshd[27278]: Disconnected from invalid user pradeep 120.31.138.70 port 52092 [preauth] |
2020-09-29 03:40:46 |
| 106.75.62.39 | attackbotsspam | (sshd) Failed SSH login from 106.75.62.39 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 28 09:45:33 server sshd[32232]: Invalid user cm from 106.75.62.39 port 50156 Sep 28 09:45:35 server sshd[32232]: Failed password for invalid user cm from 106.75.62.39 port 50156 ssh2 Sep 28 10:02:23 server sshd[4357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.62.39 user=root Sep 28 10:02:24 server sshd[4357]: Failed password for root from 106.75.62.39 port 32830 ssh2 Sep 28 10:08:05 server sshd[5890]: Invalid user markus from 106.75.62.39 port 35722 |
2020-09-29 03:46:07 |
| 192.241.221.114 | attack | " " |
2020-09-29 03:58:07 |
| 60.220.185.61 | attackbotsspam | Sep 28 12:45:15 inter-technics sshd[9079]: Invalid user gaurav from 60.220.185.61 port 57262 Sep 28 12:45:15 inter-technics sshd[9079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.220.185.61 Sep 28 12:45:15 inter-technics sshd[9079]: Invalid user gaurav from 60.220.185.61 port 57262 Sep 28 12:45:17 inter-technics sshd[9079]: Failed password for invalid user gaurav from 60.220.185.61 port 57262 ssh2 Sep 28 12:49:23 inter-technics sshd[9452]: Invalid user itsupport from 60.220.185.61 port 33766 ... |
2020-09-29 03:35:19 |
| 77.117.174.91 | attack | Time: Sun Sep 27 14:25:07 2020 +0000 IP: 77.117.174.91 (AT/Austria/77.117.174.91.wireless.dyn.drei.com) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 27 13:33:00 3 sshd[19465]: Invalid user admin from 77.117.174.91 port 60360 Sep 27 13:33:02 3 sshd[19465]: Failed password for invalid user admin from 77.117.174.91 port 60360 ssh2 Sep 27 14:18:12 3 sshd[807]: Invalid user admin from 77.117.174.91 port 36420 Sep 27 14:18:14 3 sshd[807]: Failed password for invalid user admin from 77.117.174.91 port 36420 ssh2 Sep 27 14:24:59 3 sshd[23009]: Invalid user vicky from 77.117.174.91 port 53268 |
2020-09-29 04:00:14 |
| 85.209.0.251 | attack | Sep 28 22:30:56 server2 sshd\[17232\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers Sep 28 22:30:57 server2 sshd\[17237\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers Sep 28 22:30:57 server2 sshd\[17231\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers Sep 28 22:30:57 server2 sshd\[17235\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers Sep 28 22:30:58 server2 sshd\[17242\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers Sep 28 22:30:58 server2 sshd\[17244\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers |
2020-09-29 03:38:53 |
| 182.254.161.202 | attackspam | 2020-09-27T10:01:50.131796hostname sshd[12868]: Failed password for invalid user george from 182.254.161.202 port 48184 ssh2 ... |
2020-09-29 03:31:56 |
| 183.240.132.21 | attack | Failed password for invalid user informix from 183.240.132.21 port 52742 ssh2 |
2020-09-29 03:47:56 |