City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.14.9.76
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28307
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;121.14.9.76. IN A
;; AUTHORITY SECTION:
. 128 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 20:01:04 CST 2022
;; MSG SIZE rcvd: 104Host 76.9.14.121.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 76.9.14.121.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 188.163.20.138 | attackspambots | Port probing on unauthorized port 445 |
2020-04-14 02:47:47 |
| 51.75.18.212 | attackspambots | Apr 13 20:36:06 srv-ubuntu-dev3 sshd[33313]: Invalid user florin from 51.75.18.212 Apr 13 20:36:06 srv-ubuntu-dev3 sshd[33313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.18.212 Apr 13 20:36:06 srv-ubuntu-dev3 sshd[33313]: Invalid user florin from 51.75.18.212 Apr 13 20:36:08 srv-ubuntu-dev3 sshd[33313]: Failed password for invalid user florin from 51.75.18.212 port 56962 ssh2 Apr 13 20:39:32 srv-ubuntu-dev3 sshd[33816]: Invalid user disk from 51.75.18.212 Apr 13 20:39:32 srv-ubuntu-dev3 sshd[33816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.18.212 Apr 13 20:39:32 srv-ubuntu-dev3 sshd[33816]: Invalid user disk from 51.75.18.212 Apr 13 20:39:34 srv-ubuntu-dev3 sshd[33816]: Failed password for invalid user disk from 51.75.18.212 port 37378 ssh2 Apr 13 20:42:56 srv-ubuntu-dev3 sshd[34364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.18.21 ... |
2020-04-14 02:50:03 |
| 125.161.107.122 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 13-04-2020 18:20:08. |
2020-04-14 02:18:13 |
| 51.178.82.80 | attack | Apr 13 19:19:53 vps sshd[206998]: Invalid user admin from 51.178.82.80 port 35170 Apr 13 19:19:53 vps sshd[206998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.ip-51-178-82.eu Apr 13 19:19:55 vps sshd[206998]: Failed password for invalid user admin from 51.178.82.80 port 35170 ssh2 Apr 13 19:23:42 vps sshd[228792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.ip-51-178-82.eu user=root Apr 13 19:23:44 vps sshd[228792]: Failed password for root from 51.178.82.80 port 42558 ssh2 ... |
2020-04-14 02:36:37 |
| 222.186.169.192 | attack | Apr 13 14:26:22 debian sshd[6608]: Unable to negotiate with 222.186.169.192 port 31394: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Apr 13 14:50:34 debian sshd[7804]: Unable to negotiate with 222.186.169.192 port 26180: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... |
2020-04-14 02:50:58 |
| 159.89.197.1 | attackspambots | Apr 13 19:34:49 ewelt sshd[22263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.197.1 user=root Apr 13 19:34:51 ewelt sshd[22263]: Failed password for root from 159.89.197.1 port 45626 ssh2 Apr 13 19:36:37 ewelt sshd[22371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.197.1 user=root Apr 13 19:36:39 ewelt sshd[22371]: Failed password for root from 159.89.197.1 port 45918 ssh2 ... |
2020-04-14 02:40:42 |
| 14.29.160.194 | attackspambots | Apr 13 19:23:48 vps sshd[229090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.160.194 user=root Apr 13 19:23:50 vps sshd[229090]: Failed password for root from 14.29.160.194 port 48259 ssh2 Apr 13 19:26:19 vps sshd[245291]: Invalid user zabbix from 14.29.160.194 port 60951 Apr 13 19:26:19 vps sshd[245291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.160.194 Apr 13 19:26:21 vps sshd[245291]: Failed password for invalid user zabbix from 14.29.160.194 port 60951 ssh2 ... |
2020-04-14 02:33:13 |
| 106.13.167.3 | attackspambots | Apr 13 19:44:07 * sshd[430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.167.3 Apr 13 19:44:09 * sshd[430]: Failed password for invalid user matilda from 106.13.167.3 port 47772 ssh2 |
2020-04-14 02:43:16 |
| 95.85.12.122 | attackspam | firewall-block, port(s): 5662/tcp |
2020-04-14 02:18:40 |
| 158.69.50.47 | attackbots | 158.69.50.47 - - [13/Apr/2020:22:09:22 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2" ... |
2020-04-14 02:20:31 |
| 46.102.175.102 | attack | firewall-block, port(s): 18607/tcp |
2020-04-14 02:21:45 |
| 1.1.144.255 | attack | firewall-block, port(s): 445/tcp |
2020-04-14 02:29:05 |
| 45.253.64.90 | attackbotsspam | firewall-block, port(s): 30247/tcp |
2020-04-14 02:23:01 |
| 222.186.175.169 | attackbots | Too many connections or unauthorized access detected from Arctic banned ip |
2020-04-14 02:11:21 |
| 212.158.165.46 | attackbots | SSH bruteforce (Triggered fail2ban) |
2020-04-14 02:46:34 |