City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.48.147.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25277
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;121.48.147.74. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012800 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 28 22:04:17 CST 2025
;; MSG SIZE rcvd: 106b'Host 74.147.48.121.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 121.48.147.74.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.175.18.118 | attack | 2020-06-14T00:31:30.577685vps773228.ovh.net sshd[17974]: Invalid user admin from 134.175.18.118 port 43654 2020-06-14T00:31:30.594447vps773228.ovh.net sshd[17974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.18.118 2020-06-14T00:31:30.577685vps773228.ovh.net sshd[17974]: Invalid user admin from 134.175.18.118 port 43654 2020-06-14T00:31:33.109521vps773228.ovh.net sshd[17974]: Failed password for invalid user admin from 134.175.18.118 port 43654 ssh2 2020-06-14T00:35:19.161498vps773228.ovh.net sshd[18057]: Invalid user jzye from 134.175.18.118 port 53794 ... |
2020-06-14 08:14:22 |
| 176.101.135.32 | attackbotsspam | Brute force attempt |
2020-06-14 08:35:52 |
| 80.13.87.178 | attackbotsspam | Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-06-14 08:09:59 |
| 141.98.81.207 | attack | Jun 13 05:47:54 XXX sshd[63091]: Invalid user admin from 141.98.81.207 port 11397 |
2020-06-14 08:09:44 |
| 5.3.87.8 | attackbots | 2020-06-14T00:08:09.215261sd-86998 sshd[22234]: Invalid user deploy from 5.3.87.8 port 51794 2020-06-14T00:08:09.220953sd-86998 sshd[22234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.3.87.8 2020-06-14T00:08:09.215261sd-86998 sshd[22234]: Invalid user deploy from 5.3.87.8 port 51794 2020-06-14T00:08:11.404428sd-86998 sshd[22234]: Failed password for invalid user deploy from 5.3.87.8 port 51794 ssh2 2020-06-14T00:11:26.038263sd-86998 sshd[22744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.3.87.8 user=root 2020-06-14T00:11:27.930836sd-86998 sshd[22744]: Failed password for root from 5.3.87.8 port 51256 ssh2 ... |
2020-06-14 08:04:30 |
| 186.185.17.152 | attackspam | 1592082354 - 06/13/2020 23:05:54 Host: 186.185.17.152/186.185.17.152 Port: 445 TCP Blocked |
2020-06-14 08:20:33 |
| 93.99.134.148 | attack | Jun 13 22:57:19 mail.srvfarm.net postfix/smtpd[1295659]: warning: unknown[93.99.134.148]: SASL PLAIN authentication failed: Jun 13 22:57:19 mail.srvfarm.net postfix/smtpd[1295659]: lost connection after AUTH from unknown[93.99.134.148] Jun 13 22:59:52 mail.srvfarm.net postfix/smtpd[1295659]: lost connection after CONNECT from unknown[93.99.134.148] Jun 13 23:05:58 mail.srvfarm.net postfix/smtps/smtpd[1295672]: warning: unknown[93.99.134.148]: SASL PLAIN authentication failed: Jun 13 23:05:58 mail.srvfarm.net postfix/smtps/smtpd[1295672]: lost connection after AUTH from unknown[93.99.134.148] |
2020-06-14 08:07:11 |
| 207.248.113.124 | attackbotsspam | Jun 13 22:45:58 mail.srvfarm.net postfix/smtpd[1294955]: warning: unknown[207.248.113.124]: SASL PLAIN authentication failed: Jun 13 22:45:58 mail.srvfarm.net postfix/smtpd[1294955]: lost connection after AUTH from unknown[207.248.113.124] Jun 13 22:46:13 mail.srvfarm.net postfix/smtpd[1294953]: lost connection after CONNECT from unknown[207.248.113.124] Jun 13 22:51:56 mail.srvfarm.net postfix/smtps/smtpd[1295671]: warning: unknown[207.248.113.124]: SASL PLAIN authentication failed: Jun 13 22:51:56 mail.srvfarm.net postfix/smtps/smtpd[1295671]: lost connection after AUTH from unknown[207.248.113.124] |
2020-06-14 08:30:33 |
| 116.132.47.50 | attackbotsspam | Jun 14 02:53:10 lukav-desktop sshd\[26881\]: Invalid user ronjones from 116.132.47.50 Jun 14 02:53:10 lukav-desktop sshd\[26881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.132.47.50 Jun 14 02:53:12 lukav-desktop sshd\[26881\]: Failed password for invalid user ronjones from 116.132.47.50 port 40466 ssh2 Jun 14 02:56:17 lukav-desktop sshd\[26914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.132.47.50 user=root Jun 14 02:56:19 lukav-desktop sshd\[26914\]: Failed password for root from 116.132.47.50 port 53844 ssh2 |
2020-06-14 08:21:24 |
| 91.247.233.91 | attackspam | Automatic report - Banned IP Access |
2020-06-14 08:18:15 |
| 49.233.10.41 | attackspam | Bruteforce detected by fail2ban |
2020-06-14 08:02:50 |
| 141.98.81.6 | attackbots | Jun 14 01:40:58 debian64 sshd[19915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.6 Jun 14 01:41:00 debian64 sshd[19915]: Failed password for invalid user 1234 from 141.98.81.6 port 19140 ssh2 ... |
2020-06-14 07:58:48 |
| 179.26.153.219 | attackspam | 1592082353 - 06/13/2020 23:05:53 Host: 179.26.153.219/179.26.153.219 Port: 445 TCP Blocked |
2020-06-14 08:24:02 |
| 124.43.9.184 | attackbots | (sshd) Failed SSH login from 124.43.9.184 (LK/Sri Lanka/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 13 23:10:08 ubnt-55d23 sshd[11565]: Invalid user postgres from 124.43.9.184 port 53836 Jun 13 23:10:09 ubnt-55d23 sshd[11565]: Failed password for invalid user postgres from 124.43.9.184 port 53836 ssh2 |
2020-06-14 08:16:16 |
| 120.220.242.30 | attack | Invalid user bdc from 120.220.242.30 port 29102 |
2020-06-14 08:25:32 |