City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.204.213.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61361
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;129.204.213.102. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012901 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 07:00:57 CST 2025
;; MSG SIZE rcvd: 108Host 102.213.204.129.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 102.213.204.129.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 193.95.81.121 | attack | Lines containing failures of 193.95.81.121 (max 1000) Oct 5 17:06:14 localhost sshd[2646]: User r.r from 193.95.81.121 not allowed because listed in DenyUsers Oct 5 17:06:15 localhost sshd[2646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.95.81.121 user=r.r Oct 5 17:06:17 localhost sshd[2646]: Failed password for invalid user r.r from 193.95.81.121 port 11224 ssh2 Oct 5 17:06:18 localhost sshd[2646]: Received disconnect from 193.95.81.121 port 11224:11: Bye Bye [preauth] Oct 5 17:06:18 localhost sshd[2646]: Disconnected from invalid user r.r 193.95.81.121 port 11224 [preauth] Oct 5 17:32:02 localhost sshd[10480]: User r.r from 193.95.81.121 not allowed because listed in DenyUsers Oct 5 17:32:02 localhost sshd[10480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.95.81.121 user=r.r Oct 5 17:32:04 localhost sshd[10480]: Failed password for invalid user r.r from 193.95.8........ ------------------------------ |
2020-10-06 03:08:37 |
| 210.245.12.209 | attackspam | Listed on dnsbl-sorbs plus abuseat.org and barracudaCentral / proto=6 . srcport=46347 . dstport=3389 RDP . (3500) |
2020-10-06 02:43:05 |
| 36.6.158.11 | attackspam | 2020-10-05 01:17:44,050 fail2ban.actions: WARNING [ssh] Ban 36.6.158.11 |
2020-10-06 02:35:47 |
| 187.163.39.133 | attackspam | DATE:2020-10-05 14:40:33, IP:187.163.39.133, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc) |
2020-10-06 02:36:41 |
| 82.64.15.100 | attackbotsspam | Automatic report - Banned IP Access |
2020-10-06 03:01:28 |
| 61.97.248.227 | attackbotsspam | SSH login attempts. |
2020-10-06 02:39:51 |
| 113.69.131.41 | attack | CN CN/China/- Failures: 5 smtpauth |
2020-10-06 02:32:22 |
| 103.89.176.74 | attackspam | 2020-10-05T03:35:08.358283hostname sshd[101397]: Failed password for root from 103.89.176.74 port 47090 ssh2 ... |
2020-10-06 02:33:10 |
| 202.102.90.21 | attackspam | Oct 5 08:54:23 ws24vmsma01 sshd[186651]: Failed password for root from 202.102.90.21 port 37213 ssh2 ... |
2020-10-06 02:59:32 |
| 154.83.16.140 | attack | 2020-10-05T20:09:51.189064vps773228.ovh.net sshd[5678]: Failed password for root from 154.83.16.140 port 51546 ssh2 2020-10-05T20:12:33.700967vps773228.ovh.net sshd[5692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.16.140 user=root 2020-10-05T20:12:35.452298vps773228.ovh.net sshd[5692]: Failed password for root from 154.83.16.140 port 40702 ssh2 2020-10-05T20:15:18.830044vps773228.ovh.net sshd[5744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.16.140 user=root 2020-10-05T20:15:21.233211vps773228.ovh.net sshd[5744]: Failed password for root from 154.83.16.140 port 58090 ssh2 ... |
2020-10-06 02:48:23 |
| 103.145.13.124 | attack | UDP port : 5060 |
2020-10-06 02:52:18 |
| 14.98.4.82 | attack | 2020-10-05T12:37:28.184208ks3355764 sshd[17523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.98.4.82 user=root 2020-10-05T12:37:29.767163ks3355764 sshd[17523]: Failed password for root from 14.98.4.82 port 24569 ssh2 ... |
2020-10-06 03:09:09 |
| 223.99.22.141 | attack | SSH Brute Force |
2020-10-06 02:57:13 |
| 175.207.13.22 | attack | $f2bV_matches |
2020-10-06 02:44:25 |
| 202.142.185.58 | attack | Automatic report - Port Scan Attack |
2020-10-06 02:52:00 |