City: unknown
Region: unknown
Country: Canada
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.134.217.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42177
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;131.134.217.94. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021601 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 10:05:56 CST 2025
;; MSG SIZE rcvd: 107
Host 94.217.134.131.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 94.217.134.131.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 186.170.28.46 | attackspambots | $f2bV_matches |
2019-08-17 00:28:01 |
| 117.55.241.4 | attackbots | Aug 16 06:12:23 tdfoods sshd\[16746\]: Invalid user deploy from 117.55.241.4 Aug 16 06:12:23 tdfoods sshd\[16746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.55.241.4 Aug 16 06:12:25 tdfoods sshd\[16746\]: Failed password for invalid user deploy from 117.55.241.4 port 53590 ssh2 Aug 16 06:17:49 tdfoods sshd\[17290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.55.241.4 user=root Aug 16 06:17:52 tdfoods sshd\[17290\]: Failed password for root from 117.55.241.4 port 41056 ssh2 |
2019-08-17 00:31:05 |
| 13.67.67.168 | attackbotsspam | Aug 16 06:36:10 lcdev sshd\[410\]: Invalid user one from 13.67.67.168 Aug 16 06:36:10 lcdev sshd\[410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.67.67.168 Aug 16 06:36:12 lcdev sshd\[410\]: Failed password for invalid user one from 13.67.67.168 port 3456 ssh2 Aug 16 06:45:48 lcdev sshd\[1398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.67.67.168 user=root Aug 16 06:45:50 lcdev sshd\[1398\]: Failed password for root from 13.67.67.168 port 3456 ssh2 |
2019-08-17 00:57:22 |
| 59.127.250.112 | attack | scan z |
2019-08-17 00:53:01 |
| 180.166.114.14 | attack | Aug 16 18:17:23 nextcloud sshd\[20863\]: Invalid user mark from 180.166.114.14 Aug 16 18:17:23 nextcloud sshd\[20863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.166.114.14 Aug 16 18:17:26 nextcloud sshd\[20863\]: Failed password for invalid user mark from 180.166.114.14 port 55449 ssh2 ... |
2019-08-17 00:53:31 |
| 211.64.67.48 | attackspambots | Aug 16 06:10:43 web9 sshd\[20718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.64.67.48 user=root Aug 16 06:10:45 web9 sshd\[20718\]: Failed password for root from 211.64.67.48 port 48624 ssh2 Aug 16 06:17:50 web9 sshd\[22279\]: Invalid user protocol from 211.64.67.48 Aug 16 06:17:50 web9 sshd\[22279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.64.67.48 Aug 16 06:17:52 web9 sshd\[22279\]: Failed password for invalid user protocol from 211.64.67.48 port 37762 ssh2 |
2019-08-17 00:30:39 |
| 114.91.68.29 | attackbotsspam | Aug 15 23:11:55 GIZ-Server-02 sshd[13238]: Invalid user developer from 114.91.68.29 Aug 15 23:11:55 GIZ-Server-02 sshd[13238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.91.68.29 Aug 15 23:11:56 GIZ-Server-02 sshd[13238]: Failed password for invalid user developer from 114.91.68.29 port 40096 ssh2 Aug 15 23:11:57 GIZ-Server-02 sshd[13238]: Received disconnect from 114.91.68.29: 11: Bye Bye [preauth] Aug 15 23:20:17 GIZ-Server-02 sshd[18230]: User r.r from 114.91.68.29 not allowed because not listed in AllowUsers Aug 15 23:20:17 GIZ-Server-02 sshd[18230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.91.68.29 user=r.r Aug 15 23:20:19 GIZ-Server-02 sshd[18230]: Failed password for invalid user r.r from 114.91.68.29 port 35668 ssh2 Aug 15 23:20:20 GIZ-Server-02 sshd[18230]: Received disconnect from 114.91.68.29: 11: Bye Bye [preauth] Aug 15 23:28:30 GIZ-Server-02 sshd[22021]: I........ ------------------------------- |
2019-08-17 01:12:40 |
| 207.180.235.203 | attackspam | Aug 16 06:31:05 sachi sshd\[19899\]: Invalid user gose from 207.180.235.203 Aug 16 06:31:05 sachi sshd\[19899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi287485.contaboserver.net Aug 16 06:31:08 sachi sshd\[19899\]: Failed password for invalid user gose from 207.180.235.203 port 34466 ssh2 Aug 16 06:35:36 sachi sshd\[20255\]: Invalid user ts3server from 207.180.235.203 Aug 16 06:35:36 sachi sshd\[20255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi287485.contaboserver.net |
2019-08-17 00:38:05 |
| 125.227.130.5 | attack | Aug 16 18:17:41 MK-Soft-Root1 sshd\[18069\]: Invalid user postgres from 125.227.130.5 port 45635 Aug 16 18:17:41 MK-Soft-Root1 sshd\[18069\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.227.130.5 Aug 16 18:17:44 MK-Soft-Root1 sshd\[18069\]: Failed password for invalid user postgres from 125.227.130.5 port 45635 ssh2 ... |
2019-08-17 00:36:46 |
| 212.64.39.109 | attack | Aug 16 12:24:16 TORMINT sshd\[904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.39.109 user=root Aug 16 12:24:18 TORMINT sshd\[904\]: Failed password for root from 212.64.39.109 port 57514 ssh2 Aug 16 12:27:44 TORMINT sshd\[1117\]: Invalid user logan from 212.64.39.109 Aug 16 12:27:44 TORMINT sshd\[1117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.39.109 ... |
2019-08-17 00:39:24 |
| 118.36.192.9 | attack | Aug 16 06:50:36 aiointranet sshd\[19823\]: Invalid user husen from 118.36.192.9 Aug 16 06:50:36 aiointranet sshd\[19823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.36.192.9 Aug 16 06:50:38 aiointranet sshd\[19823\]: Failed password for invalid user husen from 118.36.192.9 port 10061 ssh2 Aug 16 06:57:06 aiointranet sshd\[20447\]: Invalid user applmgr from 118.36.192.9 Aug 16 06:57:06 aiointranet sshd\[20447\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.36.192.9 |
2019-08-17 00:58:28 |
| 183.238.193.227 | attack | Aug 16 12:50:55 xtremcommunity sshd\[21047\]: Invalid user rsync from 183.238.193.227 port 21627 Aug 16 12:50:55 xtremcommunity sshd\[21047\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.238.193.227 Aug 16 12:50:57 xtremcommunity sshd\[21047\]: Failed password for invalid user rsync from 183.238.193.227 port 21627 ssh2 Aug 16 12:57:16 xtremcommunity sshd\[21297\]: Invalid user ec2-user from 183.238.193.227 port 45316 Aug 16 12:57:16 xtremcommunity sshd\[21297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.238.193.227 ... |
2019-08-17 01:03:33 |
| 164.132.225.250 | attackspam | Aug 16 18:13:40 SilenceServices sshd[18869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.225.250 Aug 16 18:13:42 SilenceServices sshd[18869]: Failed password for invalid user venkat from 164.132.225.250 port 53658 ssh2 Aug 16 18:17:54 SilenceServices sshd[22692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.225.250 |
2019-08-17 00:28:48 |
| 91.202.76.141 | attack | [portscan] Port scan |
2019-08-17 00:23:59 |
| 205.185.125.82 | attack | Aug 15 16:54:41 josie sshd[25149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.185.125.82 user=r.r Aug 15 16:54:43 josie sshd[25149]: Failed password for r.r from 205.185.125.82 port 37730 ssh2 Aug 15 16:54:43 josie sshd[25151]: Received disconnect from 205.185.125.82: 11: Bye Bye Aug 15 16:54:43 josie sshd[25183]: Invalid user admin from 205.185.125.82 Aug 15 16:54:43 josie sshd[25183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.185.125.82 Aug 15 16:54:46 josie sshd[25183]: Failed password for invalid user admin from 205.185.125.82 port 41146 ssh2 Aug 15 16:54:46 josie sshd[25184]: Received disconnect from 205.185.125.82: 11: Bye Bye Aug 15 16:54:47 josie sshd[25224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.185.125.82 user=r.r Aug 15 16:54:49 josie sshd[25224]: Failed password for r.r from 205.185.125.82 port 44710 ssh2........ ------------------------------- |
2019-08-17 00:54:41 |