City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.67.108.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63866
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.67.108.214. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019081701 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 18 12:44:10 CST 2019
;; MSG SIZE rcvd: 118214.108.67.138.in-addr.arpa domain name pointer csm-wl-dhcp-108-214.mines.edu.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
214.108.67.138.in-addr.arpa name = csm-wl-dhcp-108-214.mines.edu.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.92.0.179 | attackspam | Jan 27 13:05:52 *host* sshd\[32718\]: Unable to negotiate with 218.92.0.179 port 27971: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 \[preauth\] ... |
2020-01-27 20:08:01 |
| 154.92.14.46 | attackspambots | Jan 27 13:50:33 pkdns2 sshd\[41503\]: Invalid user almacen from 154.92.14.46Jan 27 13:50:35 pkdns2 sshd\[41503\]: Failed password for invalid user almacen from 154.92.14.46 port 51071 ssh2Jan 27 13:53:44 pkdns2 sshd\[41626\]: Invalid user meteor from 154.92.14.46Jan 27 13:53:46 pkdns2 sshd\[41626\]: Failed password for invalid user meteor from 154.92.14.46 port 36918 ssh2Jan 27 13:57:00 pkdns2 sshd\[41789\]: Invalid user usr from 154.92.14.46Jan 27 13:57:01 pkdns2 sshd\[41789\]: Failed password for invalid user usr from 154.92.14.46 port 50999 ssh2 ... |
2020-01-27 20:10:33 |
| 91.65.236.149 | attackspambots | Jan 27 10:54:52 mout sshd[16835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.65.236.149 user=pi Jan 27 10:54:54 mout sshd[16835]: Failed password for pi from 91.65.236.149 port 58752 ssh2 Jan 27 10:54:55 mout sshd[16835]: Connection closed by 91.65.236.149 port 58752 [preauth] |
2020-01-27 20:45:12 |
| 200.126.102.218 | attackspam | 2020-01-27T23:05:28.108499luisaranguren sshd[2068418]: Invalid user database from 200.126.102.218 port 55780 2020-01-27T23:05:29.988497luisaranguren sshd[2068418]: Failed password for invalid user database from 200.126.102.218 port 55780 ssh2 ... |
2020-01-27 20:12:19 |
| 49.254.237.134 | attackspambots | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-01-27 20:07:34 |
| 219.76.72.183 | attack | ** MIRAI HOST ** Mon Jan 27 02:55:05 2020 - Child process 14443 handling connection Mon Jan 27 02:55:05 2020 - New connection from: 219.76.72.183:44129 Mon Jan 27 02:55:05 2020 - Sending data to client: [Login: ] Mon Jan 27 02:55:06 2020 - Got data: root Mon Jan 27 02:55:07 2020 - Sending data to client: [Password: ] Mon Jan 27 02:55:07 2020 - Got data: klv1234 Mon Jan 27 02:55:09 2020 - Child 14443 exiting Mon Jan 27 02:55:09 2020 - Child 14444 granting shell Mon Jan 27 02:55:09 2020 - Sending data to client: [Logged in] Mon Jan 27 02:55:09 2020 - Sending data to client: [Welcome to MX990 Embedded Linux] Mon Jan 27 02:55:09 2020 - Sending data to client: [[root@dvrdvs /]# ] Mon Jan 27 02:55:09 2020 - Got data: enable system shell sh Mon Jan 27 02:55:09 2020 - Sending data to client: [Command not found] Mon Jan 27 02:55:10 2020 - Sending data to client: [[root@dvrdvs /]# ] Mon Jan 27 02:55:10 2020 - Got data: cat /proc/mounts; /bin/busybox FECLS Mon Jan 27 02:55:10 2020 - Sending data to client: |
2020-01-27 20:18:45 |
| 222.186.175.154 | attackbots | Jan 27 13:48:23 server sshd[58515]: Failed none for root from 222.186.175.154 port 10390 ssh2 Jan 27 13:48:25 server sshd[58515]: Failed password for root from 222.186.175.154 port 10390 ssh2 Jan 27 13:48:29 server sshd[58515]: Failed password for root from 222.186.175.154 port 10390 ssh2 |
2020-01-27 20:49:18 |
| 192.241.175.250 | attack | Unauthorized connection attempt detected from IP address 192.241.175.250 to port 2220 [J] |
2020-01-27 20:32:06 |
| 93.39.116.254 | attack | Jan 27 13:14:44 meumeu sshd[3146]: Failed password for nagios from 93.39.116.254 port 36397 ssh2 Jan 27 13:17:14 meumeu sshd[3591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.39.116.254 Jan 27 13:17:16 meumeu sshd[3591]: Failed password for invalid user esteban from 93.39.116.254 port 48544 ssh2 ... |
2020-01-27 20:26:10 |
| 183.88.0.221 | attackspambots | Honeypot attack, port: 445, PTR: mx-ll-183.88.0-221.dynamic.3bb.in.th. |
2020-01-27 20:49:45 |
| 42.123.99.67 | attack | Unauthorized connection attempt detected from IP address 42.123.99.67 to port 2220 [J] |
2020-01-27 20:11:55 |
| 216.244.66.229 | attackspambots | Automated report (2020-01-27T12:43:10+00:00). Misbehaving bot detected at this address. |
2020-01-27 20:51:23 |
| 202.47.40.208 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 27-01-2020 09:55:31. |
2020-01-27 20:08:48 |
| 51.144.243.130 | attackspambots | Unauthorized connection attempt detected from IP address 51.144.243.130 to port 2220 [J] |
2020-01-27 20:51:46 |
| 180.169.62.50 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-01-27 20:51:01 |