City: Chongqing
Region: Chongqing
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.108.2.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64460
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.108.2.80. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020012502 1800 900 604800 86400
;; Query time: 131 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 26 04:28:54 CST 2020
;; MSG SIZE rcvd: 115Host 80.2.108.14.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 80.2.108.14.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.54.95.232 | attack | SSH-BruteForce |
2019-12-08 07:35:29 |
| 45.58.139.130 | attack | Dec 7 18:25:47 ny01 sshd[27402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.58.139.130 Dec 7 18:25:50 ny01 sshd[27402]: Failed password for invalid user http from 45.58.139.130 port 29143 ssh2 Dec 7 18:30:58 ny01 sshd[28148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.58.139.130 |
2019-12-08 07:38:35 |
| 123.145.12.196 | attack | The IP has triggered Cloudflare WAF. CF-Ray: 54160d140d7fed33 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 07:09:06 |
| 175.42.3.98 | attackbotsspam | The IP has triggered Cloudflare WAF. CF-Ray: 54147f39cf2a930a | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: d.skk.moe | User-Agent: Mozilla/5.082584686 Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 07:06:35 |
| 41.35.111.139 | attack | Unauthorized connection attempt from IP address 41.35.111.139 on Port 445(SMB) |
2019-12-08 07:44:25 |
| 95.31.211.5 | attackbots | Unauthorized connection attempt from IP address 95.31.211.5 on Port 445(SMB) |
2019-12-08 07:45:03 |
| 110.80.153.119 | attackspambots | The IP has triggered Cloudflare WAF. CF-Ray: 5416c0d30b14e7bd | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.067805899 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 07:17:23 |
| 194.102.35.244 | attackbots | SSH brute-force: detected 34 distinct usernames within a 24-hour window. |
2019-12-08 07:48:39 |
| 106.45.0.254 | attackspambots | The IP has triggered Cloudflare WAF. CF-Ray: 54141acc38afeb29 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729) | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 07:18:06 |
| 203.148.53.227 | attackbots | SSH brute-force: detected 6 distinct usernames within a 24-hour window. |
2019-12-08 07:48:23 |
| 110.177.87.99 | attackspambots | The IP has triggered Cloudflare WAF. CF-Ray: 541217e92d2c7866 | WAF_Rule_ID: 1025440 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 07:15:27 |
| 218.92.0.179 | attack | Dec 7 23:37:33 124388 sshd[8676]: Failed password for root from 218.92.0.179 port 60449 ssh2 Dec 7 23:37:37 124388 sshd[8676]: Failed password for root from 218.92.0.179 port 60449 ssh2 Dec 7 23:37:40 124388 sshd[8676]: Failed password for root from 218.92.0.179 port 60449 ssh2 Dec 7 23:37:44 124388 sshd[8676]: Failed password for root from 218.92.0.179 port 60449 ssh2 Dec 7 23:37:44 124388 sshd[8676]: error: maximum authentication attempts exceeded for root from 218.92.0.179 port 60449 ssh2 [preauth] |
2019-12-08 07:40:05 |
| 183.48.34.242 | attack | Dec 8 04:53:55 vibhu-HP-Z238-Microtower-Workstation sshd\[8542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.48.34.242 user=root Dec 8 04:53:57 vibhu-HP-Z238-Microtower-Workstation sshd\[8542\]: Failed password for root from 183.48.34.242 port 51110 ssh2 Dec 8 05:00:53 vibhu-HP-Z238-Microtower-Workstation sshd\[9019\]: Invalid user custer from 183.48.34.242 Dec 8 05:00:53 vibhu-HP-Z238-Microtower-Workstation sshd\[9019\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.48.34.242 Dec 8 05:00:55 vibhu-HP-Z238-Microtower-Workstation sshd\[9019\]: Failed password for invalid user custer from 183.48.34.242 port 60810 ssh2 ... |
2019-12-08 07:41:59 |
| 106.54.225.244 | attackbotsspam | SSH-BruteForce |
2019-12-08 07:43:21 |
| 219.140.117.141 | attackspam | The IP has triggered Cloudflare WAF. CF-Ray: 541035b6bf9eeaf0 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729) | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 07:30:37 |