City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.108.38.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36925
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.108.38.149. IN A
;; AUTHORITY SECTION:
. 444 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011000 1800 900 604800 86400
;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 10 21:58:59 CST 2022
;; MSG SIZE rcvd: 106Host 149.38.108.14.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 149.38.108.14.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 52.81.190.175 | attackbotsspam | Failed password for invalid user redmine from 52.81.190.175 port 41596 ssh2 |
2020-06-28 01:42:29 |
| 52.130.85.214 | attackbots | [ssh] SSH attack |
2020-06-28 02:06:21 |
| 132.232.5.125 | attackspam | SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2020-06-28 02:05:51 |
| 202.175.250.218 | attackspambots | Jun 27 17:01:21 h1745522 sshd[26858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.175.250.218 user=root Jun 27 17:01:23 h1745522 sshd[26858]: Failed password for root from 202.175.250.218 port 38704 ssh2 Jun 27 17:03:44 h1745522 sshd[26978]: Invalid user user1 from 202.175.250.218 port 42636 Jun 27 17:03:44 h1745522 sshd[26978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.175.250.218 Jun 27 17:03:44 h1745522 sshd[26978]: Invalid user user1 from 202.175.250.218 port 42636 Jun 27 17:03:46 h1745522 sshd[26978]: Failed password for invalid user user1 from 202.175.250.218 port 42636 ssh2 Jun 27 17:06:09 h1745522 sshd[27246]: Invalid user ai from 202.175.250.218 port 46586 Jun 27 17:06:09 h1745522 sshd[27246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.175.250.218 Jun 27 17:06:09 h1745522 sshd[27246]: Invalid user ai from 202.175.250.218 port 46586 ... |
2020-06-28 02:03:22 |
| 185.204.3.36 | attackspam | Jun 27 19:28:37 santamaria sshd\[12395\]: Invalid user token from 185.204.3.36 Jun 27 19:28:37 santamaria sshd\[12395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.204.3.36 Jun 27 19:28:39 santamaria sshd\[12395\]: Failed password for invalid user token from 185.204.3.36 port 52870 ssh2 ... |
2020-06-28 01:33:18 |
| 164.68.111.13 | attackbots | Lines containing failures of 164.68.111.13 Jun 25 07:45:15 majoron sshd[22182]: Invalid user bdl from 164.68.111.13 port 48970 Jun 25 07:45:15 majoron sshd[22182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.111.13 Jun 25 07:45:17 majoron sshd[22182]: Failed password for invalid user bdl from 164.68.111.13 port 48970 ssh2 Jun 25 07:45:19 majoron sshd[22182]: Received disconnect from 164.68.111.13 port 48970:11: Bye Bye [preauth] Jun 25 07:45:19 majoron sshd[22182]: Disconnected from invalid user bdl 164.68.111.13 port 48970 [preauth] Jun 25 08:00:48 majoron sshd[22534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.111.13 user=r.r Jun 25 08:00:50 majoron sshd[22534]: Failed password for r.r from 164.68.111.13 port 57576 ssh2 Jun 25 08:00:50 majoron sshd[22534]: Received disconnect from 164.68.111.13 port 57576:11: Bye Bye [preauth] Jun 25 08:00:50 majoron sshd[22534]: Di........ ------------------------------ |
2020-06-28 01:49:48 |
| 113.177.128.118 | attackbots | SSHD brute force attack detected by fail2ban |
2020-06-28 01:38:08 |
| 141.98.10.200 | attack | Jun 27 18:23:19 tuxlinux sshd[30311]: Invalid user NetLinx from 141.98.10.200 port 41371 Jun 27 18:23:19 tuxlinux sshd[30311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.10.200 Jun 27 18:23:19 tuxlinux sshd[30311]: Invalid user NetLinx from 141.98.10.200 port 41371 Jun 27 18:23:19 tuxlinux sshd[30311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.10.200 Jun 27 18:23:19 tuxlinux sshd[30311]: Invalid user NetLinx from 141.98.10.200 port 41371 Jun 27 18:23:19 tuxlinux sshd[30311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.10.200 Jun 27 18:23:21 tuxlinux sshd[30311]: Failed password for invalid user NetLinx from 141.98.10.200 port 41371 ssh2 ... |
2020-06-28 02:04:34 |
| 192.241.224.50 | attackbotsspam | IP 192.241.224.50 attacked honeypot on port: 1521 at 6/27/2020 7:21:34 AM |
2020-06-28 01:44:47 |
| 218.92.0.246 | attack | Jun 27 19:15:59 OPSO sshd\[2203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.246 user=root Jun 27 19:16:00 OPSO sshd\[2203\]: Failed password for root from 218.92.0.246 port 22783 ssh2 Jun 27 19:16:04 OPSO sshd\[2203\]: Failed password for root from 218.92.0.246 port 22783 ssh2 Jun 27 19:16:06 OPSO sshd\[2203\]: Failed password for root from 218.92.0.246 port 22783 ssh2 Jun 27 19:16:09 OPSO sshd\[2203\]: Failed password for root from 218.92.0.246 port 22783 ssh2 |
2020-06-28 01:32:36 |
| 41.139.132.238 | attackspambots | Dovecot Invalid User Login Attempt. |
2020-06-28 01:47:35 |
| 46.102.49.90 | attack | (Jun 27) LEN=40 TTL=243 ID=28382 DF TCP DPT=23 WINDOW=14600 SYN (Jun 27) LEN=40 TTL=243 ID=11754 DF TCP DPT=23 WINDOW=14600 SYN (Jun 27) LEN=40 TTL=243 ID=21382 DF TCP DPT=23 WINDOW=14600 SYN (Jun 27) LEN=40 TTL=243 ID=40388 DF TCP DPT=23 WINDOW=14600 SYN (Jun 26) LEN=40 TTL=243 ID=34930 DF TCP DPT=23 WINDOW=14600 SYN (Jun 26) LEN=40 TTL=243 ID=46288 DF TCP DPT=23 WINDOW=14600 SYN (Jun 26) LEN=40 TTL=243 ID=52907 DF TCP DPT=23 WINDOW=14600 SYN (Jun 26) LEN=40 TTL=243 ID=48712 DF TCP DPT=23 WINDOW=14600 SYN (Jun 26) LEN=40 TTL=243 ID=55241 DF TCP DPT=23 WINDOW=14600 SYN (Jun 26) LEN=40 TTL=243 ID=3201 DF TCP DPT=23 WINDOW=14600 SYN |
2020-06-28 02:06:50 |
| 193.8.82.84 | attackbotsspam | 2020-06-27T23:37:01.875935hostname sshd[10983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.8.82.84 2020-06-27T23:37:01.826238hostname sshd[10983]: Invalid user alberto from 193.8.82.84 port 33686 2020-06-27T23:37:03.877782hostname sshd[10983]: Failed password for invalid user alberto from 193.8.82.84 port 33686 ssh2 ... |
2020-06-28 01:47:12 |
| 59.126.47.190 | attack | Port Scan detected! ... |
2020-06-28 01:31:33 |
| 14.177.234.58 | attack | failed_logins |
2020-06-28 02:04:49 |